anchor.diff:  f_cron
   f_ctrlaltdel
   f_auditd
  -f_psad
   f_aide
   f_rhosts
   f_users
  
positive.code: 
  === Function list
  
  ==== 01_pre
  Setup script, sets APT flags and permission checks.
  
  ==== 02_firewall
  Enable `ufw`, use `/etc/sysctl.conf`, prepare to `psad`, and allow port 22 from `$FW_ADMIN`.
  
  ==== 03_disablenet
  Disable `dccp` `sctp` `rds` `tipc` protocols.
  
  ==== 04_disablemnt
  Disable `cramfs` `freevxfs` `jffs2` `hfs` `hfsplus` `udf` `vfat` file systems.
  
  ==== 05_systemdconf
  Disable coredumps and crash shells, set `DefaultLimitNOFILE` and
  `DefaultLimitNPROC` to 1024.
  
  ==== 06_journalctl
  Compress logs, forward to syslog and make log storage persistent. Ensure rsyslog
  writes logs with stricter permissions.
  
  ==== 07_timesyncd
  Add four NTP-servers with a latency < 50ms from `$NTPSERVERPOOL`.
  
  ==== 08_fstab
  Configure `/tmp/` and `/var/tmp/`. Remove floppy drivers from `/etc/fstab`
  and add `hidepid=2` to `/proc`.
  
  ==== 09_prelink
  Undo prelinking, and remove `prelink` package.
  
  ==== 10_aptget
  Configure `dpkg` and `apt-get`. `apt-get` update and upgrade.
  
  ==== 11_hosts
  `/etc/hosts.allow` and `/etc/hosts.deny` restrictions.
  
  ==== 12_logindefs
  Modify `/etc/login.defs`, e.g. `UMASK`, password age limits and
  `SHA_CRYPT_MAX_ROUNDS`.
  
  ==== 13_sysctl
  Update `$SYSCTL` with `$SYSCTL_CONF`.
  
  ==== 14_limits
  Set hard and soft limits.
  
  ==== 15_adduser
  Configure `useradd` and `adduser` to set `/bin/false` as default shell,
  home directory permissions to `0750` and lock users 30 days after password
  expires.
  
  ==== 16_rootaccess
  Limit `/etc/securetty` to `console`, and `root` from 127.0.0.1 in
  `/etc/security/access.conf`.
  
  ==== 17_packages
  Installs `acct` `aide-common` `apparmor-profiles` `apparmor-utils` `auditd`
  `audispd-plugins` `debsums` `gnupg2` `haveged`
  `libpam-apparmor` `libpam-pwquality` `libpam-tmpdir` `needrestart`
  
negative.code: `popularity-contest` `rsh*` `rsync` `talk*` `telnet*` `tftp*` `whoopsie`
  `xinetd` `yp-tools` `ypbind`.
  
  ==== sshdconfig
  Configure the `OpenSSH`-daemon.
  
  ==== password
  Configure `pam_pwquality.so` and `pam_tally2.so`.
  
  ==== cron
  Allow `root` to use `cron`. Mask `atd`.
  
  ==== ctraltdel
  Disable Ctrl-alt-delete.
  
  ==== auditd
  Configure `auditd`, use `$AUDITD_RULES` and set failure mode `$AUDITD_MODE`.
  
  ==== disablemod
  Disable `bluetooth` `bnep` `btusb` `cpia2` `firewire-core` `floppy` `n_hdlc`
  `net-pf-31` `pcspkr` `soundcore` `thunderbolt` `usb-midi` `usb-storage`
  `uvcvideo` `v4l2_common` kernel modules.
  