BOOT-5122
Set a password on GRUB boot loader
FILE-6310
To decrease the impact of a full filesystem, place /tmp on a separate partition
HRDN-7220
Consider installing a compiler-hardening toolkit
PKGS-7370
Install debsums utility for verification of packages
NETW-3200
Determine if protocol DCCP is really needed and disable otherwise