I was reading on the web that clamav is not an "endpoint antivirus solution" but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?

you are viewing a single comment's thread
view the rest of the comments
[–] 25 points 2 months ago* (5 children)

OP, I'll be honest with ya: if you're looking for something akin to M$ Defender but on Desktop Linux (and free), you ain't gonna find it.

A quick look at your Lemmy history suggests that you're security-conscious. In that context, it's worth noting that 'Linux' does provide you. However, depending on your situation and/or threat model, this might come at the cost of expertise.

If you never download random stuff from the internet, then your average distro might be sufficient as long as you commit to the most basic set of best practices.

However, if you do download random stuff from the internet OR if your situation and/or threat model warrants a more conscious approach, then things might change substantially.

But before subjecting you to Qubes OS, we'd have to know more about your situation. So, first of all, could you elaborate on your use case of ClamAV? Or, perhaps even what you intend to do in general?

  • source
  • hideshow 5 child comments
  • [–] [S] 8 points 2 months ago* (last edited 2 months ago) (4 children)

    in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

    in specific: i want to self host services in my home server, so i want it to be secure and protected

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 2 months ago (3 children)

    in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

    Aight. Understood. Thank you for the clarification!

    So..., now it becomes a question of how paranoid security-sensitive you are 😅. I suppose relying on a distro with pretty decent security defaults (like e.g. Fedora or openSUSE) makes sense for a start. Furthermore, definitely commit to best practices^[A lot can be said on this, but it would dominate this text if I'd try to touch on it.]. As for the scanning part, other comments have already touched on that.

    If the PC you're doing this contains sensitive information OR you're not satisfied with the provided "probably good enough" solution, then consider going "the extra mile". Which would involve the use of specialized OSes, relying on VMs and whatnot. But I digress...

    in specific: i want to self host services in my home server, so i want it to be secure and protected

    Unfortunately, I'm not confident talking on servers specifically. It's simply not something I've put serious thoughts to yet. I hope someone else will touch on that 😉.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 2 months ago (2 children)

    I do my shady stuff inside a VM. How safe is that?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 2 months ago (1 child)

    That depends.

    If this is a Linux guest on a Linux host and both are just your average distros, then it's fine~ish. It's not 100% safe as some malware is able to escape a VM, see this for a recent example of this.

    Doing your shady stuff within a disposable air-gapped^[In this context, I just mean it has only had the least amount of possible privileges/capabilities during its lifetime.] VM on a RISC-V powered Sculpt OS host should be pretty safe, though.

  • source
  • parent
  • hideshow 1 child comment