this post was submitted on 02 Mar 2025
3 points (100.0% liked)
homelab
7120 readers
17 users here now
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
My antivirus for Linux is a policy of not executing things as root and installing things via safe channels when possible.
If I'm setting up a server or other untrusted service, I create a user specifically for it that has very limited permissions.
This makes it so that when something is compromised it is still trapped in a box and can't spread.