# Snigdha Security Center - User & Operational Guide

System: Snigdha OS Decentralized
Phase: 7 — Snigdha Security Center
Status: IMPLEMENTED & VERIFIED
Classification: User Documentation & Operational Procedures

# 1. Introduction

Snigdha Security Center provides a single, unified graphical application and command-line diagnostic tool to manage and monitor the security posture of your Snigdha OS Decentralized live session.

Whether checking that your RAM session is strictly amnesic, toggling Tor pluggable transport bridges, unlocking an encrypted LUKS2 persistent volume, or running diagnostic invariant tests, Security Center presents your system state transparently without complex terminal commands.

# 2. Launching Security Center

You can open Snigdha Security Center using any of the following methods:

1. Global Keyboard Shortcut:
   • Press Mod4 + Shift + s (where Mod4 is the Super or Windows key).
2. Polybar Security Module:
   • Click on the security icon on the Polybar status bar (displays 󰒃 SECURITY: ACTIVE or warning status).
3. Application Launcher (Rofi):
   • Press Mod4 + d, type Security Center, and press Enter.
4. Terminal CLI:
   • Run snigdha-security-center to open the GUI.
   • Run snigdha-security-center --diagnose for terminal-based diagnostic output.
   • Run snigdha-security-center --json for structured JSON output suitable for automation scripts.

# 3. Interpreting System Security Status

The header bar and Polybar module display the aggregate security posture:

# 4. Subsystem Management Walkthroughs

# A. Dashboard Overview

Upon opening, the Dashboard displays:

• System Posture Banner: Summary of current protection level.
• Subsystem Status Cards: 5 interactive tiles covering Amnesia, Network, Persistence, Isolation, and Privacy Suite.
• Active Alerts List: Highlights any issues requiring attention.
• Quick Action Row: Fast triggers to refresh state or run full system diagnostics.

# B. Amnesia Session

Inspects the volatile nature of the live session:

• Root Filesystem: Verifies that / is backed by an ephemeral overlayfs.
• RAM TMPFS Usage: Shows exact memory used by volatile session files.
• Swap Protection: Confirms that no unencrypted swap partitions or files are active on disk.
• Watchdog Status: Reports whether the hardware media removal watchdog is monitoring the boot drive.

# C. Network Security & Tor Management

Monitors and configures network defenses:

• Firewall Killswitch: Shows nftables drop-all enforcement status.
• Tor Stream Isolation: Confirms that application connections are routed via independent Tor circuits.
• Pluggable Transports / Bridges:
  • Click Configure Tor Bridges to open the bridge modal dialog.
  • Paste obfs4 bridge lines from BridgeDB (e.g., obfs4 192.0.2.1:443 ...).
  • Click Apply Configuration. A Polkit authentication prompt will appear.
  • Once verified, the NetGuard daemon reconfigures Tor without restarting your desktop session.

# D. Encrypted Persistent Storage

Inspects and manages secondary LUKS2 persistent storage:

• Device & Status: Shows whether a persistent volume has been detected and if it is currently locked or unlocked.
• Mount Point: Displays /mnt/persistence or current binding path.
• Authorized Features: Lists persistent features configured in your manifest (e.g., Tor Browser Bookmarks, GnuPG Keys, KeePassXC Database).
• Unlocking / Locking:
  • Click Unlock Storage to prompt for your LUKS2 passphrase.
  • Click Lock & Unmount before removing your drive or ending your session.

# E. Application Isolation

Audits kernel confinement mechanisms:

• AppArmor Profile Matrix: Shows the total count of profiles in enforce mode versus complain mode.
• Active Sandboxes: Lists live Bubblewrap containers, verifying that unprivileged user namespaces and seccomp filters are active for web browsers and communications software.

# F. Privacy Suite

Monitors installed privacy software:

• Audits Tor Browser, OnionShare, Thunderbird, KeePassXC, GnuPG, and Metadata Cleaner.
• Shows version numbers, sandboxing profile, and package cryptographic signature validity.

# 5. Security Diagnostics & Report Export

To run a complete system audit:

1. Navigate to the Diagnostics page in the sidebar.
2. Click Run All Invariant Tests.
3. Security Center executes comprehensive checks across all 5 subsystems.
4. Review the color-coded check results.
5. Click Export Diagnostic Report to save a timestamped, sanitized text file to your volatile Home folder.

# 6. Command-Line Options

For system administrators and headless auditing:

# Print general usage and available options
snigdha-security-center --help

# Display version and security boundary confirmation
snigdha-security-center --version

# Run full diagnostic suite in terminal (non-GUI mode)
snigdha-security-center --diagnose

# Output diagnostic results as structured JSON (for scripting/jq)
snigdha-security-center --json | jq .