Linus Torvalds has signed off on a new optional feature for Linux that locks down the kernel much earlier in the boot process than was previously the case. The new module LSM (Linux Security Module) has two lockdown modes, called “integrity” and “confidentiality” Each restricts access to a different portion of the kernel’s functionality. When enabled, the root user will not be able to affect the kernel the same way it currently can. This means that a compromised Linux root user account will then lose much of its luster to attackers.”]