Isn't there already a distro security list for this purpose?