To help me to priorise security issues, and to reduce the exposure to risk, I would like to have a list of all packages in a Linux distribution (rpm based) which need high privilege to run and which have listen(3) capabilities.

Note that I don't want to map just the installed packaged, but all the possible packages in distribution (given the packages come just from the official repositories and the package set is finite)

There is any way to get this information via RPM spec file?

There is any Distribution which provides this information?

There is any work/reseach done already in this direction?

To help me to prioritize security issues and be compliance with a patch-management policy, and to reduce the exposure to risk, I would like to have a list of all packages in a Linux distribution (rpm based) which need high privilege to run and which have listen(3) capabilities and therefore, possible candidates for root exploitation.

Note that I don't want to map just the installed packaged, but all the possible packages in distribution (given the packages come just from the official repositories and the package set is finite)

There is any way to get this information via RPM spec file?

There is any Distribution which provides this information?

There is any work/reseach done already in this direction?