You may want to look into Hardened Gentoo which does things along the lines you suggest, amongst other hardening techniques.

http://www.gentoo.org/proj/en/hardened/