Linux Security Module

LSM is the the future of alternative Linux security models.

Development currently occuring in 2.5 kernels
Available as a patch for 2.4 kernels
Allows LSM-aware modules to be loaded and unloaded from any LSM-enabled kernel
No need to recompile your kernel
Can make it easier to support multiple security models
Many advanced kernel security patches ported to LSM now
Superuser privs
Capabilities
Domain and Type Enforcement
LIDS
SELinux
OpenWall kernel patches
Others 'on their way'...