Possible Duplicate:
Do I need to have 'antivirus software' installed?

I've never used Linux before and I heard that you don't need to worry about malware on Linux. So, as the title said, is Linux really malware safe ? Or do people just not bother creating them for Linux because Linux is not popular for standard end-users ?

marked as duplicate by Jorge Castro, Bruno Pereira, Takkat, Panther, jrg Jan 17 '12 at 21:55

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


Linux uses root access to to control what changes are made to the system and keep the system safe.. This means that any given user can't make administrative changes that affect the whole system and allow the virus to propagate and deliver payloads. On some Linux distributions other then Ubuntu, you have to log off and then log back in as the root account to make system-wide changes. This got very annoying to the user, having to log out and log back in all the time, and it was a security flaw because if someone knew the root password they could do anything. So, as a result, many people stayed logged on as root and used it as their account for daily work. Then, when a virus came along, it was not a good day for them.

Ubuntu handles this problem by disabling the option to login as root by default at the login screen, eliminating the security risk. Then, to make any system-wide changes you temporarily switch to the root account using the sudo command, do what you need to get done, and get back. This is a lot more secure way to handle it and much less annoying to the endi user. If you want to enable the root account for some reason, you can do so by running sudo -i and sudo passwd root and setting a password for the root account, if you prefer handling administrative tasks this way.

People are a lot less likely to write viruses for Linux for this reason. If they know that it won't have as much effect, they are more likely to spend their time targeting a different operating system. Linux is also a lot harder to write software for and less popular then windows, and hackers tend to pick the platform where their virus will propagate and have the most effect. All software that goes into the Software Center is screened, so you can download from there knowing it will be safe. Be careful when adding third-party software sources to your system and installing packages from places other then the software center that you don't know much about. Use clam-av as a free antivirus scanner to scan for the few viruses that may be out there. Keep your root account disabled unless you have to enable it for some reason. Update frequently through the Update Manager to ensure you stay up to date with all security updates installed. By following these steps, you are a lot less likely target for an infection then a Windows or Mac user.

  • 1
    Your answer is the typical "sysadmin" perspective response that gets regurgitated around the Linux community, and it doesn't answer a user's real concerns. Yes, on my Ubuntu servers I am glad that (for example) my certificate keys are protected from userspace viruses. But as a desktop user, I am more concerned about my family photos, financial documents, email archive and browser profiles. All of these things live in the userspace, and are just as highly susceptible to malware (such as cryptoware) as on any other OS. The real answer is that Linux is just not popular enough to target. – blendenzo Jan 6 '17 at 22:36

There are loads and loads and loads of Malware for Linux systems too, maybe just not the very same type of Malware that Windows desktop OS is affected by. Its very important to try to understand security with any operating system you use, to properly apply security patches from your vendor/distribution, to be careful with what and how you do things. Its not much different on Linux than on other systems really.

There are lots of automated malware (worms) that scan around for known unpatched vulnerabilities, infect the Linux servers with something, reports home and starts scanning from there too. These "botnets" are later used for everything from DDoS to information theft to spam and everything in between.

So it might be a little bit different, but you sure have to worry still! :)

Not the answer you're looking for? Browse other questions tagged or ask your own question.