Debian
guest@6admin.io:~$ ls ~/tags/debian
Recompiling your kernel: bespoke kernels for your own infra
The deepest form of hardening by subtraction: compile your own kernel, strip at build time the subsystems you never use, ship it as a .deb in your own repo with pinning and manage it at scale with Katello. The thrill and its price: a test pipeline on real hardware and canaries.
Debsecan: Debian Security Analyzer
Debsecan, the tool that generates the list of vulnerabilities affecting a Debian installation, complementary to apt-listbugs.
Debian Etch: play with backports
Debian backports, how to get recent packages on a stable distribution.