cross-posted from: https://lemmy.ml/post/1139593

NFL is really the only league that doesn't suffer from the problem of regional sports networks. Hopefully with the recent bankruptcy ruling against Diamond/Bally Sports, the other major sports leagues can move to a direct to consumer model so fans can actually watch their local team without spending $150/month or blackouts.

[–] 0 points 3 years ago* (last edited 3 years ago) (1 child)

That's a really interesting bypass; I wonder how this can be patched or mitigated considering the module is entirely loaded from memory. Short of setting noexec on temporary directories, I can't think of any quick short term fixes.

Edit: Re-read the blog post and looked at the Github repo for the code- looks like this is more of a proof of concept of a SELinux confine bypass, as the kernel needs to be compiled with CONFIG_SECURITY_SELINUX_DEVELOP set. See the readme here, there's some more notes that weren't included in the blog post.

  • source
  • view more: next ›