Separation kernels aren't, MLS likely works best with kernel cooperation (given ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

vezzy-fnord on Nov 6, 2015 | parent | context | favorite | on: Grsecurity Developer Spender's Feelings on the Sta...

Separation kernels aren't, MLS likely works best with kernel cooperation (given Linux's large surface) and same with capabilities at least.

My point wasn't the specific proactive mitigations, but rather Linus' attitudes creating negative perceptions.

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact