Austin Donnelly writes ("Bug#3182: cron's checksecurity runs find on NFS mounted filesystems"):
...
> However, it is possible that you may want to check some NFS server. A
> better test would be to ignore nfs servers mounted read only.
Given that you're testing for set-id programs and devices, an better
test would be whether the server is mounted nodev and nosuid or not.
Ian.