Here is a interesting product.

Trying to see if anyone has used it

http://www.lids.org/

This was featured in a article:

http://www.securityfocus.com/infocus/1539

Let me know thoughts

Joe

I've used it in the past, but I don't use it anymore. This is not a kernel patch for newbies to use. I'd only recommend installing this patch if you have console access, or don't mind paying your colo place to fix something if something goes wrong. I say this because it disables some "features" and such like i/o memory allocation to be unusable, even by root. If you take your time and read on all the features of it and only use what you want to use then its a good patch. I'm more of a fan of the grsecurity kernel patch

Mike

LIDS is great, but try not to accidentally lock you out of the system. :D