...It adopts a multi-layered defense architecture against cyber attacks, incorporating aggressive mitigation techniques alongside kernel, system, and network hardening configurations.
The distribution offers comprehensive security measures including BadUSB protection, permission hardening services, package manager hardening, module blacklisting, PAM and sudoers hardening. Due to its strict firewall policy, anonymization tools are not supported; the system enforces Quad9 DNS and allows only basic internet access. In addition, the distribution uses Hardenwing Jails, a GUI isolation application.
Hardenwing is Secure Boot compatible and ships with it enabled by default. It uses GNOME (Wayland) as its desktop environment. ...