Security Checklist (individual systems)

• File System

• Define restrictive umask settings.

• Eliminate setuid whenever possible.

• Force read-only mounts where possible.

• Implement periodic checking of setuid and setgid files.

• Maintain test list cksum (with checksums) of programs and critical directories.