I secure systems for my day job. That means installing AV software, ensuring Windows Firewall is ON, etc. (Plus many other things…)

I’ve seen discussions around disk encryption here, but I don’t recall much about a malware protection. Maybe a little about personal (desktop) firewalls.

I’m aware of Clam, etc, but is anyone actually using these tools much?

Or are we just presuming we’re all immune from the bad guys targeting Windows?

  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 months ago

    Immutable distros aren’t considered secure or reliable by the industry. You need SElinux to secure a device properly.

    • Guenther_Amanita@feddit.de
      link
      fedilink
      arrow-up
      3
      ·
      4 months ago

      Definitely. Having SELinux or AppArmour is very important.
      Image based distros still offer some security and reliability benefits, because they are reproducible and therefore issues can be fixed quicker and easier. Also, at least now, due to the read-onlyness of the core parts of the OS, you can’t install malware as easily.

      • Pantherina@feddit.de
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        4 months ago

        On Fedora Atomic (only) any process running from the wheel user can install software without a password prompt. I am fixing this currently.

        Also, SELinux is only in use for system processes, all user processes run unconfined.