Fork from: http://www.outflux.net/debian/hardening/