locking down a SuSE install