Securing enterprise Linux desktops against hostile code has gotten easier, thanks to Ingo Molnar’s work on the NX enabler patch in Linux kernel 2.6.8 and processor-based, page protection mechanisms. The trick is in the execution, and, as usual, the Microsoft way probably is not the right choice.
