The officially official Devuan Forum!

You are not logged in.

#1 2017-06-27 22:41:40

david
Member
Registered: 2017-04-27
Posts: 6  

Defend Devuan against Antivirus and other thinks

Hi,

Please I want to use a anti virus. But witch one is the best for Devuan?

Thanks.                     David

Offline

#2 2017-06-27 23:19:07

greenjeans
Member
Registered: 2017-04-07
Posts: 424  
Website

Re: Defend Devuan against Antivirus and other thinks

The only one in the repo is the ubiquitous Clamav, it works okay, have used it a fair bit. There are also some rootkit programs like rkhunter.


https://sourceforge.net/projects/vuu-do/
Vuu-do GNU/Linux, minimal 64 and 32 bit Devuan-based openbox and mate systems to build on, maximal versions if you prefer your linux fully-loaded.

Please donate to support Devuan and init freedom! https://devuan.org/os/donate

Offline

#3 2017-06-27 23:20:54

fsmithred
Administrator
Registered: 2016-11-25
Posts: 916  

Re: Defend Devuan against Antivirus and other thinks

You won't need a virus scanner for linux until enough people are using linux to make it worthwhile for someone to start writing linux viruses. Clamav is a linux virus scanner, but it is used for finding windows viruses. You would do better to spend your time securing your web browser.

Offline

#4 2017-06-28 03:12:02

PeteGozz
Member
From: Woodside South Australia
Registered: 2017-06-21
Posts: 72  

Re: Defend Devuan against Antivirus and other thinks

As fsmithred and greenjeans  have said you do not need an antivirus for linux.
(or *BSDs)

_the rest of this is possibly not relevant_ but as I wrote it over my first coffee ...
Here it is anyway. Random observations  thats all.

Its not impossible to write a virus that actually does something,  just very difficult to do without _social__tricks_.
Like convincing you to run your browser or office suite  as root or something startling...
(yeah I guess this could happen, we are only humans. )

The easier attack vector for "Nixen" is where they do their work on networks.
(so packet filtering and simply not running services you don't need).
Or via exploits in existing software or via the package management system or even firmware blobs.
(say in a closed driver for some zappy new IoT thing)

rkhunter
is an _excellent_ well tested tool to scan for , rootkits.

It is particularly useful where you have many users with mixed skill sets.
e.g. you are  running webservers or have shell access accounts (!)  etc.
As _one_ layer of defence along with others.

clamav
is  for scanning email and _attachments_  for windows targeted payloads.
It would also be useful if your file sharing with windows networks etc.
Or collaborating with MSoffice users a lot.

i.e. Clamav looks for _known_ bad payloads in files you probably share..
You can help protect _them_ with clamav.
This works very well.
Now all you need to do is get them to keep _their_ anti virus suites up to date.
(this is not possible)

As a general user running with no special system privileges your
web browser is the weakest link.
( other than _yourself_ and,  say sudo smile

There are other approaches like tripwire or entire suites of stuff that audit and help validate your system.
Some of them are almost attacks in their own right as they grind your cpu's down to dust... checksumming  away.

These absolutely have a real place and are critical in some use cases...
Most of those assume your software doesn't change too often.
(thats a blurry line)


So real security starts with a clean kernel and a good package manager.

Like Devuan smile 

Sorry I do rabbit on . .
You only need a virus scanner for other peoples stuff.
(or because your boss/client/user is an box checking idiot)
(which is just a special sub set of the world of stupid really)

Offline

#5 2017-06-28 18:43:13

pcalvert
Member
Registered: 2017-05-15
Posts: 16  

Re: Defend Devuan against Antivirus and other thinks

Hi David,

Instead of an antivirus, considering using these things instead: AppArmor, FireHOL, Firejail, and NoScript or uBlock Origin.

Phil


“Property is the fruit of labor; property is desirable; it is a positive good
in the world. That some should be rich shows that others may become
rich, and hence is just encouragement to industry and enterprise.”
— Abraham Lincoln

Offline

#6 2017-06-30 09:54:22

zapper
Member
Registered: 2017-05-29
Posts: 58  

Re: Defend Devuan against Antivirus and other thinks

pcalvert wrote:

Hi David,

Instead of an antivirus, considering using these things instead: AppArmor, FireHOL, Firejail, and NoScript or uBlock Origin.

Phil

Exactly, I used to be that ignorant, no offense, but it is a lack of knowledge that makes people think you need anti virus for everything.

Use AppArmor + Firejail + Noscript + Ublock Origin + Privacy Badger

these alone are good enough to block a whole lot of crap.

Also, greasemonkey and AAK-Cont Userscript For uBlock Origin

and you are in good shape. that's my personal thoughts on this.

Offline

Board footer