What next?

[Arjan van de Ven]

> * more security features a la ExecShield

5 things come to mind as more details
* stackguard equivalent (patch posted for gcc inclusion already)
* per user /tmp via namespace tricks
* more selinux "execmem"
* more selinux targeted protection
* Better selinux/security GUI 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20050601/cb5c8530/attachment-0002.bin