this post was submitted on 13 Sep 2025
91 points (94.2% liked)

Linux

58145 readers
343 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS
 

Hi there,

Win10 is soon not supported. Tbh Linux have been on my radar since I started to break from the US big tech.

But how is security handled in Linux? Linux is pretty open-source, or am I not understanding it correctly. So how can I as a new user make sure to have the most secure machine as possible?

you are viewing a single comment's thread
view the rest of the comments
[–] the16bitgamer@programming.dev -3 points 9 hours ago (2 children)

From a windows perspective Linux does 2 things differently which makes it more secure to Windows.

  1. Like MacOS it doesn’t need antivirus software like Norton. Windows needs antivirus because DOS the OS windows is based on, had it where any program had access to anything. This is still sadly true even on Windows 11. Linux is Sandboxed, where instead of giving the program full access to everything, you just give it a sandbox with what it needs.

Unless you deliberately run a program as the admin of Linux (su or sudo), malicious code can just delete system32.

  1. Linux’s is open source and while the desktop market share is tiny, there are a massive market in servers. As a result since there are a lot of eyes on the project if/when problems are found they are fixed quickly. I remember a time when a malicious actor was trying to add a backdoor into a library as a blob and it was caught.

Windows on the other hand is closed source, meaning if MS can’t find the issue, the only time it is found is when it’s in the field. To avoid downtime MS offers bug bounty programs for those who can find issues, rather than to let them exploit it.

[–] Eggymatrix@sh.itjust.works 7 points 9 hours ago (1 children)

I don't know where you got your information from, but your mental model on how and why things work the way they do in both linux and windows seems to be really off.

Since you seem someone that is actually interested in understanding this stuff, I strongly suggest to find some better sources as your base

[–] the16bitgamer@programming.dev 2 points 9 hours ago

When I was taking cyber security, Sandboxing and Linux was one of the topics which was brought up.

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/chap-security-enhanced_linux-securing_programs_using_sandbox

Not sure when I associated it with the entire OS. It appears that the Host OS can be sandboxed for added security, and some containerized applications like Flatpaks are sandboxed. But not all applications are. Like the OS provided packages in most package managers.

[–] ramenu@lemmy.ml 4 points 9 hours ago (1 children)

Windows isn't based on DOS, though. It hasn't been for a very long time. Linux isn't sandboxed. Userspace applications can be sandboxed. There's a difference.

[–] the16bitgamer@programming.dev -1 points 9 hours ago (2 children)

Yes modern Windows is based on the NT Kernal. However to keep with compatibility with older programs, NT needs to be compatible with DOS. For most people they never saw the transition from DOS to NT, since it was quietly done with Win XP.

[–] Krudler@lemmy.world 2 points 8 hours ago

Dude you really have no idea what you're talking about.

[–] atzanteol@sh.itjust.works 1 points 8 hours ago

NT even "back in the day" was very much NOT compatible with DOS.