This effort to harden the Linux kernel is not new. Kees made a very similar presentation at the Kernel Summit last year[1] and it was quite well received. A

This effort to harden the Linux kernel is not new. Kees made a very similar presentation at the Kernel Summit last year[1] and it was quite well received. After his presentation, the kernel-hardening mailing list was revived, and new features to add additional hardening to the kernel has been rolling into Linux for the last couple of releases. There are engineers from multiple vendors collaborating on this project, and they have been using the kernel-hardening list for traffic control and for an initial review of the patches before asking that they be pulled. The progress section of this LWN article[3] shows that they've been quite successful so far --- or perhaps, it would be more accurate to say they've made a good start. [1] https://lwn.net/Articles/662219/ [2] http://www.openwall.com/lists/kernel-hardening/ [3] https://lwn.net/Articles/698827/