"One of the things I like to implement, is kernel patches.
My favourite is the one from the OpenWall Project."
"I will go over the installation of that right now. First, get
the file appropriate for your kernel version. If you do not know
how to compile a kernel, or are running 2.2.15 or less, upgrade to
2.2.16, there is a capabilities bug that can lead to a local root