And why isn't there a single command line script to do all this for you?<p>The point of course is that if we want security to be taken seriously by users - even sophisticated users who run their own Linux servers - then we must make this kind of stuff brain dead simple to setup and maintain.<p>And yes, of course most of us can actually write the script to do this, but the point is that we should not have to.