Plash is a sandbox for running GNU/Linux programs with minimum privileges. It is suitable for running both command line and GUI programs. It can dynamically grant Gtk-based GUI applications access rights to individual files that you want to open or edit. This happens transparently through the Open/Save file chooser dialog box, by replacing GtkFileChooserDialog. Plash virtualizes the file namespace and provides per-process/per-sandbox namespaces. It can grant processes read-only or read-write access to specific files and directories, mapped at any point in the filesystem namespace. It does not require modifications to the Linux kernel.
kernbench is a CPU throughput benchmark. It is designed to compare kernels on the same machine, or to compare hardware. It runs a kernel compile at various numbers of concurrent jobs: 1/2 number of CPUs, optimal (default is 4xnumber of CPUs), and maximal job count. Optionally it can also run single threaded. It then prints out a number of useful statistics for the average of each group of runs.
Thinux is a thin-client server on a live CD. It boots a network of diskless computers to automatically start an application such as a Web browser. Each thin client machine acts as a cluster node to share its processing and memory resources with each other to take the load off the server. It is a turnkey solution that does not change nor rely on your existing systems to run. By booting from a removable CD, it does not lock-in the user so it is convenient to test. It is ideal for any organizations that require large deployment of software automatically and cost effectively.
Hotplug lets you plug in new devices and use them immediately. That means that users won't need to learn so much system administration, since the Linux system will at least partially autoconfigure itself. Initially, hotplug included support for USB and PCI (Cardbus) devices, and could automatically configure some common network interfaces. Updated versions include IEEE 1394 (Firewire/i.Link) support and can download firmware to USB devices that need it.
Firewall is a set of scripts (firewall, fwup, and fwdown) that implement an ipchains firewall and various forms of network address and port translation. All you have to do is read the policy file and edit it to reflect your topology and filtering policy. It supports many different types of network topology (single host, traditional forwarding, masquerading, port forwarding, alias port forwarding and NAT), up to 10 untrusted interfaces each with their own policy, and over 50 network applications. It also supports centralised administration of multiple remote firewalls (meta-firewall).