> Leo, > > Those machines should be prevented from running arbitrary code. > You don't have untrusted folks logging in do you ? Yes. > You don't log in without ssh do you? Yes. > You don't run untrusted, unneeded network listeners on those machines do you? Not often. > If you do these things yes, you should be shot. D'oh!