I’ve not had a chance to read through this in detail yet, but I was just sent a white paper from Corsaire about the security built into OSX (10.4 and 10.5) and some hardening guidelines. At first glance it looks like a good doc and might be worth a read.
Securing Mac OS X Leopard (10.5)
Their site also has some other white papers that are quite good.