lcap 0.0.6-3.1 (i386 binary) in ubuntu dapper

Removes 'capabilities' in the kernel, making the system more secure
 Capabilities are a form of kernel-based access control. This program
 provides a user-friendlier way than setting proc/sys/kernel/cap-bound by hand
 to remove capabilities from your Linux kernel.
 .
 For example, you can remove the capability to load kernel modules by executing
 'lcap CAP_SYS_MODULE' as root. Then no one, not even root, can load modules
 into your kernel. This can be useful for tightening the security of your
 Linux machines.