Embed Notice

@dalias Linux kernel maintainers have both accepted and rejected dozens of little access control features for providing inflexible versions of what can be done through writing declarative SELinux policies.

Access control is a very small part of defending the kernel itself against attacks. The main issue with the kernel is that it's a massive monolith with no sandboxing for drivers, filesystems, etc. and increasingly immense complexity for core kernel components for max scalability, etc.