[egberts1]

This is the way.

Close all avenues, then only open what you exactly need.

[anon6362]

By default, Linux has way, way too much functionality, insufficient testing and proof of security correctness, and not enough security controls.