What I understood is that in Linux you could program this kind of security tools in use space by having a somehow estable binary API. Sure, if you access the k

What I understood is that in Linux you could program this kind of security tools in use space by having a somehow estable binary API. Sure, if you access the kernel you can break it. So we should make easier to do the right thing. EU complained that Microsoft was the only one that could access the kernel because a lot of Microsoft applications needed kernel access.