http://secure45nbquibuw6thmenrfamhobdkkrllgxrtayn4sgmnexremexyd.onion/guides/linux-hardening.html
For example, if using sudo , add
a sudoers exception by executing: visudo -f /etc/sudoers.d/admin-account Now enter: admin ALL=(ALL) ALL Make sure that no other account has access to sudo (or your preferred mechanism). Now, to actually login to this account, reboot first — this prevents, for example, a compromised window manager from performing login spoofing .