Aren't your packages md5'd from upstream? Mine are. My Gentoo box would scream holy hell if someone slipped a hacked file into the repo.

What about the NSA/SeLinux security model? Surely that goes beyond "conventional, user-based security features" I daresay that it is also a bit more secure than your standard xp/vista boxen.. I read somewhere that the NSA uses it for their most highly classified stuff.

I bet this is actually a more expensive ticket.. He gets to stretch out!