Basic cyber security

Is there a recommended cyber security app that should be utilised for Zorin?

other than the firewall? I don't think so.

I like Proton VPN. But its not specific to Zorin. And debatable if its required.
Apparently there is also a free version.

If you're asking about a Linux equivalent to Norton, McAfee, and so on, then no. Linux's design is more secure, there are vanishingly few viruses written for Linux in the first place, and to the best of my knowledge, no company has put together an all in one "security app" for Linux in that sense.

I believe most desktop Linux users do without an anti-virus of any kind, however if having one makes you feel more comfortable, the most well known is ClamAV.

Whilst GNU/Linux tends to be free of viruses, one thing that is common to all platforms (GNU/Linux, Mac, Windows) are rootkits. The two apps that are available run via the Terminal, chkrootkit and rkhunter. Both are available via Synaptic Package manager. In respect of the latter I found something about changing Line 61 to do with Open SSH and can't find the link. Looking at the mailing list archive a recent post states it flags plumbwire (part of pipewire audio) as a potential threat). Clearly rkhunter has not had any major updates since 2018. One thing neither can do is inspect containerised applications such as snapd, flatpak and App Images as they are not integral to the system. The Register recently reported of an unknown security issue not picked up for 12 years with OpenSSH, something I never use (knowingly), which relates to remote access. Whilst there are no GUI applications (apart from Clam-Tk), Pear OS that went by the wayside had developed a 'Security GUI' which was absolutely brilliant, and not long after this innovation, PearOS by David Tavares, shut down. What rootkit hunters do is examine your system for rootkits based on what your system has installed. If you add new (APT) applications they will show up as false positives as they compare your system today against the snapshot that they took on first run. Whilst viruses cannot affect GNU/Linux because they need an .exe to run, it is possible that if you are not diligent with emails that could potentially hold a virus and you forward that to a friend or family member who is a Windows user you would soon fall out of favour. Good article here:

Just common sense stuff: don't download junk from the random sites, don't go around clicking on every link, button or banner you see, don't send money to Nigerian princes, etc.

That alone would make you immune to most threats out there no matter what operating system you're using :slight_smile:

1 Like

The OpenSSH bug was not about clicking on malcontent but a system security hole (now fixed). But I agree, most issues are caused by P.I.C.N.I.C. - Problem In Chair Not In Computer!

There are always going to be vulnerabilities, no matter what you do. Which bug was that, by the way?

The last time I used an antivirus program was in Windows 8 (or maybe 8.1). Never used it on Linux. Never used it on macOS. Unless it's a public computer where people will be plugging in unknown USB devices, or you are in the habit of torrenting a lot, common sense is usually enough to keep viruses at bay. :smiley:

For Linux not directly. If I remember right ESET offers something for Business Usage.

Activate the built-in Firewall would be a good first Step. You could use ClamAV/ClamTK and RKHunter and CHKRootkit which You can install with the Terminal Command sudo apt install clamav clamtk rkhunter chkrootkit

RKHunter und CHKRootkit are only run in the Terminal. There You don't have a graphical Interface. ClamTK is the graphical Interface for ClamAV. Another Thing for scanning Files from a Download for Example is VirusTotal. It is an Online Scanner. You can scan Files and URL's.

Besides that: Be cautious where You go in the Depth's of the Internet. And what You download from where. And don't type in random Terminal Commands that You find in the Internet.

It's not about infection but prevention of (potential) spreading of a virus in an email.

In the old forum Bitdefender were offering a free virus scanner but it soon ran into problems and the advice was to ditch it.
Having checked the link to Bitdefender from this old post it is still available:

https://zoringroup.com/forum/5/214/

When you visit the Bitdefender site you will see a comnand with 'non-free' in it. This does not infer cost but the fact it is proprietary software.

Oh, sorry, I skimmed I little too fast on that reply.

I don't trust anti-virus companies in general. They have an incentive to create problems that they can solve to promote trust and then take advantage of their users:

1 Like

AVG was another. They also eat up memory like nobody's business.

Most grateful for all of the info and advice you people have written. I must say that I have never had a security problem with Zorin as it stands. :grinning:

1 Like