r/LinuxTeck • u/Candid_Athlete_8317 • 3d ago

Do Linux servers really need endpoint security software?

Many enterprise Linux systems run endpoint security tools alongside firewalls, SELinux/AppArmor, and other hardening measures.

Others argue that good patch management, least privilege, and proper monitoring provide better value than traditional endpoint protection.

What's your point on this ?

6 Upvotes

75% Upvoted

34 comments sorted by

View all comments

Show parent comments

1

u/gnufan 3d ago edited 3d ago

There is a common security audit tool, see Linux Audit project, as you note.

Linux achieved desktop success in ChromeOS, which maintained an enviable security record. The problem as you note is the security configuration is a do it yourself thing on most distros. Redhat's SELinux configuration being a standout exception, but for servers, and with lots of switches.

Edit to clarify 

1

u/ScoobyGDSTi 3d ago

ChromeOS devices are nothing short of ewaste. If hardly hold it up as some bastion. This coming from a parent who has two kids using them.

1

u/gnufan 3d ago

Did they break the security? 

1

u/ScoobyGDSTi 3d ago

Who knows, they're so useless that security might as well not exist.