Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
I am currently hardening the security of my system. Linux has a strong barrier between the core system and userland and is fairly straightforward to configure. Hence, my core system is fairly stable.
However, what options are there for users' security?
It seems to me a simple internet java/activeX script can easily download itself into the ~ directory and then modify the ~/bash_profile init file to run malicious code. A small program bug could also create a exploit like this.
Only the user will be affected, but it may compromise private information or corrupt a user's files.
ActiveX doesn't work in Linux. As far as java scripts, the web browsers are support to provide some protection but if you don't believe it is enough you can always disable java/javascript support in your preferences (at least you can on Firefox and Konqueror).
Another thing some people do is mount /home with the no exe flag so that you can't run things from users home directories. Last thing I can think of if your really afraid is removing your write privileges from your .bashrc, .bash_profile or any other script that automatically runs at login....
You should probably also look into using SELinux and a PAX/Grsecurity enabled kernel.
Thanks for the Firefox tip. Most of Microsoft's security problems come up when surfing the web, so while Linux is more secure, it also is somewhat affected by the same problem. But this will entirely eliminate the issue.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.