Hardened box type vs. security issues.

[bastik-1001]

Considering the previous security issues, how well would have the hardened box type be able to mitigate the attempts to make use of them? Obviously generally speaking, since they aren't all similar.

As most of them required a process to be elevated and/or used syscalls that were not or not properly filtered, the hardened box type, should do a lot against those issues being abused. The hardened box type, enables dropping of rights and only allows approved syscalls to be made. This should be helpful, right?