Security

live code

You are responsible for checking the changes to code which you make on the live site, including code from other people which has been committed to CVS.

Eliminating use of passwords for logins/sudo/su

Should password logins be disabled altogether? They aren't strictly necessary at any time except during OS installation.