I just responded in your other topic, if you're always at the console.. then those BSD flags are quite redundant, they do not protect against physical compromise.. paranoid file encryption and expensive locks on doors are the only way to do that.
There is no reason to disable services that are running by default, the ones that are running are critical to the functionality of the system.
If you're concerned about the reliability, make sure your firewall rules are sane.
|