Basic kernel security question

joegumbo · 08-10-2007, 11:25 PM

Hi,

I've been running FC6 on my desktop and I over-tinkered and toasted it. So, I thought I'd try my new Slackware 12 disks. But, I've also read where some folks have had issues with SW12. So, if I start having issues, I might like to roll back to SW10.2 which worked pretty well on my desktop.

But, if I go back to 10.2 , am I going to open myself up to security problems?

When I used FC6, I had a possible hacking issue...

http://forums.fedoraforum.org/forum/...d.php?t=157722

I later tracked down some new addresses that appeared to some really nasty critters dealing with false banks and such, I don't want to leave myself open.

I hope my question isn't too stoopid.

Thanks,
-Joe

Bruce Hill · 08-11-2007, 01:35 AM

Slackware Linux Security Advisories.

basileus · 08-11-2007, 03:46 AM

You should really use a distro that still gets updates. If you are protected from direct attack from the Internet, you'll most likely get hacked indirectly through the browser, filesharing client or something. The only good, general way to protect from these indirect client-side attacks is to keep all software on your computer updated. That's why I wouldn't use any distro that doesn't provide security patches.

onebuck · 08-11-2007, 07:15 AM

Quote:

Originally Posted by basileus

You should really use a distro that still gets updates. If you are protected from direct attack from the Internet, you'll most likely get hacked indirectly through the browser, filesharing client or something. The only good, general way to protect from these indirect client-side attacks is to keep all software on your computer updated. That's why I wouldn't use any distro that doesn't provide security patches.

Hi,

You can also use the 'Guide to Chkrootkit'. This will help you to install the chkrootkit on your system to check for 'trojans'. Root attacks are the way most people are attacked on Linux systems.

joegumbo · 08-11-2007, 07:40 AM

Hi Bruce Hill, basileus and onebuck!

I checked the link you provided re Security Advisories. There are no kernel related issues for 2007 and 2006, just issues related to various apps. So, I should be OK if I keep my browser, etc updated to the latest versions.

I'm currently using chkrootkit, rkhunter as well as f-prot, bdc and clamav. I also have denyhosts installed and configged. And, FC6 uses SeLinux.

What I started doing was to keep track of any hits to Firestarter. I'd do a "whois" and the Google the results. If I found something nasty, I manually blocked the address on my NetGear router. I also use noscript with my browser.

Thanks for the advice.
-Joe

onebuck · 08-11-2007, 08:42 AM

Quote:

Originally Posted by joegumbo

Hi Bruce Hill, basileus and onebuck!

I checked the link you provided re Security Advisories. There are no kernel related issues for 2007 and 2006, just issues related to various apps. So, I should be OK if I keep my browser, etc updated to the latest versions.

I'm currently using chkrootkit, rkhunter as well as f-prot, bdc and clamav. I also have denyhosts installed and configged. And, FC6 uses SeLinux.

What I started doing was to keep track of any hits to Firestarter. I'd do a "whois" and the Google the results. If I found something nasty, I manually blocked the address on my NetGear router. I also use noscript with my browser.

Thanks for the advice.
-Joe

Hi,

Great! You need to be aggressive when it comes to security.