With regard to the Linux kernel, for example, their policy was to not look for vulnerabilities and only contribute features: Did you try to fix any vulnerabili

With regard to the Linux kernel, for example, their policy was to not look for vulnerabilities and only contribute features: Did you try to fix any vulnerabilities? No, we did not look for or find any vulnerabilities in the course of our work. We only changed enough to add our new mechanisms. http://www.nsa.gov/research/selinux/faqs.shtml#I16 http://www.nsa.gov/research/selinux/faqs.shtml#I16