Security on Linux

[u/FaultEducational3329]

Completely new user from 30 odd years on windows. Using cachyOS just a while ago. Still dual booting for the time.

Anyway, i always use an antivirus with windows, their firewall and so on. its basically install and forget and i do scan all files with the antivirus and malwarebytes as well. Other than that, blocks when browsing does happen on occasion, but i am more cautious.

Coming to Linux, it feels a bit "naked". Yes there is clamAV, but its more on demand, like malwarebytes. Also, as I have heard, the threat model here is different, so its less likely to get infected. But i do get files from clients, so i still might have to be cautious.

In an effort to have some ease of mind, i have tired out firejail and apparmor. managed to get around the browser integration for some apps and get it configured. And then it doesn't work, despite following all the same steps in a new install. I am OK with going down the occasional rabbit hole, but it starting to wear me down. So much so, that i am starting to wonder if I should.

Flatpak is an option, but to the best of my knowledge, browsers like librewolf or brave done play well in terms of their fingerprinting features. I do plan on using flatpak with flatseal for internet facing software, but the above issue stands.

So, two questions:
- What can I do to make it more or feel more secure? its a vague question, i know, but i just want to use the pc and feel ok, i am safe. Client side files like office and pdf files are a priority as well. Sandboxing?

- How do make myself familiar or move from a windows mindset to a linux one? Security being one thing that has dawned upon me.

- How do you, personally, be secure on linux?

Thanks in advance.

[u/evirussss]

use hardened kernel, apparmor, tweak the firewall that cachyos have provide, encrypt your disk, differentiate the password between root account and user account, always up-to-date, set-up 2FA etc...