In traditional Linux security, we have long operated under a grim binary: you are either protected, or the attacker has root. We’ve been taught that once an adversary achieves that # prompt, the game ...