At a time when faith in open source code has been rocked by an outbreak of attacks based on the Shellshock and Heartbleed vulnerabilities, it’s time to revisit what we know about Linux security. Linux is so widely used in enterprise IT, and deep inside Internet apps and operations, that any surprises related to Linux security would have painful ramifications.
In 2007, Andrew Morton, a no-nonsense colleague of Linus Torvalds known as the “colonel of the kernel,” called for developers to spend time removing defects and vulnerabilities. “I would like to see people spend more time fixing bugs and less time on new features. That’s my personal opinion,” he said in an interview at the time.