Comment 27 for bug 1438758

Note that for upstream I'd also like to integrate the exploit into the tests. I ported the exploit to python and to apport's tests and simplified it a bit. It can be run by itself with

  test/run signal_crashes.test_ns_forward_privilege