It's also worth looking at Cfengine to ensure that your hardening changes stay in place after you initially set them.
-- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20101124125044.gb5...@watson-wilon.ca