how about a compiler? normally, all soft on it is compiled by hand, but
it is also "necessary" for a local exploit.
If you don't install a compiler, make sure users can't upload precompiled compilers :)
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html