this post was submitted on 27 Aug 2026
43 points (93.9% liked)

Linux

67297 readers
864 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS
 

I was reading on the web that clamav is not an "endpoint antivirus solution" but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?

all 32 comments
sorted by: hot top controversial new old
[–] throwaway403@programming.dev 25 points 3 days ago* (last edited 3 days ago) (1 children)

OP, I'll be honest with ya: if you're looking for something akin to M$ Defender but on Desktop Linux (and free), you ain't gonna find it.

A quick look at your Lemmy history suggests that you're security-conscious. In that context, it's worth noting that 'Linux' does provide you. However, depending on your situation and/or threat model, this might come at the cost of expertise.

If you never download random stuff from the internet, then your average distro might be sufficient as long as you commit to the most basic set of best practices.

However, if you do download random stuff from the internet OR if your situation and/or threat model warrants a more conscious approach, then things might change substantially.

But before subjecting you to Qubes OS, we'd have to know more about your situation. So, first of all, could you elaborate on your use case of ClamAV? Or, perhaps even what you intend to do in general?

[–] maxihuenu@lemmy.ml 7 points 2 days ago* (last edited 2 days ago) (1 children)

in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

in specific: i want to self host services in my home server, so i want it to be secure and protected

[–] throwaway403@programming.dev 7 points 2 days ago (1 children)

in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

Aight. Understood. Thank you for the clarification!

So..., now it becomes a question of how ~~paranoid~~ security-sensitive you are 😅. I suppose relying on a distro with pretty decent security defaults (like e.g. Fedora or openSUSE) makes sense for a start. Furthermore, definitely commit to best practices^[A lot can be said on this, but it would dominate this text if I'd try to touch on it.]. As for the scanning part, other comments have already touched on that.

If the PC you're doing this contains sensitive information OR you're not satisfied with the provided "probably good enough" solution, then consider going "the extra mile". Which would involve the use of specialized OSes, relying on VMs and whatnot. But I digress...

in specific: i want to self host services in my home server, so i want it to be secure and protected

Unfortunately, I'm not confident talking on servers specifically. It's simply not something I've put serious thoughts to yet. I hope someone else will touch on that 😉.

[–] liberatedGuy@lemmy.ml 6 points 2 days ago (1 children)

I do my shady stuff inside a VM. How safe is that?

[–] throwaway403@programming.dev 6 points 2 days ago (1 children)

That depends.

If this is a Linux guest on a Linux host and both are just your average distros, then it's fine~ish. It's not 100% safe as some malware is able to escape a VM, see this for a recent example of this.

Doing your shady stuff within a disposable air-gapped^[In this context, I just mean it has only had the least amount of possible privileges/capabilities during its lifetime.] VM on a RISC-V powered Sculpt OS host should be pretty safe, though.

[–] liberatedGuy@lemmy.ml 2 points 2 days ago

Thanks for the info and the link.

For the average home desktop/laptop user, you probably don't need it. It won't hurt, but unless you're really downloading and executing random files off the internet, it won't do much.

If you run a server that is publicly available on the internet that allows folks to upload files to it, then you will almost certainly want it.

[–] Shadow@lemmy.ca 19 points 3 days ago

Not really worth it unless you're downloading attachments from spam emails or sketchy websites. It's pretty dated tech - old school AV definitions, but there's nothing better that's free afaik

[–] utopiah@lemmy.ml 12 points 3 days ago (1 children)

Backup your data so that you can restore what matters to you. There is no need for an antivirus on Linux if you stick to the distribution channels of your distribution because package are verified. Unlike in the close source world because the source of those packages are open, verifying, even though imperfect, is much simpler. Popular distributions, e.g. Debian or Redhat, have a very strong incentive not to let anything slip. Maintainer of packages also are able not just to track what changed but also by whom, that means if there is a problem it can be identified and attributed rather quickly and thus other maintainers can be warned. It is not impossible and supply chain attacks do happen, e.g. xz backdoor, but it is rare, specific and has been studied and thus partly alleviated even though it remains a challenge.

If you do download executables or binaries, not media e.g. videos or music, from random places though then all bets are off.

[–] myszka@lemmy.ml 2 points 2 days ago (1 children)

I've heard it is possible to put a virus even into an image, and I might actually be a victim of such an attack... But yeah, it is extremely rare

[–] utopiah@lemmy.ml 1 points 1 day ago

Targeting Linux distributions is even less likely because unlike Windows or MacOS there is no "official" viewer for a kind of document, being image, video, text, etc but rather only the one that the distribution picked but that even during the installation process the user might ignore or replace. So the attack on the media would have to work for any viewer which seems basically impossible.

Technically possible yes but practically impossible at scale, it would have to be targeting a specific user and then it's a totally different situation.

[–] Neptr@lemmy.blahaj.zone 15 points 3 days ago* (last edited 3 days ago) (1 children)

I recommend Lenspect on Linux. It uses VirusTotal API to scan files you select. It is available on Flathub with minimal permissions (basically just network permission to talk to VirusTotal).

[–] throwaway403@programming.dev 9 points 3 days ago

FWIW, Lenspect is not capable of selecting a folder and scanning all of its contents^[Like what you'd probably want to do after extracting an archive.] (yet). For that (and more), there is vt-cli (source); maintained by (more or less) the same people that brought us VirusTotal. List of repos in which it's found.

[–] oyzmo@piefed.social 7 points 3 days ago

If you are sailing the seas gamewise 🏴‍☠️, Bottles does decent job finding and warning you with it's Analyse feature :)

[–] eldavi@lemmy.ml 7 points 3 days ago (1 children)

clam-av is like an anti-virus condom -- there are significantly better ways to protect yourself but if you're not aware them, or don't want to put in the effort, or just don't want to bother for whatever reason; then it's there and it's better than nothing. lol

[–] AlmightyDoorman@kbin.earth 5 points 3 days ago (1 children)

What better solution does exist if you want to have sex with strangers?

[–] eldavi@lemmy.ml 2 points 3 days ago (3 children)

some of this

some of this

and some of that

and some of that

[–] AlmightyDoorman@kbin.earth 6 points 2 days ago

Doxycycline is an antibiotic, they are famous for having no effect on viruses as e.g. HIV. And even if the other party involved is honest with you they might not know that they have an STD, some are already contagious without an positive test.

I guess being severely allergic to doxycycline means I can just go fuck myself.

[–] mecen@lemmy.ca 5 points 3 days ago* (last edited 3 days ago)

Lenspect or just VirusTotal

ClamUI on flathub

It is not worthy that it mainly is for windows malware and if you stick to your distro repositories you should be save

[–] AceFuzzLord@lemmy.zip 5 points 3 days ago (1 children)

I have yet to have many issues with it, so far. So many people say you don't need an antivirus on linux, but I am of the belief that you should have it regardless. Better safe to have a scanner just in case, especially if you download anything off the internet. Doesn't matter if it's from a supposedly safe source, it's better IMO to just scan it just in case.

[–] pelya@lemmy.world 9 points 3 days ago (1 children)

For ages it was safe to download and open random files on Linux, because they simply would not run. Now Linux is a very desirable target for criminals, so they learned to write multiplatform viruses.

The best option would be an automatic sandbox for running random crap downloaded who knows where, and Android does that automatically, but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM, all of which require half a day of learning new tools, and then debugging why graphics would not work.

[–] Sickday@kbin.earth 6 points 2 days ago (1 children)

but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM

You don't need to do any of that stuff to achieve application sandboxing. bubblewrap or firejail exist for exactly this purpose. Firejail in particular can integrate with AppArmor (which most mainstream distros that aren't RHEL or Fedora ship with) so you get MAC on top of sandboxing.

[–] pelya@lemmy.world 2 points 2 days ago

I'll check them out

[–] zdhzm2pgp@lemmy.ml 4 points 3 days ago (1 children)
[–] spacetff@lemmy.ml 2 points 2 days ago

Excellent..! Thank you.

[–] buckykat@hexbear.net 4 points 3 days ago (1 children)

You do not need an antivirus

[–] Cyber@feddit.uk 2 points 3 days ago (1 children)
[–] utopiah@lemmy.ml 4 points 3 days ago (1 children)
[–] Cyber@feddit.uk 1 points 2 days ago (1 children)

Ok, yeah, I think your last sentence is probably where I was thinking...

Yep, repo packages are going to be fairly good except for watering hole attacks, but PDFs and other documents could be a potential source of malware that anti-malware software would - potentially - protect the user.

[–] utopiah@lemmy.ml 1 points 1 day ago

In theory maybe but in practice documents viewers and editors are rather foolproof as they read content but they don't execute. The file formats are specifically defined. Also each distribution might have a different default viewer per file format and the user might install a different default, so it's very hard to target, unlike for other OSes with a well known default.