There was a project called Bastille which basically did exactly that: http://bastille-linux.sourceforge.net/ http://bastille-linux.sourceforge.net/ It would ru

There was a project called Bastille which basically did exactly that: http://bastille-linux.sourceforge.net/ http://bastille-linux.sourceforge.net/ It would run through a series of questions about your use case to build a security policy, and then edit config files for you. The problem is that it needs to be aware of all the different flavors of Linux it might be running on, so it's naturally fragile and requires lots of maintenance. Sadly, it hasn't been updated in a few years.