Overview
Strict Security-First Architecture
Hardened Slarpx is a Debian-based Linux distribution built with a strict security-first approach. It uses a multi-layered defense model with aggressive mitigations and extensive kernel-level hardening. Slarpx enforces system integrity through strict structural restrictions.
Due to its restrictive firewall policy, certain anonymization tools and network protocols are intentionally unsupported. The system focuses on active intervention and termination of unauthorized attack paths.
Runtime Security Modules
- Poison : Actively disrupts malicious executions by injecting dynamic micro-delays to sabotage race conditions and buffer-overflow attempts.
- Xennytsu : Acts as an ultra-low-footprint EDR, instantly detecting reverse shells, memory injections, and hostile process hierarchies for immediate termination.
- Silencer : Limits privilege escalation and reconnaissance via strict process isolation (hidepid), continuous sysctl tamper-guarding, and restrictive filesystem permissions.
Core Hardening Domains
- Kernel & Memory : Aggressive CPU side-channel mitigations, memory zeroing, and strict ASLR implementations.
- Network Isolation : Default-drop nftables firewall policy combined with an immutable DNS enforcement mechanism.
- System & Environment : Restricted APT sandboxing, Bluetooth telemetry blocking, and anti-cold-boot memory flushing.
Slarpx Desktop Environment - CLI Only