Malware running as a normal user can't put itself in a position where it's hidden from software running as root. Preserving system integrity was my point. The

Malware running as a normal user can't put itself in a position where it's hidden from software running as root. Preserving system integrity was my point. The patch in the original article is about preserving system integrity in the face of a compromised root account and the only way of doing that is by limiting the capabilities of the root user. It adds one more and hopefully final level of defense in order to guarantee system integrity.