Hardened Slarpx – security focused Debian-based Linux distribution

Hardened Slarpx is a Debian-based Linux distribution designed for hostile environments where security takes priority over convenience.

It applies extensive kernel and memory hardening, strict network controls, and several custom security mechanisms intended to disrupt suspicious activity, detect malicious behavior, and enforce a tightly restricted operating environment. The project is aimed at security-focused and research use rather than general desktop computing.

Key Features

• Uses custom runtime security modules including Poison, Xennytsu, and Silencer.
• Implements aggressive kernel and memory hardening measures, including strict ASLR and extensive CPU side-channel mitigations.
• Employs a default-drop nftables firewall policy for both inbound and outbound traffic.
• Enforces immutable DNS settings with trusted resolver restrictions.
• Includes anti-spoofing, flood mitigation, and SSH brute-force protection.
• Restricts privilege escalation and reconnaissance through process isolation and sysctl tamper-guarding.
• Blocks or limits tools and subsystems that increase attack surface, including unprivileged BPF, legacy emulation, and selected debugging utilities.
• Designed as a CLI-only environment rather than a conventional desktop distribution.
• Intended for experimental, high-security, or research-oriented deployments rather than daily desktop use.