[huskerlug] Re: [MLIST] Re: antivirus

On Friday 22 August 2003 08:43 pm, you wrote:
> More of it has to do with the apps that run on Linux.  If someone were to
> write an "Outlook equivalent" mail program for Linux (bugs and all), it
> would allow viruses to spread almost as easy as they do on windoze.  As
> long as the user wasn't running as root and kept their machine patched, the
> virus probably wouldn't "own" the machine, but a virus/worm like Sobig.F
> could still replicate just as easily from a Linux box as it could from a
> windoze box since non-root users are allowed to make outgoing connnections
> and bind to ports above 1023.

I won't be so bold as to say it can't happen here but KMail, the mail program 
I use in Linux does not set attachments to be executable.  Windows (they 
might have changed this very recently) does not have the ability to keep 
script files from being executable.  They are associated with the scripting 
executable and then executed as long as read permissions exists.

With Linux there are more tools to control evil activities.  You can use 
iptables to restrict your outgoing port 25 connections to only your own email 
server.  With the Linux security module I think you can deny the ability to 
make outgoing connections to whoever you want.


----
Husker Linux Users Group mailing list
To unsubscribe, send a message to huskerlug-request@xxxxxxxxxxxxx
with a subject of UNSUBSCRIBE

Other related posts: