selinux-notebook

SELinux 笔记本 简介 SELinux 笔记本是一本关于 SELinux 的开源书籍，最初由 Richard Haines 创建并捐赠给 SELinux 社区。该笔记本的目标是成为关于 SELinux 的最新、最全面的书籍，涵盖 Linux 内核组件、用户空间库和工具、策略工具链以及策略本身。 SELinux 笔记本是免费提供的，欢迎并鼓励社区贡献！ 为 SELinux 笔记本做贡献 直接在 GitHub 上查看笔记本 SELinux 笔记本有多种格式，其中包括一种可直接在 GitHub 上查看的在线格式，每次浏览一个章节，从以下链接开始： SELinux 笔记本 离线查看笔记本 ...

CVE-2026-43024

A flaw was found in the Linux kernel's netfilter nftables component. This vulnerability arises from the system allowing immediate NFQUEUE verdicts, which are not intended for use by userspace nft tools. This could lead to unexpected behavior or a bypass of intended network filtering rules,...

USN-3730-1: LXC vulnerability

Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic utility. A local attacker could possibly use this issue to open arbitrary files...

USN-3136-1: LXC vulnerability

Roman Fiedler discovered a directory traversal flaw in lxc-attach. An attacker with access to an LXC container could exploit this flaw to access files outside of the container...

Debian DSA-3070-1 : kfreebsd-9 - security update

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or information disclosure. - CVE-2014-3711 Denial of service through memory leak in sandboxed namei lookups. - CVE-2014-3952 Kernel memory disclosure in sockbuf control messages. - CVE-2014-395...

[SECURITY] Fedora 9 Update: dahdi-tools-2.0.0-1.fc9

DAHDI stands for Digium Asterisk Hardware Device Interface. This package contains the userspace tools to configure the DAHDI kernel modules. DAHDI is the replacement for Zaptel, which must be renamed due to trademark issues...

[SECURITY] Fedora 7 Update: fuse-2.7.0-5.fc7

With FUSE it is possible to implement a fully functional filesystem in a userspace program. This package contains the FUSE userspace tools to mount a FUSE filesystem. Note: For security reasons only members of the group "fuse" are allowed to umount fuse filesystems. You can find more details on...