You should also look at the grsecurity kernel patch: http://grsecurity.net http://grsecurity.net It can really help to harden a system by making it much, much

You should also look at the grsecurity kernel patch: http://grsecurity.net http://grsecurity.net It can really help to harden a system by making it much, much harder to exploit buffer overflows, making it impossible for users to see any processes other than their own etc. It's a great kernel patch and I highly recommend it.