Am I missing something? Isn't SELinux supposed to mitigate/stop the attacks described?