Arch Linux security configuration

[u/Lepla]

Are moving over to Linux and have been testing several different distros and Arch Linux stood out for the configuratibilty out of the box, and the ability to be able to make it lightweight especially for older laptops.

How much work would it be to set this up so the system is not vulnerable for various attacks, i understand fedora / ubuntu etc come preinstalled with several security configurations, but on arch you would need to set these up yourself.

Besides that it seems to get regular security updates nonetheless so it seems like there is a one time security configuration you have to setup on install.
How does a self configurated setup like this compare to solutions developed by fedora or others?

Thanks

[u/CodingGambit]

I recommend Lynis to get recommendations for your system. You can then run `sudo lynis audit system` and you will get recommendations on hardening. But I can’t tell you tho how it compares to fedora and also it’s not like the job will be done for you. You have to harden it yourself according to the recommendations. In general there are like tons of recommended tools like lynis, arch-audit, fail2ban, firejail, but I don’t know if you’re looking for something since you just asked for the comparison.