> The rootkit now disables SELinux enforcing mode on-demand when the ICMP reverse shell is triggered, leaving zero audit logs.
Is this independent of the Linux Security Modules policy, e.g. RHEL default policy for SE Linux?
Is this independent of the Linux Security Modules policy, e.g. RHEL default policy for SE Linux?
No comments yet.