LWN: Reactive vs. pro-active kernel security

Hi,

Last week's LWN has a story on the kernel hardening work by Vasiliy, Kees, and Dan - as well as on the difficulty in getting such patches accepted upstream:

http://lwn.net/Articles/451405/

Of interest are the links to similar LWN stories on things that Kees and Dan worked on (which Vasiliy thus excluded from his GSoC work so far). These were symlink in +t directory hardening and kernel address non-leaks.

Alexander