Found 1 bookmarks
Custom sorting
Bypassing SELinux with init_module
Bypassing SELinux with init_module
There are two Linux system calls for loading a kernel module - init_module and finit_module. By leveraging init_module, I bypassed a filesystem-based SELinux rule that prevented me from loading a kernel module through traditional means (e.g., insmod). I then disabled SELinux from kernel-space. Proof of concept code can be found on my GitHub.
·seanpesce.blogspot.com·
Bypassing SELinux with init_module