Kernel, filesystem, processes... everything that you didn't secure with SELinux policies (which you'd know if you did)