security_in_linux.WIP.md

Preferably:

SELINUX=enforce

Alternatively: AppArmor

Coming soon: "lockdown" https://twitter.com/nixcraft/status/1178524376326524928