14. System hardening

Run:

find / -perm +4000 -print

And decide for yourself what command really needs a suid-bit.