Skip to content

Security overview on linux

firewall

==> have it running

anti-virus

==> needed on linux ?
then why is it not installed by default in linux mint ?

  • clamav
    https://wiki.archlinux.org/title/ClamAV
  • sophos
    free license for use on 1 standalone device , but you must use version 9 in that case, not the latest 10
    see: https://www.sophos.com/en-us/support/documentation/sophos-anti-virus-for-linux.aspx?platform=Standalone-computers#Standalone-computers
    config : https://docs.sophos.com/esg/SAV-Linux/help/en-us/PDF/sav_linux_cg.pdf

sandboxing

might not be a good idea ==> learn more about it

:
There is no secure, easy-to-use command line sandbox utility.
Popular utilities such as Firejail can often be a cure worse than the disease,
many sandbox bypasses and privilege escalation vulnerabilities have been found (and continue to be found).

Sandboxing an application usually requires using mandatory access controls, such as the popular AppArmor or SELinux framework. This will generally involve customized security policies, tailored to the specific application.
I wrote a lot about Linux sandboxing in another answer.