grsecurity
grsecurity is an innovative approach to security utilizing a multi-layered detection, prevention, and containment model. It is licensed under the GPL. Its is an intelligent and robust Role-Based Access Control (RBAC) system that can generate least privilege policies for your entire system with no configuration. grsecurity reduces the risk of sensitive information being leaked by arbitrary-read kernel bugs.
Grsecurity includes several main features:
• Buffer overflow exploitation prevention from the PaX project
• Role-Based Access Control (RBAC)
• Randomization of Process IDs and in the TCP/IP stack
• Restricted viewing of processes
• Change root (chroot) hardening
• /tmp race vulnerability protection
For a complete list of grsecurity’s features, please visit
http://www.grsecurity.net/features.php
