anchor.diff:  Set `/bin/false` as default shell when adding users.
   
   ==== 16_rootaccess
  -Limit `/etc/securetty` to `console`, and `root` from 127.0.0.1 in `/etc/security/access.conf`
  +Limit `/etc/securetty` to `console`, and `root` from 127.0.0.1 in
  +`/etc/security/access.conf`.
   
   ==== 17_packages
   UBTU-16-010050, UBTU-16-010500, UBTU-16-010600
   
  -Installs `acct` `aide-common` `apparmor-profiles` `apparmor-utils` `auditd` `debsums`
  -`haveged` `libpam-apparmor` `libpam-cracklib` `libpam-tmpdir` `openssh-server`
  -`postfix` `rkhunter` `vlock`.
  +Installs `acct` `aide-common` `apparmor-profiles` `apparmor-utils` `auditd`
  +`debsums` `haveged` `libpam-apparmor` `libpam-cracklib` `libpam-tmpdir`
  +`openssh-server` `postfix` `rkhunter` `vlock`.
  +
  +Removes `avahi*` `beep` `popularity-contest` `rsh*` `talk*` `telnet*` `tftp*`
  +`yp-tools` `ypbind` `xinetd`.
   
   ==== 18_sshdconfig
   Configure the `OpenSSH`-daemon.
  
positive.code: ==== 23_disablemod
  CCE-27327-6, CCE-27277-3, UBTU-16-010580
  
  Disable `bluetooth` `bnep` `btusb` `firewire-core` `n_hdlc` `net-pf-31` `soundcore`
  `thunderbolt` `usb-midi` `usb-storage` kernel modules.
  
  ==== 24_aide
  CCE-27096-7, UBTU-16-020000, UBTU-16-020010
  
negative.code: Remove `suid` bits from `/bin/fusermount` `/bin/mount` `/bin/ping` `/bin/ping6`
  `/bin/su` `/bin/umount` `/usr/bin/bsd-write` `/usr/bin/chage` `/usr/bin/chfn`
  `/usr/bin/chsh` `/usr/bin/mlocate` `/usr/bin/mtr` `/usr/bin/newgrp`
  `/usr/bin/pkexec` `/usr/bin/traceroute6.iputils` `/usr/bin/wall`
  `/usr/sbin/pppd`.
  
  ==== 28_umask
  CCE-80202-5, UBTU-16-010060
  