I was reading on the web that clamav is not an “endpoint antivirus solution” but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?
I was reading on the web that clamav is not an “endpoint antivirus solution” but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?
OP, I’ll be honest with ya: if you’re looking for something akin to M$ Defender but on Desktop Linux (and free), you ain’t gonna find it.
A quick look at your Lemmy history suggests that you’re security-conscious. In that context, it’s worth noting that ‘Linux’ does provide you. However, depending on your situation and/or threat model, this might come at the cost of expertise.
If you never download random stuff from the internet, then your average distro might be sufficient as long as you commit to the most basic set of best practices.
However, if you do download random stuff from the internet OR if your situation and/or threat model warrants a more conscious approach, then things might change substantially.
But before subjecting you to Qubes OS, we’d have to know more about your situation. So, first of all, could you elaborate on your use case of ClamAV? Or, perhaps even what you intend to do in general?
in general: for my personal daily use pc. I download 🏴☠️ files and software for websites around the internet, so it would be nice have an antivirus
in specific: i want to self host services in my home server, so i want it to be secure and protected
Aight. Understood. Thank you for the clarification!
So…, now it becomes a question of how
paranoidsecurity-sensitive you are 😅. I suppose relying on a distro with pretty decent security defaults (like e.g. Fedora or openSUSE) makes sense for a start. Furthermore, definitely commit to best practices[1]. As for the scanning part, other comments have already touched on that.If the PC you’re doing this contains sensitive information OR you’re not satisfied with the provided “probably good enough” solution, then consider going “the extra mile”. Which would involve the use of specialized OSes, relying on VMs and whatnot. But I digress…
Unfortunately, I’m not confident talking on servers specifically. It’s simply not something I’ve put serious thoughts to yet. I hope someone else will touch on that 😉.
A lot can be said on this, but it would dominate this text if I’d try to touch on it. ↩︎
I do my shady stuff inside a VM. How safe is that?
That depends.
If this is a Linux guest on a Linux host and both are just your average distros, then it’s fine~ish. It’s not 100% safe as some malware is able to escape a VM, see this for a recent example of this.
Doing your shady stuff within a disposable air-gapped[1] VM on a RISC-V powered Sculpt OS host should be pretty safe, though.
In this context, I just mean it has only had the least amount of possible privileges/capabilities during its lifetime. ↩︎
Thanks for the info and the link.