[yarrel]

"SELinux does not block the exploit"

Of course not. The exploit doesn't come in coloring book form.

[walterbell]

> "SELinux does not block the exploit but it would prevent escalation of confined domains."

Not as easy to color the unabbreviated quote, since understanding the omitted text would require reading the article.

A production server would have strong confinement of domains, tailored to the production workload.