Includes all the checks from the L3 Unix Server policy, and adds checks for which automated attack programs exist (for example, buffer overflow exploits), as well as exploits requiring more detailed knowledge by the attacker (an understanding of shell metacharacter use, for example).
This policy also detects if systems provide user account information that could be used in brute force login attacks.