For those of us who compile our own kernels (2.6.35 just came out a few days ago), we can turn off a lot of code that for devices and facilities we don’t need. This limits the attack horizon and reduces system overhead.
Just noticed that kernal update on my Arch system,have been holding off downloading it till I find out more
That sounds good about the ability to turn off things not needed