Advanced Security R3j3ct's Linux Mint 22.2 Xfce Home Laptop Config 2025

[R3j3ct]

This is my security config on my Laptop for 2023.

 

[Ink]

Use Other OS (desktop) field to share the Linux Distro name/version. Are you using Ubuntu or another distro?

 

[R3j3ct]

Yes, and i have edited the post to show.

 

[R3j3ct]

all i got for a update, switched from ubuntu to linux mint, and i find it less of a pain in the ass then ubuntu and the mess they had a few months ago with the updates and blah...

 

[ZeroDay]

Looks good to me.

 

[ForgottenSeer 103564]

Good to see you are using timeshift, excellent program. With apparmor are you running standard security profile, or is yours custom, have you added profile extras, if so what issues did you run into that needed corrected via applications.

chrootkit vs rkhunter.
chrootkit only scans for rootkits on the local host whereas rkhunter verifies consistency of a configuration, symlinks in file system, open TCP sockets on a localhost ect. I personally use rkhunter.

There is also a tool called Lynis you can look into, a paid and free version. It is a system auditing tool that can help you learn of CVE's and harden your system.

 

[R3j3ct]

Good to see you are using timeshift, excellent program. With apparmor are you running standard security profile, or is yours custom, have you added profile extras, if so what issues did you run into that needed corrected via applications.

I am just running standard security profiles, i didn't want to try any custom or profile extras mainly cause i'm lazy and don't want to fix/deal with any experimental profiles.

There is also a tool called Lynis you can look into, a paid and free version. It is a system auditing tool that can help you learn of CVE's and harden your system.

yea, i forgot to run Lynis, might get to that today!

 

[ForgottenSeer 103564]

I am just running standard security profiles, i didn't want to try any custom or profile extras mainly cause i'm lazy and don't want to fix/deal with any experimental profiles.


yea, i forgot to run Lynis, might get to that today!

Not much point in running Linus if you do not wish to finagle and mess with the system, as it requires quite a bit to "harden" the system, Linus just shows you where it needs to be done.

 

[R3j3ct]

lmao, i hear you! but i ran lynis to just see! lynis gave me a score of 70 which i think i just fine for what i use this for...never the less, being new to linux full-time that is, i always want and accept knowledge! i was at 60+ before i ran lynis, i added fail2ban & debsum i think it was, checks hashes of software i think...is there anything i should be paying attention to and am not doing it already?

 

[ForgottenSeer 103564]

lmao, i hear you! but i ran lynis to just see! lynis gave me a score of 70 which i think i just fine for what i use this for...never the less, being new to linux full-time that is, i always want and accept knowledge! i was at 60+ before i ran lynis, i added fail2ban & debsum i think it was, checks hashes of software i think...is there anything i should be paying attention to and am not doing it already?

I would state you are more than likely fine other than watching those URLs since you do your banking and buying online.

 

[R3j3ct]

Switched to the Xanmod kernal, Quad9 DNS - Set Quad9 in firefox by using system dns & Torguard had option to use Quad9, Malwarebytes Browser Guard.

Seen the Quad9 & Malwarebytes Browser Guard on a recent post as advice for someone & applied to my system so appreciate it forum!

 

[R3j3ct]

switched brave for librewolf, set Cloned MAC address for wifi connection.

 

[R3j3ct]

Disabled Cups & Disabled Avahi

 

[R3j3ct]

12/12/2025
- Integration of clamav + lmd
-Firefox (Firejailed) Launcher command: firejail --noroot --nogroups --seccomp --nonewprivs --private-tmp --private-cache --private-dev --dns=9.9.9.9 firefox -no-remote

 

[piquiteco]

12/12/2025
- Integration of clamav + lmd
-Firefox (Firejailed) Launcher command: firejail --noroot --nogroups --seccomp --nonewprivs --private-tmp --private-cache --private-dev --dns=9.9.9.9 firefox -no-remote

Good configuration on your Linux Mint. I couldn't get clamAV real-time protection to work on Linux Mint. I tried everything and ended up giving up. I could only scan with ClamAV manually through the terminal. Other than that, I like Linux Mint. It was the only distro that worked most stably on my desktop PC out of all the ones I tested.

 

[EASTER]

Nice MINT double deuce version config. Will you be upgrading to ZENA on release or wait?

 

[R3j3ct]

Good configuration on your Linux Mint. I couldn't get ClamAV real-time protection to work on Linux Mint. I tried everything and ended up giving up. I could only scan with ClamAV manually through the terminal. Other than that, I like Linux Mint. It was the only distro that worked most stably on my desktop PC out of all the ones I tested.

Out of all the linux distro's i have tried, linux mint like you said is the only stable reliable choice in my opinion. Plus lots of info out there to help or guide for mint. I'll admit it took work getting clamav installed with LMD (Linux Malware Detect). Mostly just make sure the maldetect/conf.maldet is configured right. I'll admit i used AI to help threw the process but got it done. I used DeepSeek v3.2 if it helps at all.

Nice MINT double deuce version config. Will you be upgrading to ZENA on release or wait?

I have learned its good to wait at least a good month after a new release comes out. Bugs and what not that the masses will find, but after that i plan on upgrading. Wish i would have known about linux back in the day i would have been on linux after win7 lol.

 

[R3j3ct]

Good configuration on your Linux Mint. I couldn't get clamAV real-time protection to work on Linux Mint. I tried everything and ended up giving up. I could only scan with ClamAV manually through the terminal. Other than that, I like Linux Mint. It was the only distro that worked most stably on my desktop PC out of all the ones I tested.

You had Me looking for notes! I couldn't install clamonacc for ClamAV Real-time, so i found it easier to do everything with LMD (Linux Malware Detect), these are the steps that pointed me where i needed to be! Must have winged it from there cause lol

 

[oldschool]

You had Me looking for notes! I couldn't install clamonacc for ClamAV Real-time, so i found it easier to do everything with LMD (Linux Malware Detect), these are the steps that pointed me where i needed to be! Must have winged it from there cause lol

Bookmarked in case I'm ever up to the challenge of learning a completely new OS.

 

[lokamoka820]

Bookmarked in case I'm ever up to the challenge of learning a completely new OS.

You don't really need to add security software for a Linux distro, but in case you want to learn a new OS, Linux Mint is very easy to follow as the author of the thread mentioned, and the developer even mentions in the upgrade steps how to remove deprecated libraries/applications/components, something I've never seen in any other Linux distro.