They do. They have lots of documents and guidance on best practice for security. As for code, they started the SELinux project. http://en.m.wikipedia.org/wiki/Security-Enhanced_Linux