Free UNIX techniques
chroot/jail
Unprivileged daemon accounts
Painful if you need fast code on port 80
Free security enhanced OSes:
OpenBSD, SELinux