What about stack-smashing protection, address space layout randomization, maybe executable space protection (for machines without nx-bit too) etc. ?
OpenSolaris could become a good solution for high-security systems (replacing things like OpenBSD, Hardened Gentoo etc.). This message posted from opensolaris.org