I only recently discovered molly-guard: http://packages.debian.org/sid/molly-guard http://packages.debian.org/sid/molly-guard which prevents you from running

I only recently discovered molly-guard: http://packages.debian.org/sid/molly-guard http://packages.debian.org/sid/molly-guard which prevents you from running halt/shutdown etc. via SSH without first confirming the hostname. I've done that before with pretty traumatic consequences, so it's now on my list of must-have's for any important remote box. http://www.catb.org/jargon/html/M/molly-guard.html http://www.catb.org/jargon/html/M/molly-guard.html