Securing Linux Production Systems