Security First, Always

Seven layers of protection ensure GK Healter never puts your system at risk.

Whitelist-Based Deletion

Only pre-defined safe directories can be cleaned. Nothing outside the whitelist is ever touched.

Polkit Integration

System-level operations require explicit user authentication via pkexec before execution.

No rm -rf, Ever

Recursive force deletion is never used under any condition. Every file removal is deliberate.

Root Path Protection

Critical directories like /, /home, and /etc are hardcoded as untouchable. No exceptions.

Full Audit Trail

Every deletion is logged with timestamp and result. Complete transparency on all operations.

SUID Whitelist

Known safe SUID files are filtered via KNOWN_SUID_PATHS. Only unexpected ones are flagged.

SSH Hardening

PermitRootLogin, PasswordAuthentication, and more are verified against security best practices.