10077971CapableClosedCollaborative R&DISCFLinux is the predominant OS for key systems (Internet Services and critical infrastructure). Linux has also became the preferred OS for the military. Within the military, Linux might be used to hold data for different security classifications. It may also be deployed in various scenarios that demand certain levels of system lock-down and security restrictions. Achieving this is really challenging due to the variant distributions of the OS. Therefore, one way to harden Linux is to configure security at a very low-level. Linux capabilities are one main security control that governs how processes and applications interact with the Kernel. Capabilities are used across all distributions and when configured correctly, they could potentially provide an effective manner to unify security configurations for all Linux systems. One challenge is that capabilities tend to be complicated and require significant experience to configure. Therefore, we propose Capable: that will harden Linux kernels by configuring the system capabilities to meet the security requirements. Capable will remove the complexity and enable authorised end-users to specify the level of system lockdown. Capable will be the first solution in the market to secure Linux through hardening the kernel and to meet the security requirements for various security certifications.