Bastille lets us strip the SUID bit on about half of the SUID programs on a Red Hat 6.x or Mandrake system. However if this is a server you should probably say yes. We'll also leave ping and traceroute active, so ordinary users can test network connectivity. These are really not needed however, so feel free to turn them off if you are worried about security. We'll strip the SUID bit from dump and restore, which are used for system backups.
Root can take care of system backups.
We'll also rip SUID status off of at, because it has had a rich history of security problems. You can achieve all the same functionality with cron, so this is safe. Dosemu is a DOS emulator for Linux and, as such, is very open to manipulation by the user. Ordinary users can read news without needing to be able to start a news server, especially since you should be using Rutgers news server. We are going to turn off the SUID bit on the printing utilities, though you should enable these if your machine will be used for printing.