At some point someone posted a good list of chflags commands to secure a
system? 
  I actually think that there was an mtree extension discussed? What is the
state of this?
  We have ugprade some firewalls from Linux to NetBSD. In addition, we are 
staging everything on one server with changes only permitted in single user
mode, a boot floppy with rsync on it does the rest. (Actually, three
floppies, but we'll cut a bootable CD later)

]      Out and about in Ottawa.    hmmm... beer.                |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [