TODO
- - test with perl, python, apache2 (no test), php5, postgresql8.1, glib2.0, gtk+2.0, glibc, xorg, kernel -- talk to spengler about breaking up the grsec patch -- MAC: appendable-only log files, better shadow protection, r/o systemwide binary directories -- PIE, ASLR, FORTIFY_SOURCE? -- look into firewall status -- look into capability inheritance in grsec (porting effort)