Bastille (http://bastille-linux.org/) is a great thing to check out, as it is pretty comprehensive. It gets into changing file permissions, restricting access of certain commands to root, and a lot more. I would try it on a *second* machine, if one is available, just to get a feel for what it does, before running it on a box you really need. Daniel