Other security features that do not fit in any of the other pages are documented here.
Umasks control the default file permissions of newly created files. The default umask in Obscurix is set to 0077 in /etc/profile.d/umask.sh. This makes new files only readable by the owner.
Jitterentropy and haveged is installed by default to gather more entropy.