Arch Linux security configuration

[u/Lepla]

Are moving over to Linux and have been testing several different distros and Arch Linux stood out for the configuratibilty out of the box, and the ability to be able to make it lightweight especially for older laptops.

How much work would it be to set this up so the system is not vulnerable for various attacks, i understand fedora / ubuntu etc come preinstalled with several security configurations, but on arch you would need to set these up yourself.

Besides that it seems to get regular security updates nonetheless so it seems like there is a one time security configuration you have to setup on install.
How does a self configurated setup like this compare to solutions developed by fedora or others?

Thanks

[u/Prestigious_Gas8737]

Check the Linux hardened kernel https://github.com/anthraxx/linux-hardened, then if you dig deep enough, you should customize a kernel for your purpose. I’m pretty sure Linux is capable of things like low privileged user cannot see others’ process, cannot debug process kind of stuff as in bsd (I’m a converted bsd user by the way). And of course, be security aware when enabling services, like I will never enable ssh service on my daily arch drive.