Summary

The default Dapper Drake installation is a good start for a secure system. Although it does reduce risks from remote attackers, it is vulnerable to local data exposure. Restricting root access, encrypting files, and removing unnecessary files all provide additional security. Tools such as Sudo, GPG, and EncFS help protect files and access, while savelog and logrotate manage files that would otherwise grow without bounds.