Re: Anti-malware for my personal Debian workstation?

From	l0f4r0@tuta.io
Newsgroups	linux.debian.user
Subject	Re: Anti-malware for my personal Debian workstation?
Date	2020-04-11 19:10 +0200
Message-ID	<zUrNL-747-5@gated-at.bofh.it> (permalink)
References	<zCV7A-3CT-9@gated-at.bofh.it> <zD4Nz-1jq-9@gated-at.bofh.it> <zD4Nz-1jq-7@gated-at.bofh.it> <zDhUw-U6-43@gated-at.bofh.it> <zDndw-3VZ-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi,

Thank you everybody for your answers.

I understand most of you respondents don't use anti-malware at all. A good hygiene or other kind of solutions like system hardening (AppArmor, SELinux) are way more efficient.

NB : I've been told SELinux is so complex, people eventually let it drop... Do you all succeed in configuring & using it? ;)

Do you follow any guide or tool to help you in hardening your Linux distro?
I've used Lynis for the audit part, it's nicely done. What do you think about it?

Anti-malware on Windows is common/best practice. However, as we are discussing it here, things seem to be different with Linux. I don't really think Linux is intrinsically more secure than Windows nowadays (a vulnerability remains as such) but I really think Linux ecosystem is. Here are some reasons that could explain that according to me:
* Most softwares are downloaded through official preconfigured repositories. Users are less prone to download malware on suspicions websites
* Updates are easier as well because tracked/centralized through repositories themselves for the most part. On Windows you need to check Windows Update + Windows Store + each application individually
* Linux users are globally more tech-savvy so they take care more about their systems
* Open source is more common on Linux (community-based) than Windows (money-based) so theoretically anyone competent enough could view the source by oneself and spot a malovelent behavior (/!\ in practice this is not so easy, see what happened with OpenSSL / HeartBleed)
* Linux desktops are less exposed : it's more lucrative for black hats to target Windows users with malware (see desktop marketshares). However this is only half of an argument because Linux server marketshares are quite the opposite!
* Until some years ago, I would have added that Linux is more secured by design (least privilege, compartmentalization) than Windows but I think this is not so true now, Windows has cought up apparently...
=> What is your opinion?

Thank you & Best regards,
l0f4r0

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: Anti-malware for my personal Debian workstation? l0f4r0@tuta.io - 2020-04-11 19:10 +0200
  Re: Anti-malware for my personal Debian workstation? "Thomas Schmitt" <scdbackup@gmx.net> - 2020-04-11 19:50 +0200
    Re: Anti-malware for my personal Debian workstation? l0f4r0@tuta.io - 2020-04-24 00:00 +0200
      Re: Anti-malware for my personal Debian workstation? David Wright <deblis@lionunicorn.co.uk> - 2020-04-24 02:50 +0200
        Re: Anti-malware for my personal Debian workstation? Kenneth Parker <sea7kenp@gmail.com> - 2020-04-24 04:00 +0200
        Re: Anti-malware for my personal Debian workstation? "Rick Thomas" <rick.thomas@pobox.com> - 2020-04-24 08:50 +0200
      Re: Anti-malware for my personal Debian workstation? "Thomas Schmitt" <scdbackup@gmx.net> - 2020-04-24 09:00 +0200
        Re: Anti-malware for my personal Debian workstation? l0f4r0@tuta.io - 2020-05-03 18:20 +0200
          Re: Anti-malware for my personal Debian workstation? "Thomas Schmitt" <scdbackup@gmx.net> - 2020-05-03 20:00 +0200
            Re: Anti-malware for my personal Debian workstation? l0f4r0@tuta.io - 2020-05-04 01:40 +0200
            systemd-homed (was Re: Anti-malware for my personal Debian workstation?) Kenneth Parker <sea7kenp@gmail.com> - 2020-05-04 02:10 +0200
              Re: systemd-homed "Thomas Schmitt" <scdbackup@gmx.net> - 2020-05-04 09:20 +0200
  Re: Anti-malware for my personal Debian workstation? Joe <joe@jretrading.com> - 2020-04-12 00:10 +0200
    Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 09:10 +0200
      Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 09:20 +0200
    Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 09:10 +0200
      Re: Anti-malware for my personal Debian workstation? Dan Purgert <dan@djph.net> - 2020-04-12 17:40 +0200
      Re: Anti-malware for my personal Debian workstation? John Hasler <jhasler@newsguy.com> - 2020-04-12 21:10 +0200
  Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 09:00 +0200
    Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 09:20 +0200
      Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 10:40 +0200
        Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 11:00 +0200
          Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 11:50 +0200
            Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 12:10 +0200
              Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 15:10 +0200
                Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 15:50 +0200
                Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 17:50 +0200
                Re: Anti-malware for my personal Debian workstation? Gene Heskett <gheskett@shentel.net> - 2020-04-12 17:30 +0200
                Re: Anti-malware for my personal Debian workstation? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-12 17:40 +0200
        Re: Anti-malware for my personal Debian workstation? Celejar <celejar@gmail.com> - 2020-04-12 16:50 +0200
          Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 17:50 +0200
            Re: Anti-malware for my personal Debian workstation? Celejar <celejar@gmail.com> - 2020-04-12 18:30 +0200
              Re: Anti-malware for my personal Debian workstation? <tomas@tuxteam.de> - 2020-04-12 20:50 +0200
            Re: Anti-malware for my personal Debian workstation? John Hasler <jhasler@newsguy.com> - 2020-04-12 19:40 +0200

csiph-web