I was reading on the web that clamav is not an “endpoint antivirus solution” but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?

  • maxihuenu@lemmy.mlOP
    6·
    8 hours ago

    in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

    in specific: i want to self host services in my home server, so i want it to be secure and protected

    • throwaway403@programming.dev
      5·
      8 hours ago

      in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

      Aight. Understood. Thank you for the clarification!

      So…, now it becomes a question of how paranoid security-sensitive you are 😅. I suppose relying on a distro with pretty decent security defaults (like e.g. Fedora or openSUSE) makes sense for a start. Furthermore, definitely commit to best practices[1]. As for the scanning part, other comments have already touched on that.

      If the PC you’re doing this contains sensitive information OR you’re not satisfied with the provided “probably good enough” solution, then consider going “the extra mile”. Which would involve the use of specialized OSes, relying on VMs and whatnot. But I digress…

      in specific: i want to self host services in my home server, so i want it to be secure and protected

      Unfortunately, I’m not confident talking on servers specifically. It’s simply not something I’ve put serious thoughts to yet. I hope someone else will touch on that 😉.

      1. A lot can be said on this, but it would dominate this text if I’d try to touch on it. ↩︎

        • throwaway403@programming.dev
          3·
          7 hours ago

          That depends.

          If this is a Linux guest on a Linux host and both are just your average distros, then it’s fine~ish. It’s not 100% safe as some malware is able to escape a VM, see this for a recent example of this.

          Doing your shady stuff within a disposable air-gapped[1] VM on a RISC-V powered Sculpt OS host should be pretty safe, though.

          1. In this context, I just mean it has only had the least amount of possible privileges/capabilities during its lifetime. ↩︎