Linux Intrusion Detection System (LIDS) and grsecurity

• Kernel patch and management programs

• Takes away the all-powerful nature of root

• Can 'seal' the kernel

• Can enforce file permissions and ACLs, even against root

• Limits capability for intruders to cause damage

• Verbose audit trail of malicious hacking