Re: [SLUG] Can this be done?

From: Steve Szmidt (steve@szmidt.org)
Date: Mon Aug 16 2004 - 22:31:06 EDT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 16 August 2004 09:22 pm, Richard S. Smoot wrote:
> Mozilla has POP UP management built in and labeled as such.
> I set cookies to be returned only to the site that set them.
> In windows I use Spybot Search and Destroy tyo get rid of third party
> cookies and other malware.
> Is something like this available in Linux?
> I know a lot of that stuff doesn't work in a non Windows environment,
> but I am still concerned.
>
> Richard Smoot

Fortunately, if properly used, Linux can easily be setup so it does not allow
a user to add programs that can execute or change existing programs.

This means that as long as you don't run as root, you cannot eaily get such
crap installed in your computer. Never mind executing.

Now, you can circumvent this by having your \home partition configured to
allow creation and execution of user code. That will immediately allow for
viral code to be installed. My systems aways have a number of partitions.
That allows me to say that /usr cannot be modified as it's usually running in
a read only, execute mode, where changes are not possible.

Then when I do an update I remount it as read/write.

The /usr/share dir is also on a seperate partition. Same for /var /tmp.

Now if you were to get a viral type program on your computer you can actually
run a find command that will list all executables owned by you, or any normal
user. You can delete them, add a new user while disabling the old one as ways
of stopping such code.

This makes it pretty hard to write code that will be viral under Unix type
O/S's. Of course you can run as root all the time and really get in trouble,
but that's easy to avoid...

Spybot s/w is already installed through simple commands like find. There
really are not very many places for them to hide on a decent system.

Of course, if s/w has remote access holes and the likes, then that can be used
to get around other security measurement. But in all it's pretty good these
days. Mandrake 10, f.ex., has a pretty good security that is also easy to
configure.

- --
Steve

"They that would give up essential liberty for temporary safety deserve
neither liberty nor safety."
                                Benjamin Franklin

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBIW3uljK16xgETzkRAkFAAKCW733FE+F9jYbHLQ0dO4loEclhkQCgjddt
5iTF6srIm1d7SRaijzjkCMk=
=fwzf
-----END PGP SIGNATURE-----

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 14:51:29 EDT