I was reading on the web that clamav is not an “endpoint antivirus solution” but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?

  • pelya@lemmy.world
    9·
    18 hours ago

    For ages it was safe to download and open random files on Linux, because they simply would not run. Now Linux is a very desirable target for criminals, so they learned to write multiplatform viruses.

    The best option would be an automatic sandbox for running random crap downloaded who knows where, and Android does that automatically, but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM, all of which require half a day of learning new tools, and then debugging why graphics would not work.

    • Sickday@kbin.earth
      6·
      11 hours ago

      but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM

      You don’t need to do any of that stuff to achieve application sandboxing. bubblewrap or firejail exist for exactly this purpose. Firejail in particular can integrate with AppArmor (which most mainstream distros that aren’t RHEL or Fedora ship with) so you get MAC on top of sandboxing.