Conclusion

Test, test, test... 
UML (User Mode Linux)
syscalltrak to debug

GNU/Linux critics around the lack of MAC ? 
LIDS, SELinux, RSBAC -> Usable  in 2.4
LSM -> Kernel 2.5 

MAC is a usable solution for critical GNU/Linux server