Locking Down Linux User Accounts, Filesystems, and Services