?Just a last: saying that it's to "the developers to take responsibility for the security of the kernel" is quite un-realistic, as actually no end-user license grant any "responsability" for security of delivered products. I don't say that it's right, but that's the real world.?

I mean personal responsibility, not legal responsibility.

The developers need to step up to the plate, and start making the security of the Linux kernel (including code quality, integrated security features, and vulnerability researcher correspondence) a priority.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/296/30360#30360