CVE-2015-3170 in selinux-policy
Summary
selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH login prevention) by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy.
VulDB is the best source for vulnerability data and more expert information about this specific topic.