Virus scanner for Linux?

Neocorteqz

2[H]4U
Joined
Mar 24, 2001
Messages
2,051
Does a Good free virus scanner exist for linux? i saw an ad for drweb in a linux install or something like that But i could never reach the site.
 

obs

Supreme [H]ardness
Joined
Nov 4, 2002
Messages
4,806
Not really because virus' aren't really made for linux.
 

fluxrad

n00b
Joined
Oct 16, 2004
Messages
7
No good virus scanner exists for linux. Because of the permission based setup on Linux, virii don't really exist there. You *do* need to worry about your box getting cracked if it's networked. For that, make sure you keep your patches up to date. I would also recommend installing tripwire and running tools like Nessus or Satan every once in a while.
 
Joined
Sep 2, 2000
Messages
987
linux_guru said:
Virus scanners are NOT required for Linux.

Very true, at least at this point in time. Although, virus scanners aren't required for Windows, either, if you know what you're doing.
 

Neocorteqz

2[H]4U
Joined
Mar 24, 2001
Messages
2,051
Ohh I'm not expecting to get a virus, although it seems everytime I check my email, i get another warning that i couldn't dl an attachment cause it conatains one (in windows). I was just wondering if they have them, i wanted to check it out is all.

Thanks for your comments.
 

Josh_B

Supreme [H]ardness
Joined
Aug 15, 2000
Messages
6,954
I find it rather dangerous that Linux people forget that if Linux was as big a target as Windows, even with it's virus-resistant properties, it could still get infected.

There are tons of people out there, with nothing better to do than write stupid virii for various OS'.

Now, given that file permissions are more strict than in Windows, (and are about to get even more strict, once MAC is fully implemented under Linux), and that Linux does not feature anywhere *near* the same amount of code integration as Windows, it is true that Linux, IMHO, is less likely to get infected. HOWEVER, that's no reason to let your guard down. If you are serious about security, you should still run an A/V client on your Linux server.

I've personally installed clam on a few servers I've setup, without issues. :)
 

mgars

Limp Gawd
Joined
Aug 1, 2003
Messages
231
your best virus scanner for linux is the fact that you have linux! so you've already picked it. no one writes viruses for linux. you're safe
 

obs

Supreme [H]ardness
Joined
Nov 4, 2002
Messages
4,806
Well once it is a problem and a linux virus scanner is actually a marketable product I am sure there will be one. The thing is, getting root access is a lot harder in linux than in windows (assuming the user isn't logged on as root).
 

Neocorteqz

2[H]4U
Joined
Mar 24, 2001
Messages
2,051
obs said:
Well once it is a problem and a linux virus scanner is actually a marketable product I am sure there will be one. The thing is, getting root access is a lot harder in linux than in windows (assuming the user isn't logged on as root).
or has a password that is easy to crack.

You can't use iptables to stop access to certain partitons/directories can you?
 

Josh_B

Supreme [H]ardness
Joined
Aug 15, 2000
Messages
6,954
Neocorteqz said:
or has a password that is easy to crack.

You can't use iptables to stop access to certain partitons/directories can you?

Uh, iptables is a packet filter, not a filesystem security system.

You could mount a partition as read-only, so as to effectively disable any users besides those with root-level priviledges from making changes.
 

Josh_B

Supreme [H]ardness
Joined
Aug 15, 2000
Messages
6,954
mgars said:
your best virus scanner for linux is the fact that you have linux! so you've already picked it. no one writes viruses for linux. you're safe

Yes and no.

Just because you're running Linux does NOT guarantee that you're immune to social engineering attacks, or even from any type of attack. ALL code has flaws, not just Windows.

I love open-source as much as all of you, but you have to realize that if and when Linux gets as popular as Windows, you will start to see more virus and cracking efforts.
 

obs

Supreme [H]ardness
Joined
Nov 4, 2002
Messages
4,806
Neocorteqz said:
or has a password that is easy to crack.

You can't use iptables to stop access to certain partitons/directories can you?
When logged in, the only thing a user has write directory to is their home directory, and usually the kernel partition isn't even mounted.
 

Josh_B

Supreme [H]ardness
Joined
Aug 15, 2000
Messages
6,954
obs said:
When logged in, the only thing a user has write directory to is their home directory, and usually the kernel partition isn't even mounted.

/boot is mounted, at least with all of the RedHat releases I've used, including FC 1/2/3.
 

Neocorteqz

2[H]4U
Joined
Mar 24, 2001
Messages
2,051
Josh_B said:
Uh, iptables is a packet filter, not a filesystem security system.

You could mount a partition as read-only, so as to effectively disable any users besides those with root-level priviledges from making changes.
thought you could allow access from certain IP's.

New to linux firewall's, I never even used a firewall in linux till recently.
 

ameoba

Supreme [H]ardness
Joined
Jan 9, 2001
Messages
6,413
Neocorteqz said:
thought you could allow access from certain IP's.

New to linux firewall's, I never even used a firewall in linux till recently.

Yes, this is exactly what it does. How does this tie in, at all, to which directories somebody's accessing once they get in?
 

teckgood

Weaksauce
Joined
Oct 7, 2004
Messages
67
It looks like most of you have missed the point. Virus scanning software is not used on Linux to protect the Linux system, although it does detect the few Linux viruses that are out there; it is used to find and remove viruses on mail and file servers so the viruses cannot damage Windows systems.
 

Josh_B

Supreme [H]ardness
Joined
Aug 15, 2000
Messages
6,954
teckgood said:
It looks like most of you have missed the point. Virus scanning software is not used on Linux to protect the Linux system, although it does detect the few Linux viruses that are out there; it is used to find and remove viruses on mail and file servers so the viruses cannot damage Windows systems.

That is only CURRENTLY. There's no reason why someone couldn't write a true native Linux virus, however. THAT is the point no one seems to get.

I realize, however, that the poster is most likely looking for a virus scanner for the reasons you mentioned.
 

Josh_B

Supreme [H]ardness
Joined
Aug 15, 2000
Messages
6,954
Neocorteqz said:
thought you could allow access from certain IP's.

New to linux firewall's, I never even used a firewall in linux till recently.

N.P. - sorry to be terse.

Enjoy your new Linux machine.
 
Top