LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-11-2007, 03:33 PM   #1
suicideguy
Member
 
Registered: Nov 2006
Posts: 32

Rep: Reputation: 15
How do I know if my computer has been violated?


I've been running Kubuntu for about a week now with no firewall and I just got Firestarter configured and running. Is there any security problems I just exposed myself to? Should I run any programs to check for anything malicious?

My root password hasn't changed and I haven't noticed any data loss.
 
Old 02-11-2007, 03:45 PM   #2
b0uncer
LQ Guru
 
Registered: Aug 2003
Distribution: CentOS, OS X
Posts: 5,131

Rep: Reputation: Disabled
You can always try and run some software that tries to detect rootkits etc., but there is no tool that could 100% surely say if your system has been "violated" or not. Good (or handy) crackers know how to hide their work, bad ones may not care. Chances are you don't 'see' anything before it's too late, if even then. In addition to a working firewall you should keep an eye on log files, if you feel it's important, maybe use software like tripwire, if paranoid you could even use virtual filesystems and such things to try and prevent people from changing anything even if somebody gained access. But sadly whatever you do, it's always possible that somebody gains root privileges and does something you don't want to be done. If there was a bullet-proof way of securing a computer, it would have already been invented.
 
Old 02-11-2007, 04:07 PM   #3
suicideguy
Member
 
Registered: Nov 2006
Posts: 32

Original Poster
Rep: Reputation: 15
So the next time I reinstall Kubuntu, I should configure my firewall before I connect to the Internet then?

I think I'll refrain from using any financial info on my computer until I reinstall.
 
Old 02-11-2007, 04:49 PM   #4
ethics
Senior Member
 
Registered: Apr 2005
Location: London
Distribution: Arch - Latest
Posts: 1,522

Rep: Reputation: 45
Before connecting a machine to an unsecure network (eg. the internet) you should ensure to take every security step you can think of, this includes the firewall, turning off any unnecessary services, rootkit hunters (rkhunter and chkrootkit are good) also check out snort and tripwire.

The only really efficient way to check if a system has been compromised is to create an image of it on read only media to compare the current system against, protecting a system down the line some is a tad pointless, as the very tools you are using could be compromised themselves.
 
Old 02-12-2007, 01:42 PM   #5
suicideguy
Member
 
Registered: Nov 2006
Posts: 32

Original Poster
Rep: Reputation: 15
Hmm...maybe I should take some time this weekend and reinstall since I now have some things I screwed up on. :-x

Thanks for the replies.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I violated the LQ Rules synapse Slackware 2 11-22-2006 09:37 AM
HostAP System Log - Am I being Violated? bensmither Linux - Wireless Networking 0 01-13-2005 05:03 AM
Can't copy files from an SCO Unix System V computer to a Linux computer gnppapas Linux - General 2 11-27-2004 01:39 PM
violated.... bulliver General 4 07-15-2003 05:07 PM
How can i portage Linux from computer with Celeron proc to computer with Pentium 166? gdi Linux - General 4 05-31-2003 01:11 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 06:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration