Solar Designer's secure Linux patch.

These are the main features:

 Non-executable user stack area
 Restricted links in /tmp
 Restricted pipes in /tmp
 Restricted /proc
 Special handling of fd 0, 1, and 2
 Privileged IP aliases
 ...and more.

http://www.false.com/security/linux/