Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You are in many ways asking for an opinion

In general, no, such tools are not advised for the majority of users because of the way you should be using Fedora

  • Install only from trusted sources (fedora and rpmfusion)
  • selinux and firewall enabled
  • In general patches to known vulnerabilities are rapidly released so keep your system up to date
  • You should have any and all data you value backed up
    • You should be monitoring your servers logs , logins, etc

For example, the known vulnerabilities in that post were patched long ago and selinux offers protection against zero day exploits

In addition most if not all of the antivirus tools available for linux are notorious for false positives. In addition the tools are very generic and really can not differentiate between legitimate and malicious ssh https or other connections or valid vs inalid logins

There are some potentially valid user cases :

  • How valuable is your data?
  • Are you running any servers (fedora is probably not the best distro for servers)
  • Shared files with windows (scan samba shares / shared usb / etc)
  • mail server

You are in many ways asking for an opinion

In general, no, such tools are not advised for the majority of users because of the way you should be using Fedora

  • Install only from trusted sources (fedora and rpmfusion)
  • selinux and firewall enabled
  • In general patches to known vulnerabilities are rapidly released so keep your system up to date
  • You should have any and all data you value backed up
    • You should be monitoring your servers logs , logins, etc

For example, the known vulnerabilities in that post were patched long ago and selinux offers protection against zero day exploits

In addition most if not all of the antivirus tools available for linux are notorious for false positives. In addition the tools are very generic and really can not differentiate between legitimate and malicious ssh https or other connections or valid vs inalid logins

There are some potentially valid user cases :

  • How valuable is your data?
  • Are you running any servers (fedora is probably not the best distro for servers)
  • Shared files with windows (scan samba shares / shared usb / etc)
  • mail server

You can harden fedora

  • Run your browser in a selinux jail
  • Mount /home noexec,nodev
  • confine users with selinux I confine my users as user_u, they simply do not need more
  • use a non-admin user for daily activities. How often do you need root access and why not use an account with no root or sudo access most of the time?

All such options will go further than antivirus