You should also check that mountpoints like external disks and network resources aren't publicly accessible to other users than your own.