Need to go through apparmor policies by default and selinux default policies. come up with the best policies and profiles that need to be configured to secure linux machine
If you think you are the right person Please provide me a draft of your idea in your message