[ENG] Tycho Andersen (Cisco Systems): Hardening an Application-specific Linux / #LinuxPiter

Hardening an Application-specific Linux Linux distributions go to great lengths to do general purpose hardening of their kernels, packages, and configurations. They build with various source fortification and hardening flags, and then upstream patches to fix various bugs that compilers or other static analysis/source fortification warn about. These are extremely valuable when it comes to operating system hardening. But suppose you are building what is essentially an application-specific Linux, or an “appl