During Zabbix installation from RPM, DAC_OVERRIDE SELinux...
High severity
Unreviewed
Published
Jan 14, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 13, 2022
Published to the GitHub Advisory Database
Jan 14, 2022
Last updated
Feb 3, 2023
During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level
References