A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context. This issue affects policycoreutils through 3.10. The vulnerability has significant implications for system administrators and security teams, as it could potentially allow users to disrupt system operations. To [truncated]
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in seunshare of selinux policycoreutils. This allows a user running seunshare in an unconfined SELinux domain to delete arbitrary files owned by root. The issue affects policycoreutils through version 3.10. System administrators and security teams should assess exposure and prioritize verification and potential remediation, particula [truncated]
