   Linux and Spyware/Viruses?
  Hello, I recently switched OS's to Linux, Ubuntu to be exact. I was wondering if I should be worried about spyware or viruses at all? I've read that since Ubuntu doesn't have a root user  it makes it nearly impossible to have a _serious_ virus, but what about spyware? Is it possible that I can get some type of malware just from browsing the internet, that somehow installs itself in my home directory and does ... well, bad things ... Maybe I'm just being overly paranoid (usually a problem).Are there even any mainstream virus/spyware scanners for debian based systems to begin with?Thanks for any help you can give me! Still getting used to Linux ...[Edited by - AsOne on August 11, 2006 1:27:39 PM]
  Ubuntu doesn't have a root user??? How do you do system administration things, then?   ;Quote:Original post by AsOne I've read that since Ubuntu doesn't have a root userThis is bullshit. It's part of the whole feel-good thing that Ubuntu does.Quote:  it makes it nearly impossible to have a _serious_ virus, but what about spyware? Is it possible that I can get some type of malware just from browsing the internet, that somehow installs itself in my home directory and does ... well, bad things  Possible, yes. Likely, no.Quote:Are there even any mainstream virus/spyware scanners for debain based systems to begin with?Yes, but they only detect Windows viruses. They're mainly intended for mail servers.The miniscule proportion of computers that are Linux, combined with the relative computer literacy of Linux users, makes attacking those systems a waste of time for most hackers. Note in particular that viruses and spyware have become completely profit motivated -- Linux offers no opportunities at all in that regard.   ;  About the root user thing, I think there is a root user, but it's disabled by default (e.g. can't actually log in as root). However, if you put "sudo" infront of commands it asks you for a password (account password) and that command/program can then modify anything that can usually only be modified by the root user.   ;Quote:Original post by AsOneAbout the root user thing, I think there is a root user, but it's disabled by default. However, if you but "sudo" infront of commands it asks you for a password and that command/program can modify anything that can usually only be modified by the root user.I can't say I'm particularly conversant in Linux system administration, but it seems to me that this scheme offers exactly zero additional security, except possibly a minor safeguard against extreme user incompetence. Am I missing something?   ;  When not logged in as the root user (or using "sudo" in the case of Ubuntu), no modifications can be made to any directory or file that the root user owns. This means no files can even be created in any directory other than the home directory. Making it seamingly impossible for a virus to start itself when the computer starts up for example ... Well this is what I gather from my so far limited experience with Linux.   ;Quote:Original post by AsOneWhen not logged in as the root user (or using "sudo" in the case of Ubuntu), no modifications can be made to any directory or file that the root user owns. This means no files can even be created in any directory other than the home directory. Making it seamingly impossible for a virus to start itself when the computer starts up for example ... Well this is what I gather from my so far limited experience with Linux.No, I was specifically referring to Ubuntu's disabling the root account.As for a virus loading on startup... as long as it can get into your account, it could do that pretty easily. Seems to me that replacing the root user with sudo only elevates the risk involved in a normal user account being compromised... That said, this probably isn't anything you need to worry about.   ;Quote:Original post by twixQuote:Original post by AsOneAbout the root user thing, I think there is a root user, but it's disabled by default. However, if you but "sudo" infront of commands it asks you for a password and that command/program can modify anything that can usually only be modified by the root user.I can't say I'm particularly conversant in Linux system administration, but it seems to me that this scheme offers exactly zero additional security, except possibly a minor safeguard against extreme user incompetence. Am I missing something?Yeah, you are. There's a fuzzy warmth factor involved in subtly suggesting that your system is magically safe from you. It makes the users feel better.   ;  It's basically a safeguard to prevent Linux newbies (at which Ubuntu is targeted) from running as root all the time. Makes sense for a newbie distro but not for other distro's. First thing I do in a new ubuntu install is set a root password so I can su to root.   ;The short life and hard times of a Linux virus has a good description of why viruses are so ineffectual on Linux systems.   