Are you arguing in favour of MAC-frameworks or capability-based kernels? Because if you'd like MAC both Linux and OpenBSD have them. The post mentions the unvei

Are you arguing in favour of MAC-frameworks or capability-based kernels? Because if you'd like MAC both Linux and OpenBSD have them. The post mentions the unveil[1] syscall, Linux has the Security Modules[2]. If you'd like capability-based kernels instead, then you're wishing for Zircon[3] to get traction. [1]: https://man.openbsd.org/unveil https://man.openbsd.org/unveil [2]: https://www.kernel.org/doc/html/latest/admin-guide/LSM/index.html https://www.kernel.org/doc/html/latest/admin-guide/LSM/index... [3]: https://fuchsia.googlesource.com/zircon https://fuchsia.googlesource.com/zircon