Candidate: CVE-2006-1052 References: http://marc.theaimsgroup.com/?l=selinux&m=114226465106131&w=2 http://marc.theaimsgroup.com/?l=git-commits-head&m=114210002712363&w=2 http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/ Description: The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process. Notes: Bugs: upstream: released (2.6.16) linux-2.6: released (2.6.16-1) 2.6.8-sarge-security: released (2.6.8-16sarge5) [selinux-tracer-SID-fix.dpatch] 2.4.27-sarge-security: N/A