selinux & grc do that automatically. lynis give 'suggestion' & tweaking without know what you do , break the security/anonymity/privacy.