Advanced Security Capitán Awesome Debian 13.5(trixie) Security Config 2025

Last updated
May 19, 2026
How it's used?
For work or educational use
Operating system
Linux
Other operating system
MX Linux 25.2 "Infinity"
On-device encryption
Other full-disk drive encryption software
Log-in security
    • Basic account password (insecure)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
N/A - Linux / Mac / Other operating system
Smart App Control
N/A - Linux / Mac / Other operating system
Network firewall
Enabled
Real-time security
AppArmor
Firewall security
Built-in Firewall for Mac/Linux
About custom security
Open Snitch,Lynis,Fail2Ban,FireJail and its GUI
Periodic malware scanners
Clam Av(very rare use),Chkrootkit,rkhunter
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Ulaa,LibreWolf
Secure DNS
N/A
Desktop VPN
Windscribe VPN (Free)
Password manager

Ente Auth, KeePassXC​

File and Photo backup
Déjà Dup
Subscriptions
    • None
System recovery
Timeshift
Risk factors
    • Working from home
    • Buying from online stores, entering banks card details
Computer specs
N/A
Notable changes
Added Ente Auth,Synaptic Package Manager,Déjà Dup,Timeshift,VeraCrypt,KeePassXC,LibreWolf,Gear lever,Windscribe VPN,DaVinci Resolve
What I'm looking for?

Looking for maximum feedback.

LinuxFan58 said:
@Captain Awesome

I am interested in your experiences with the security enhanced indian distro. You used it for quite a while, how did it suit you and why return to Debian?
Click to expand...
Developed by India's C-DAC (Centre for Development of Advanced Computing), BOSS Linux—particularly its "Secure BOSS" variant—was built as a digital fortress for government agencies, education, and defense networks.

Extreme Hardening: By default, Secure BOSS completely disables USB mass storage devices, Bluetooth, and wireless connections to eliminate hardware-based data leaks.

Why Return to Standard Debian?

BOSS Linux is downstream from Debian Stable. For instance, BOSS Linux 10 ("Pragya") is built on top of Debian 12 (Bookworm) and runs an older long-term kernel (like Kernel 6.1). While excellent for stability, it means system libraries, desktop environment tweaks (like its Cinnamon desktop version), and modern developer tools lag years behind what is available on standard Debian or its testing branches.
Mainline Debian is maintained by a massive, global, 24/7 volunteer community that responds to security critical CVEs almost instantly. Downstream distributions like BOSS inherit Debian's repositories, but local adjustments, custom code, and the specialized portal websites often require manual upkeep by C-DAC. For an end-user, cut-and-dry access to direct, un-delayed Debian security patches offers greater peace of mind.
 
  • Like
  • Thanks
Reactions: simmerskool, Sorrento, LinuxFan58 and 2 others
lokamoka820 said:
I'm thinking of switching to MX Linux. What do you think of it, given that it's based on Debian?
Click to expand...
Switching to MX Linux is an excellent choice if you want the unmatched stability of Debian without the hassle of configuring a complex desktop system from scratch. Debian Stability, Modernized: MX Linux uses the rock-solid base of Debian Stable. However, unlike pure Debian—which keeps packages frozen and old—MX maintains an AHS (Advanced Hardware Support) repository. This gives you newer Linux kernels and updated graphics drivers.
 
  • Like
  • Love
Reactions: simmerskool, Sorrento, lokamoka820 and 1 other person

You may also like...