HOW TO IMPROVE SECURITY OF A GNU INSTALLATION
Mount /home nosuid, nodev
Mount /tmp nosuid, noexec, nodev
Restrict the su command to members of group wheel
View or Create new Documents on Wiki