policycoreutils vulnerabilities

A TOCTOU race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script uses find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker could exploit the race window between file discovery and label change by swapping directory components with symlinks, causing chcon to follow the symlink and modify SELinux labels on arbitrary system files, potentially undermining SELinux protections on critical files like /etc/shadow.

In the seunshares tool from the selinux policycoreutils package, a missing authorization vulnerability allows a user running in an unconfined context to kill root-owned processes also running in an unconfined context. This issue affects policycoreutils through version 3.10.

In the seunshare tool of selinux policycoreutils, there is a TOCTOU (Time-of-check Time-of-use) race condition vulnerability. A user running seunshare in the unconfined SELinux domain can delete arbitrary root-owned files. This affects policycoreutils up to version 3.10.