We wrote a blog post explaining how SELinux helps you with this sudo CVE. https://mgrepl.wordpress.com/2015/11/04/cve-2015-5602-and-selinux/ -- Miroslav Grepl Senior Software Engineer, SELinux Solutions Red Hat, Inc. -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux