http://www.valent-blog.eu/2009/11/09/hardening-linux/