this post was submitted on 27 Aug 2026
39 points (95.3% liked)

Linux

67258 readers
703 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS
 

I was reading on the web that clamav is not an "endpoint antivirus solution" but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a desktop/personal computer?

all 30 comments
sorted by: hot top controversial new old
[–] throwaway403@programming.dev 22 points 21 hours ago* (last edited 21 hours ago) (1 children)

OP, I'll be honest with ya: if you're looking for something akin to M$ Defender but on Desktop Linux (and free), you ain't gonna find it.

A quick look at your Lemmy history suggests that you're security-conscious. In that context, it's worth noting that 'Linux' does provide you. However, depending on your situation and/or threat model, this might come at the cost of expertise.

If you never download random stuff from the internet, then your average distro might be sufficient as long as you commit to the most basic set of best practices.

However, if you do download random stuff from the internet OR if your situation and/or threat model warrants a more conscious approach, then things might change substantially.

But before subjecting you to Qubes OS, we'd have to know more about your situation. So, first of all, could you elaborate on your use case of ClamAV? Or, perhaps even what you intend to do in general?

[–] maxihuenu@lemmy.ml 7 points 14 hours ago* (last edited 14 hours ago) (1 children)

in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

in specific: i want to self host services in my home server, so i want it to be secure and protected

[–] throwaway403@programming.dev 5 points 13 hours ago (1 children)

in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

Aight. Understood. Thank you for the clarification!

So..., now it becomes a question of how ~~paranoid~~ security-sensitive you are 😅. I suppose relying on a distro with pretty decent security defaults (like e.g. Fedora or openSUSE) makes sense for a start. Furthermore, definitely commit to best practices^[A lot can be said on this, but it would dominate this text if I'd try to touch on it.]. As for the scanning part, other comments have already touched on that.

If the PC you're doing this contains sensitive information OR you're not satisfied with the provided "probably good enough" solution, then consider going "the extra mile". Which would involve the use of specialized OSes, relying on VMs and whatnot. But I digress...

in specific: i want to self host services in my home server, so i want it to be secure and protected

Unfortunately, I'm not confident talking on servers specifically. It's simply not something I've put serious thoughts to yet. I hope someone else will touch on that 😉.

[–] liberatedGuy@lemmy.ml 4 points 13 hours ago (1 children)

I do my shady stuff inside a VM. How safe is that?

[–] throwaway403@programming.dev 4 points 12 hours ago (1 children)

That depends.

If this is a Linux guest on a Linux host and both are just your average distros, then it's fine~ish. It's not 100% safe as some malware is able to escape a VM, see this for a recent example of this.

Doing your shady stuff within a disposable air-gapped^[In this context, I just mean it has only had the least amount of possible privileges/capabilities during its lifetime.] VM on a RISC-V powered Sculpt OS host should be pretty safe, though.

[–] liberatedGuy@lemmy.ml 2 points 11 hours ago

Thanks for the info and the link.

[–] utopiah@lemmy.ml 12 points 21 hours ago (1 children)

Backup your data so that you can restore what matters to you. There is no need for an antivirus on Linux if you stick to the distribution channels of your distribution because package are verified. Unlike in the close source world because the source of those packages are open, verifying, even though imperfect, is much simpler. Popular distributions, e.g. Debian or Redhat, have a very strong incentive not to let anything slip. Maintainer of packages also are able not just to track what changed but also by whom, that means if there is a problem it can be identified and attributed rather quickly and thus other maintainers can be warned. It is not impossible and supply chain attacks do happen, e.g. xz backdoor, but it is rare, specific and has been studied and thus partly alleviated even though it remains a challenge.

If you do download executables or binaries, not media e.g. videos or music, from random places though then all bets are off.

[–] myszka@lemmy.ml 2 points 12 hours ago

I've heard it is possible to put a virus even into an image, and I might actually be a victim of such an attack... But yeah, it is extremely rare

For the average home desktop/laptop user, you probably don't need it. It won't hurt, but unless you're really downloading and executing random files off the internet, it won't do much.

If you run a server that is publicly available on the internet that allows folks to upload files to it, then you will almost certainly want it.

[–] oyzmo@piefed.social 7 points 21 hours ago

If you are sailing the seas gamewise 🏴‍☠️, Bottles does decent job finding and warning you with it's Analyse feature :)

[–] Shadow@lemmy.ca 18 points 1 day ago

Not really worth it unless you're downloading attachments from spam emails or sketchy websites. It's pretty dated tech - old school AV definitions, but there's nothing better that's free afaik

[–] Neptr@lemmy.blahaj.zone 16 points 1 day ago* (last edited 1 day ago) (1 children)

I recommend Lenspect on Linux. It uses VirusTotal API to scan files you select. It is available on Flathub with minimal permissions (basically just network permission to talk to VirusTotal).

[–] throwaway403@programming.dev 10 points 22 hours ago

FWIW, Lenspect is not capable of selecting a folder and scanning all of its contents^[Like what you'd probably want to do after extracting an archive.] (yet). For that (and more), there is vt-cli (source); maintained by (more or less) the same people that brought us VirusTotal. List of repos in which it's found.

[–] mecen@lemmy.ca 5 points 21 hours ago* (last edited 21 hours ago)

Lenspect or just VirusTotal

ClamUI on flathub

It is not worthy that it mainly is for windows malware and if you stick to your distro repositories you should be save

[–] eldavi@lemmy.ml 7 points 1 day ago (1 children)

clam-av is like an anti-virus condom -- there are significantly better ways to protect yourself but if you're not aware them, or don't want to put in the effort, or just don't want to bother for whatever reason; then it's there and it's better than nothing. lol

[–] AlmightyDoorman@kbin.earth 5 points 23 hours ago (1 children)

What better solution does exist if you want to have sex with strangers?

[–] eldavi@lemmy.ml 2 points 23 hours ago (3 children)

some of this

some of this

and some of that

and some of that

[–] AlmightyDoorman@kbin.earth 7 points 15 hours ago

Doxycycline is an antibiotic, they are famous for having no effect on viruses as e.g. HIV. And even if the other party involved is honest with you they might not know that they have an STD, some are already contagious without an positive test.

[–] SnotFlickerman@lemmy.blahaj.zone 1 points 15 hours ago

I guess being severely allergic to doxycycline means I can just go fuck myself.

[–] AceFuzzLord@lemmy.zip 6 points 1 day ago (1 children)

I have yet to have many issues with it, so far. So many people say you don't need an antivirus on linux, but I am of the belief that you should have it regardless. Better safe to have a scanner just in case, especially if you download anything off the internet. Doesn't matter if it's from a supposedly safe source, it's better IMO to just scan it just in case.

[–] pelya@lemmy.world 9 points 23 hours ago (1 children)

For ages it was safe to download and open random files on Linux, because they simply would not run. Now Linux is a very desirable target for criminals, so they learned to write multiplatform viruses.

The best option would be an automatic sandbox for running random crap downloaded who knows where, and Android does that automatically, but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM, all of which require half a day of learning new tools, and then debugging why graphics would not work.

[–] Sickday@kbin.earth 6 points 16 hours ago (1 children)

but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM

You don't need to do any of that stuff to achieve application sandboxing. bubblewrap or firejail exist for exactly this purpose. Firejail in particular can integrate with AppArmor (which most mainstream distros that aren't RHEL or Fedora ship with) so you get MAC on top of sandboxing.

[–] pelya@lemmy.world 2 points 16 hours ago

I'll check them out

[–] zdhzm2pgp@lemmy.ml 5 points 1 day ago (1 children)
[–] spacetff@lemmy.ml 3 points 12 hours ago

Excellent..! Thank you.

[–] buckykat@hexbear.net 4 points 1 day ago (1 children)

You do not need an antivirus

[–] Cyber@feddit.uk 2 points 22 hours ago (1 children)
[–] utopiah@lemmy.ml 4 points 21 hours ago (1 children)
[–] Cyber@feddit.uk 1 points 4 hours ago

Ok, yeah, I think your last sentence is probably where I was thinking...

Yep, repo packages are going to be fairly good except for watering hole attacks, but PDFs and other documents could be a potential source of malware that anti-malware software would - potentially - protect the user.