regarding security on Linux

Eric Gilliland jegilliland at hotmail.com
Wed Dec 26 21:40:50 CST 2001


>Umm, no. If you don't run as root and your account doesn't have root
>access and you don't have some slick way of getting root access, you can
>only damage your own account and directory and programs with a "virus".

I never run as root unless I have to.  I at least know enough not to do 
that!

>He has crippled his system for security's sake. Many things on his menu may 
>not
>work now because of not being able to "su" via a program [at least that
>was my experience with Mandrake 7.x].

How badly have I crippled my system? So things may not run because of this? 
It will not simply prompt me for root's password, like it does when I go to 
install an RPM? I'm not sure I like that.  DO you think I would be better 
off selecting "normal" instead of "paraniod"?

> > A simple Google search on the words 'Linux virus' brought up
> > some things which you may want to know about:
> >
> > http://linux.oreillynet.com/pub/a/linux/2001/09/18/insecurities.html

Thanks for the link.

>I didn't see very many viruses [granted a quick scan]. Mostly exploits
>and worms. I distinguish between the two. Viruses can be prevented by
>not executing them. Worms and exploits are much more difficult to
>control and virus scanners don't usually help here.

I never execute attachments, even those from people I know.  I do use 
web-based email, though, as you can tell from my evil M$ email address.

As for the Quake III for Linux availability tip, I appreciate it, but I 
regret to say that I cannot buy any games until I finish my thesis.  I am 
sure it will still be available then, though.  I would still be afraid to 
brave Oak Park mall for a couple of days, too. I heard it was really bad 
there.

Thanks again for the advise.

Eric

_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com




More information about the Kclug mailing list