We should adopt a tool like Bastille Linux as part of the build system (perhaps an optional part). Bastille can be run against a running Linux system to identify common backdoors and security holes. A recipe probably needs to be developed plus a method for running it as part of the sanity test. Then there should be an easy way for developers using Yocto to run Bastille as a QA pass on their device. This enhancement should be marked HIGH (P1) for the 1.5 release
Dup *** This bug has been marked as a duplicate of bug 3867 ***
Verified as per above comment