enable privacy extensions allow using a randomly generated IPv6 address.
restrict userspace addresses.
set more secure kernel settings (recommended by lynis).
set net.ipv4.tcp_sack to 1 (reduces cpu load).
disable the magic SysRq keys.
dont try to redirect rsyslog messages to tty12.
dont try to blacklist ipv6 modules, boot with disable.ipv6=1 to disable the whole ipv6 kernel stack.
set default umask to 027 in /etc/login.defs file.
install openssh-server in custom-server-setup (code moved).
Release new package version.
dont depend on ntp or bootlogd; moved to dpl-console metapackages.
Revert "set default umask to 027 in /etc/login.defs file."

This reverts commit 628c561311633b39be86e597751464f40a70727c.
set default umask to 077 for privacy in /etc/profile.d/
Release new package version.
Revert "set default umask to 077 for privacy in /etc/profile.d/"

This reverts commit 23dd5d94c6c4e3fd52aba4fd758df651c98537c2.
Revert "Revert "set default umask to 027 in /etc/login.defs file.""

This reverts commit 9cca2eb8df899e88fe53649fe2f3d66966075517.
activate the umask module in /etc/pam.d/common-sessions to apply the new umask set in /etc/login.defs.
remove file leftover from previous package version.
set the core dump mode for setuid in sysctl (kernel.suid_dumpable=2).
dont enable net.ipv4.tcp_syncookies, it disables TCP window scaling.