I've used Linux for 30 years, and this free security suite does it all - almost perfectly

2 hours ago 5

Follow ZDNET: Add america arsenic a preferred source on Google.

ZDNET cardinal takeaways

BastionGuard promises superior information for Linux desktops.
Scans, VPNs, backups, updates, a password manager, and much are available.
Does this escaped level unrecorded up to the promises, oregon does it request much time?

I've been utilizing Linux for astir 30 years, and I've lone experienced a information breach once. That was aft inheriting a misconfigured server with a rootkit. I ne'er privation to spell done that again.

Over these 3 decades, I've seen much and much Linux vulnerabilities discovered, which is wherefore I've been saying for immoderate clip present that if a machine -- oregon immoderate instrumentality -- is connected to a network, it's vulnerable. With the advent of AI, vulnerabilities are easier to discover, which is simply a boon for some developers and hackers.

Consequently, I'm ever looking for amended ways to instrumentality much robust security, particularly information solutions for extremity users. Last week, I happened upon a instrumentality called BastionGuard (Git repository here), described by its developer arsenic "a Linux information level designed for users who privation deterministic behavior, explicit policies, and disposable decisions -- not opaque 'trust us' protection."

Also: The 3rd large Linux kernel flaw successful 2 weeks has been recovered - acknowledgment to AI

The BastionGuard level includes BastionGuard Endpoint, BastionGuard Backup, BastionGuard Secure Connection, and BastionGuard Recovery Data.

BastionGuard 1.0 was released February 27, truthful having mentation 2.0 already is impressive. Over the past week, I've tally this level done its paces, and I tin easy spot it becoming a de facto modular for Linux desktop information implicit the coming years.

BastionGuard is not cleanable yet. I ran into immoderate issues that I couldn't resolve. But the developer is rather active, truthful I'm definite these problems volition beryllium fixed soon.

What does BastionGuard do?

Perhaps the easier question is: What does BastionGuard not do? BastionGuard provides real-time scanning, protects against ransomware, maintains an updated database of harmless fiscal institutions to assistance support against banking scams, and blocks perchance infected USB devices. It includes a phishing scanner, a password manager, backup (via snapshot management), a Samba scanner, WireGuard VPN, and ClamScam email scanning.

It's a information drawback container for the Linux desktop.

But does it work?

I ran respective tests with the BastionGuard information features (I haven't yet tried the VPN, Backup, Samba, Banks, oregon USB tools) and recovered it did a bully occupation of protecting me. I downloaded illustration ransomware files (don't bash this astatine home), and it detected them each time. However, I ran into a concern where, aft 1 of the illustration ransomware files was detected, I instructed BastionGuard to quarantine the file, and it quarantined the full Downloads folder.

Also: Linux is getting a information wake-up telephone - wherefore it was inevitable and I'm not worried

When that happened, I checked Security > Quarantine, lone to find thing listed. In different words, it seems that BastionGuard did thing with my Downloads folder, and I cannot undo it. Good happening I was moving successful a virtual instrumentality and not my existent desktop.

I yet located my Downloads folder successful ~/.local/share/BastionGuard/quarantine, which besides contained each the malicious files I'd downloaded from the trial site. The contented present is that the developer needs to hole the Security > Quarantine listing truthful it really picks up the due file; that way, users tin really spot that thing is happening (and tin retrieve a record oregon folder if it is accidentally quarantined without having to bash immoderate sleuthing with the Linux CLI.

This contented indispensable beryllium resolved; otherwise, the exertion could spell southbound precise quickly.

Also: New to Linux? This 10-day checklist volition assistance you settee successful bully and easy

I besides tested the anti-phishing instrumentality and recovered it spot-on. All you bash is benignant a web code into the Phishing Scanner, deed participate connected your keyboard, and hold for the results. I ran done respective known phishing sites, and it caught each one.

To usage the Identity Leak Monitoring tool, you'll request an HIBP and LeakCheck API key, truthful I wasn't capable to trial that functionality.

The password manager is basic, but it works good and allows you to import vaults from CSV files. The WireGuard VPN required that I instal the wireguard-tools package, which was simply a substance of moving sudo apt-get instal wireguard-tools connected a Ubuntu-based system. Once I did that, I was capable to easy link to the WireGuard server connected my LAN.

My last observation

BastionGuard is simply a monolithic level that offers to instrumentality attraction of a batch of information for your Linux desktops. Although it mightiness look overkill for some, for those looking to adhd information to astir each facet of their desktops, this could beryllium a superb option.

Also: How a virtual LAN tin amended support your location network

Yes, BastionGuard has immoderate issues, and I surely anticipation the developer addresses them promptly truthful this instrumentality tin go much wide connected the Linux desktop. As AI continues to assistance some white-hat and black-hat hackers, the request for stronger information connected Linux volition proceed to grow.

I program to support an oculus connected BastionGuard (and further trial its different tools) to spot what happens successful aboriginal releases. In the meantime, it's escaped to effort and usage BastionGuard. You tin download installers (for free) for Ubuntu-, Fedora-, Arch-, and openSUSE-based distributions from the official BastionGuard download page.

Read Entire Article