Advanced Security Captain Awesome's PC Security Config

PC Setup Configuration Help & Showcase
67 Replies 9,855 Views
Original forum configuration · expand details
Last updated
May 19, 2026
Main use of this computer
For work or educational use
Operating system
Linux
OS version and support details
MX Linux 25.2 "Infinity"
On-device encryption
Other full-disk drive encryption software
Device sign-in security
    • Account password
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Not applicable - not running Windows
Smart App Control
Not applicable / not available on this device
Network firewall
Enabled
Real-time protection
AppArmor
Device firewall
Built-in Firewall for Mac/Linux
Custom security settings
Open Snitch,Lynis,Fail2Ban,FireJail and its GUI
Periodic malware scanners
Clam Av(very rare use),Chkrootkit,rkhunter
Malware sample testing
I do not participate in malware testing
Environment for malware testing
GNOME Boxes
Browsers and extensions
Ulaa,LibreWolf
Secure DNS
N/A
Desktop VPN
Windscribe VPN (Free)
Password and passkey manager

Ente Auth, KeePassXC​

Maintenance tools
BleachBit
File and photo backups
Déjà Dup
Subscriptions
    • None
System recovery
Timeshift
Usage and exposure
    • Working from home
    • Online shopping and card payments
Computer specs
N/A
Notable changes
Added Ente Auth,Synaptic Package Manager,Déjà Dup,Timeshift,VeraCrypt,KeePassXC,LibreWolf,Gear lever,Windscribe VPN,DaVinci Resolve,GNOME Boxes
Feedback preference

Detailed suggestions and alternatives welcome

LinuxFan58 said:
@Captain Awesome

I am interested in your experiences with the security enhanced indian distro. You used it for quite a while, how did it suit you and why return to Debian?
Click to expand...
Developed by India's C-DAC (Centre for Development of Advanced Computing), BOSS Linux—particularly its "Secure BOSS" variant—was built as a digital fortress for government agencies, education, and defense networks.

Extreme Hardening: By default, Secure BOSS completely disables USB mass storage devices, Bluetooth, and wireless connections to eliminate hardware-based data leaks.

Why Return to Standard Debian?

BOSS Linux is downstream from Debian Stable. For instance, BOSS Linux 10 ("Pragya") is built on top of Debian 12 (Bookworm) and runs an older long-term kernel (like Kernel 6.1). While excellent for stability, it means system libraries, desktop environment tweaks (like its Cinnamon desktop version), and modern developer tools lag years behind what is available on standard Debian or its testing branches.
Mainline Debian is maintained by a massive, global, 24/7 volunteer community that responds to security critical CVEs almost instantly. Downstream distributions like BOSS inherit Debian's repositories, but local adjustments, custom code, and the specialized portal websites often require manual upkeep by C-DAC. For an end-user, cut-and-dry access to direct, un-delayed Debian security patches offers greater peace of mind.
 
lokamoka820 said:
I'm thinking of switching to MX Linux. What do you think of it, given that it's based on Debian?
Click to expand...
Switching to MX Linux is an excellent choice if you want the unmatched stability of Debian without the hassle of configuring a complex desktop system from scratch. Debian Stability, Modernized: MX Linux uses the rock-solid base of Debian Stable. However, unlike pure Debian—which keeps packages frozen and old—MX maintains an AHS (Advanced Hardware Support) repository. This gives you newer Linux kernels and updated graphics drivers.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Continue exploring the conversation.

Back
Top