I am running DSO with mod_ruid2 (with Nginx Admin for front end reverse proxy, plus APC caching). This configuration is running smoothly, and many thanks to KnownHost's support group for installing and setting it up on my SSD-2 VPS. mod_ruid2 does some good stuff, increasing security when running DSO. But I have read comments here and there that mod_ruid2 might still have a few security vulnerabilities (that suPHP does not have). While I don't really understand what the vulnerabilities are, I thought I would look into ways to further improve security. grsecurity is mentioned in quite a few places, and has been widely used for 10+ years. Does anyone on the forum have any experience using grsecurity? Are there any performance hits by using it? Thanks!