Sorry I'm kind of desperate here :wall:, there's a security audit coming next week 
and I can't seem to find solutions for the questions below 
.
1) I need to limit usage on account during non-working hours.
There's no /etc/security/time.conf file in my system should I create it?
Is setting this setting sufficient?
login;*;user;!Al0000-0700
sshd;*;user;!Al0000-0700
rlogin;*;user;!Al0000-0700
login;*;user;!Al1800-2400
sshd;*;user;!Al1800-2400
rlogin;*;user;!Al1800-2400
login;*;user;!We0000-2400
sshd;*;user;!We0000-2400
rlogin;*;user;!We0000-2400
2) I need to set all system logs to a permission of 640 and to append only.
Is there a way to list all system logs? How do I set the log to append only?
3) I need to disable all .exrc files from running in my system. There is no /etc/environment in the system, should I assume that there is no global environment settings? Is there anyway I can ban running of .exrc files in my system through a global environment setting? Or do I have to set in each user's .profile
4) Is there a way to list all device files and terminal device files in the server?
5) I tried to list all suid/sgid files using this command.
find / \ ( -perm -4000 -o -perm -2000 \) -ls -o -fstype nfs -prune
Didn't seem to work, anything wrong with the command?
6) I need to set all removable media to noauto mount, how do I set it in /etc/vfstab?