Description
The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active.
References
- ADV-2006-0199 vdb-entry
- grsecurity-rbac-admin-privileges(24156) vdb-entry
- 16261 vdb-entry
- http://www.grsecurity.org/news.php#grsec218
- 18458 third-party-advisory