Sean Yamamoto used to have some good material on stuff like this. I don't know about the updating to the most recent kernel, but I would really like to see some basic information on how to increase system security as you transition from a dev server to a "production" linux/postgres/openacs system. Specifically what services to disable, how/why to recompile the kernel, firewall issues, etc.
Thanks,
