Basic security practices for desktop Ubuntu

Question

Most of us know the basic security practices on Windows:

use a limited account

set a password

disable unused services

uninstall bloatware

Antivirus / Antimalware

etc.

I haven't ran linux as my main desktop computer before, so I don't know how to properly secure it. I have heard linux is supposed to be more secure than Windows, but I know that the default settings of anything are rarely secure. What are some things I should do as a new Linux user to secure my desktop system from attack?

Answer 1

Users coming from Windows often search the net for software they need and install it from there. That's wrong for Ubuntu. Use the package manager (Software Centre, Synaptics, ...) to install software.

Try avoid installing software not contained in the distro's official repository as much as possible, and if you really need it be careful to use only trustworthy sources that you can expect to provide updates if necessary. PPAs aren't necessary trustworthy.

The Ubuntu default installation doesn't install any software listening on the outside network so you don't have to care about ports by default.

If you want to setup a firewall ufw and its GUI frontend gufw are easy to use. Note that they only provide filtering on ports, IP numbers and such, not on programs or users. If you don't want to provide services to the outside world blocking any port < 1024 for incoming traffic is usually a good thing.

https://help.ubuntu.com/community/Security is a good starting point for reading.

Answer 2

The practices on Linux are for the most part quite similar. Viruses and malware are less of a problem since no one is really targeting it en-masse. Just make sure that any unused ports are locked down, that you have something like fail2ban in place, and that your email to root is aliased somewhere else (edit /etc/aliases and send it somewhere useful). And of course, keep up with security patches from your distro vendor.