start with a more secure os like debian (debian.org) then if you want a more secure system try something like debian hardened (debian-hardened.org).