On: Securing an Ubuntu Server

[muppetman]

You should also look at the grsecurity kernel patch:

http://grsecurity.net

It can really help to harden a system by making it much, much harder to exploit buffer overflows, making it impossible for users to see any processes other than their own etc. It's a great kernel patch and I highly recommend it.