NCSA Common Puppet Profile - miscellaneous security hardening - View it on GitHub