Security Rules

• Never turn a pointer to a kernel-space object over to user-space, per Al Viro. Doing this makes like easier for root-kit installers. Exception: function that "do stuff" and then panic().