Unfortunately trying to separate feature from fix work didn't work as a process from the kernel developers perspective
And that, right there, is the single core problem with Linux security.
Security is hard. It means more pain during development. Separating fixes and features is a pain in the ass. But if it doesn't get done, you end up in the snarl they're in now.
Even the developers themselves can't provide secure shared access to a single Linux kernel image. How can anyone else expect to?
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds