2. Should there be information on AppArmor and SELinux (other than footnote 66]?
1.
https://www.debian.org/doc/manuals/securing-debian-howto/ch-automatic-harden.en.html#s6.2
describes Bastille Linux which is no longer in Debian.
