CVE:CVE-2016-7545
CNNVD:CNNVD-201609-615
SELinux（Security-Enhanced Linux）是美国国家安全局（NSA）和SCC（Secure Computing Corporation）共同开发的一个基于Linux系统的强制访问控制安全模块。policycoreutils是SELinux的核心策略工具。
SELinux policycoreutils中存在安全漏洞。本地攻击者可借助特制的TIOCSTI ioctl调用利用该漏洞执行任意命令。
solution:Upgrade selinux_project selinux to a higher version than -; Upgrade fedoraproject fedora to a higher version than 25,and avoid the version 25; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,and avoid the version 7.3; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0