Subgraph OS is a Debian-based Linux distribution that offers security services and anonymous web browsing with hardening features.
Subgraph OS uses a hardened Linux kernel, and a firewall application that helps you block specific executables from accessing the network. The distribution forces all your Internet traffic to go through the Tor network. 
The distribution's file manager has tools for removing metadata left behind by files and integrates with the OnionShare file sharing application. The icedove email client automatically works with Enigmail to encrypt your emails.
Most of the Subgraph OS code was written in Golang, which is a memory-safe language. Golang libraries are also written in pure Golang, unlike other popular languages like Python. While the Python runtime may be memory-safe, the C languages commonly used by the libraries expose tools written in Python to old memory corruption vulnerabilities.
One of the best security features of the distribution is that it uses Sandboxed applications in addition to the above.
So vulnerable or internet-exposed applications run in sandbox environments. The sandbox framework, called Oz, is designed to isolate applications from the rest of the system. Access to system resources is granted only to applications that need them. For example, the PDF viewer and image viewer do not have access to any network interfaces from the sandbox.
Sandboxed applications are:
Web browser
Email client with built-in support for encryption
CoyIM instant messenger
LibreOffice productivity suite
PDF viewer
Image viewer
Video player
Hexchat
It should be mentioned that the distribution offers quite interesting features, but it is new. New distribution means that we do not know what kind of support it offers, or whether it will continue to exist after 1 to 2 years.
Subgraph OS System Requirements
Anything that can comfortably run GNOME 3:
- 64-bit machine (Core2Duo or over)
- 2GB of RAM (4GB recommended – 4GB minimum for live mode)
- At least 20GB of hard disk space
Intel Integrated graphics cards or NVidia cards supported by the Nouveau drivers are recommended.
Subgraph OS Download
- subgraph-os-alpha_2016-12-30_1.iso (sha256sum) (signature) (release notes)
- Also available via our Tor hidden service: subgraph-os-alpha_2016-12-30_1.iso (sha256sum) (signature) (release notes)
- You can also download it via bittorrent
If you are interested in the project, you can read more on the official website.
