Selinux: NSA's Open Source Security Enhanced Linux
Beating the 0-day Vulnerability Threat