iFrame:
	Apache: 
	Header always append X-Frame-Options SAMEORIGIN

	nginx:
	add_header X-Frame-Options SAMEORIGIN;

	wildfly:
	(in resposne headers)
	X-Frame-Options: SAMEORIGIN





Cert Errors: for pre-prod certs - get an internal Rapid SSL cert
IP Source Routing: AMI
	Resolution: /sbin/sysctl --help  | -a (to view) | -w [variable] (to modify)
	variable: 
			net.ipv4.conf.all.accept_source_route = 0
			net.ipv4.conf.all.forwarding = 0
			net.ipv4.conf.all.mc_forwarding = 0
			net.ipv4.conf.default.accept_source_route = 0
			net.ipv4.conf.default.forwarding = 0
			net.ipv4.conf.default.mc_forwarding = 0
GRUB: AMI
ICMP Re-Routing: AMI
	Resolution: /sbin/sysctl --help | -a (to view) | -w [variable] (to modify)
	Variable(s): 	net.ipv4.conf.all.accept_redirects = 0
			net.ipv4.conf.default.accept_redirects = 0
			net.ipv4.conf.all.secure_redirects = 0
			net.ipv4.conf.default.secure_redirects = 0	


Java: AMI (waiting on Enterprise Agreement)

Root Login, Anonymous: issues with terminal access: TTY
	Resolution: 	nano /etc/securetty 
			should only contain: console, tty[0-9]*, and vc\[0-9]*
	note: 		ssh does no use /etc/securetty. to disable root login via ssh, use the "PermitRootLogin" setting in /etc/ssh/sshd_config and restart ssh daemon



GRUB, enable password
	may be located here: /etc/grub.conf | /boot/grub/grub.conf | /boot/grub/menu.lst
	Resolution:	run grub-md5-crypt (take output, and place here, inside grub.conf)
			passwod --md5 <encryptedpassword>

Linux, find orphaned files
	Resolution: 	find /<directory> -xdev \( -nouser -o -nogroup \) -print
			delete or modify with chown

Linux, restrict home directory mode/access
	Resolution:	chmod 750 <userDir>