On Mon, 2016-05-09 at 16:11 -0700, Samuel Sieb wrote:
> Linux is a bit more impervious to the nefarious actions of the
evil
> hackers out there than MacOS and a lot more so that Winblows, but
it
> isn't perfect. If you're surfing the web, wear a full-body condom
or
> two. And always remember the motto:
>
I have never used anti-virus software on a Linux computer. The only
time I've seen malware on a Linux computer is when there has been a
weak
password on an account (generally root) and no rate-limiting on the
ssh
port.
+1
Not only have I never used AV software on a Linux computer (except in a
mail server of course, where the users are running Windows), I have
never even seen a Linux virus. I hear they exist, but those I've read
about seem to have been developed as a proof of concept rather than a
serious threat. Much more important is to keep tight control of logins
from outside your network. Only allow SSH, don't allow it to the root
account, only allow it using token (not password) access, and run
fail2ban.
And keep SElinux enabled and enforcing.
poc