Skip to main content

Anti-virus on Linux Mint?

Every Windows user knows that anti-virus software is essential.  We know that because marketing people tell us, so it must be true.

Even if it's a blatant money-making falsehood, no-body really wants to take the risk that a Windows machine might be easy to compromise.  So all Windows users deploy some sort of anti-virus software on their machines.

For Linux, the game seems different.  One opinion is from the Easy Linux Tips Project ("ELTP").  ELTP is quite hardcore about a security approach, but the key takeaway from the opinion is section 1.1 (Antivirus software and rootkit removers).  Anti-virus software decreases security on Linux Mint because the elevated permissions requires to do its job are the target of a vector attack, i.e. compromise the anti-virus software, then compromise the whole computer.

A consequence of this is that the use of Mono or Wine - translation layers that enable Windows applications to run on Linux Mint - are thus also effective attack vectors, because they enable Linux Mint to run malware written for Windows (crudely) - section 5.

Zoiks.

So, as ELTP suggests, in the primary admin account:

  • sudo ufw enable
  • sudo passwd
This was completed in Mar2018.  Upon re-test in Apr2018, the firewall was still up, so this setting looks like it survives re-boots/shut-downs.

Why did Linux Mint see fit to disable the firewall by default?

Comments

Popular posts from this blog

Downgrading of the project: Calc has a fatal bug - it cannot reliably link workbooks

The project is to build a Linux Mint machine to have the identical functionality and ergonomics as the existing Windows 10 machine. This stage relates to on-going work to make LibreOffice Calc workable. Unfortunately, it turns out that LibreOffice isn't fit for purpose.  Specifically, it cannot reliably link workbooks, even in its own native workbooks. As a consequence, the project is now downgraded.  My time is now better spent doing other, more productive things, with a greater chance of success. Background On 29Jul2018, I complied a detailed test using fresh, sample data created specifically for the purpose, in Excel on Windows 10, then had a virtual machine running LibreCalc on Linux Mint to import it. The basic spreadsheet functionality of linked workbooks failed haphazardly. I logged the test results on 29Jul2018 on AskLibreOffice  and, to date, have yet to see any evidence of anybody taking ownership of recognising the issue and thus fixing it. The s...

Project definition: to build a Linux Mint machine functionally identical to a Windows 10 machine

The aim of my project is to build a Linux Mint machine to have the identical functionality and ergonomics as the existing Windows 10 machine. Software The functional list of requirements, listed as software available on Windows, are: Google Chrome ; Google Earth ; Microsoft Office (but not Office 365); Foxit PDF Reader ; Google Backup & Sync for Google Drive ; Password vault ( Keepass) ; Picasa ; GPS Prune (a Java applet); XN Convert ; XN View ; a VPN client; SatSync ; ProRealTime (a Java applet); 7-ZIP ; MP3tag ; PDFill Free Tools ; device driver for an HP OfficeJet Pro 276dw , used mainly for scanning; Duplicati 2 ; a standalone media player; Treesize . Ergonomics The basic ergonomics is that keyboard access must be at least as good as Windows, if not better.  Keyboard accelerators and keyboard shortcuts must be clearly marked and traceable, without being hidden (if they are hidden, then hidden no more so than in Windows). Network To join t...

Deployment of Wine

The project is to build a Linux Mint machine to have the identical functionality and ergonomics as the existing Windows 10 machine. Having established that there is no way to migrate fully from Windows to Linux , the project now needs to consider running Windows apps in Linux.   This is a big change to the strategy of the project.   This is a big change to the deployment of a Linux workstation, a crushing admission of failure, and the opening of a whole new world of risks to an otherwise secure operating system. Environment & required functionality For this blog post, Wine was tested on: The Linux Mint Xfce 19 virtual machine " Bilbo ", on host Windows 10 laptop " Saruman " The Linux Mint Xfce 18.3 virtual machine " Gimli ", on host Windows 10 host " Legolas ". Alternatives There are alternatives to Wine/PlayOnLinux, notably the paid software Crossover. Software selection Wine and PlayOnLinux are present in L...