grsecurity

This release features role-based access control allowing user,
group, and special roles, role transition tables, IP-based roles,
non-root access to special roles, and special roles that require
no authentication. It supports finer-grained object permissions
as well as kernel interpretation of inheritance and globbed
objects. Full pathnames for the offending process and parent
process are included in all logs. It is able to produce least
privilege policies for the entire system with no configuration.