About Security in UNIX

[sureshp]

Hi everyone,
Every time I was told from school time, UNIX will not be affected by Virus. I don't want to repeat the same to my followers.If so, Shall I know the reason.

Thanks

Suresh. [sig][/sig]

 

[bigscouse]

Well Suresh, it can't catch Flu or a Cold but any system is vunerable or security consultants would not be paid an arm and a leg to secure them.
Systems have to be made Virus proof by using firewalls etc..
but you should always remain vigilant as somebody will always find a new way to create mischeif. [sig]<p>Ged Jones<br><a href=mailto:gedejones@hotmail.com>gedejones@hotmail.com</a><br><a href= > </a><br>Top man[/sig]

 

[ElgisRamon]

It's very difficult to create a real virus for UNIX (compared with other OSes), but I've heard about some experimental viruses in the AT&T and IBM Labs... then be cautious... [sig][/sig]

 

[hnd]

Because you cannot switch to kernel mode as a regular Unixuser, it is not possible to write programs which will do things like booting from disk etc. To do this you need Root permissions, but with root access you can do much more ugly things than write a Virus program.

What is possible is to write worms or trojan horses in Unix which will work if you did not carefully secure your installation (incorrect access permissions ...) or if you are running unsafe server programs.

If you are using &quot;Secure Unix&quot; (C2-Standard) this kind of Programs may be possible too, but because of the extensive auditing features you may be detected immidiately.
[sig]<p>hnd<br><a href=mailto:hasso55@yahoo.com>hasso55@yahoo.com</a><br><a href= > </a><br> [/sig]

 

[hnd]

Because you cannot switch kernel mode as an regular Unixuser, it is not possible to write programs which will do things like booting from disk. To do this you need Root permissions, but with root access you can do much more ugly things than write a Virus program.

What is possible is to write worms or trojan horses in Unix which will work if you did not careful secure your installation or if you are running unsafe server programs.

If you are using &quot;Secure Unix&quot; (C2-Standard) this kind of Programs may be possible too, but because of the extensive auditing features you may be detected immidiately.
[sig]<p>hnd<br><a href=mailto:hasso55@yahoo.com>hasso55@yahoo.com</a><br><a href= > </a><br> [/sig]

 

[sureshp]

Thanks everyone, for naughty Ged too.

Suresh. [sig][/sig]

 

[bigscouse]

Suresh,

In case you did not know, I am a cheeky Scouser.


[sig]<p>Ged Jones<br><a href=mailto:gedejones@hotmail.com>gedejones@hotmail.com</a><br><a href= > </a><br>Top man[/sig]