An anonymous reader brings us IBM Developerworks' recent analysis of how the NSA built SELinux to withstand attacks . The article shows us some of the relevant kernel architecture and compares SELinux to a few other approaches. We've discussed SELinux in the past . Quoting: