Setting capabilities insted of SUID

Modify su pam setup to get in without password and wheel group

A lsit of usual sysctl security setting to check

Setup auditd and watch  if a file gets modified or opend

Security resources to look for