You need to harden Linux: https://github.com/trimstray/the-practical-linux-hardening-g...