according to
(
)
System hardening
Configuration recommendations of a GNU/LINUX system (ANSSI)