A lot of research has been made in this direction by the PaX team/brad spender of grsecurity. In fact, many of these techniques were first implemented on modern kernels by that bunch. However, political moves have always clouded that -- pax/grsec is run as a project of passion and not as a day job, and therefore there has always been reluctance to deal with those (and get involved in sometimes very territorial code review/maintenance sessions).
Unfortunately, by not really crediting or even acknowledging this research (and also ignoring a lot of work thats been happening in academia on hardening commodity kernels and applications), the Linux kernel is a)playing catch up to other operating systems (instead of adapting newer techniques) and b) alienating researchers even further.
Unfortunately, by not really crediting or even acknowledging this research (and also ignoring a lot of work thats been happening in academia on hardening commodity kernels and applications), the Linux kernel is a)playing catch up to other operating systems (instead of adapting newer techniques) and b) alienating researchers even further.