Disabling LKM in Debian GNU/Linux

This instruction is applicable to Etch (4.x).
You may want to do this on your public servers to help keep off LKM trojan.

apt-get install lcap
lcap -c CAP_SYS_MODULE

There are more tips at Taking Advantage of Linux Capabilities.