Re: Upcoming time boundary events

On Thu, 05 Jun 2025 10:44:51 +0200, Marc Van Dyck wrote:

Lawrence D'Oliveiro laid this down on his screen :

>
Basic security should be built into the core OS installation, not added
as an afterthought -- and an extra-cost one at that.

 
There are already many security features available in OpenVMS. More than
what many people need. There must be a trade-off. Building more stuff
into the OS means that more customers pay for features they don't need.

Look at what comes standard in the Linux kernel: cgroups, namespaces,
containers, virtualization, SELinux, AppArmor, the whole pluggable LSM
mechanism, seccomp, netfilter, EBPF ... and that’s just off the top of my
head.

That should be just the baseline for the kind of security that comes in
the box.