The Good

• Extensive configuration
• Easy separation of critical system parts through use of virtual spaces
• Security dæmon control of file actions
• Forced code execution
• Supports POSIX capabilities

The Bad

• Still in development
• Testing on SMP machines not complete
• Automatic configurator needed
• Must be used as an add-on, i.e., not in kernel