Download
Hardenwing OS is a Debian-based Linux distribution focused on security. It adopts a multi-layered defense architecture against cyber attacks, incorporating aggressive mitigation techniques alongside kernel, system, and network hardening configurations.
The distribution offers comprehensive security measures including BadUSB protection, permission hardening services, package manager hardening, module blacklisting, PAM and sudoers hardening. Due to its strict firewall policy, anonymization tools are not supported; the system enforces Quad9 DNS and allows only basic internet access.
Hardenwing is Secure Boot compatible and ships with it enabled by default. It uses GNOME (Wayland) as its desktop environment. During the build phase, a hook called Cerrah automatically removes unnecessary Debian and GNOME services that would otherwise expand the attack surface.
Website: https://nixovena.org/hardenwing/
Features
- Hardened Kernel Configs
- Hardened CPU Mitigations
- Hardened Sudoers.d
- Faillock
- Pam Hardening
- Hardened Profile.d
- Hardened APT
- Modprobe.d Blocked modules
- Removed Kernel Map
- Hardened Permissions
- Debug tools blocked
- System Integrity Hardening ( dracut , initramfs )
- Hardened Bluetooth
- Coldboot Defense
- GNOME (Wayland)
- BadUSB Protection (USBguard)
- Process Information Hide
- Firefox with Hardened Policies and Ublock Origin
- Update Tool
Project Samples
