Re: [LUG] Need evidence why Linux doesn't need AntiVirus

[Kevin Lucas <kevin.lucas@xxxxxxxxxxxxxxxxxx>]

On Tue, 2011-07-19 at 10:11 +0100, Gibbs wrote:

On 19/07/11 09:57, simon@xxxxxxxxxxxxxxxxxxx wrote:

Hi everyone.

I have the pleasure of being able to use Ubuntu at work. Having had a
massive infection on one of the Windows machines the management is rightly
making sure that everyone has suitable AV installed. Unfortunately they
are currently also insisting that the Linux users also install some sort
of AV.

I realise that there are Linux AV solutions out there and I see some use
for them (dodgy Firefox extensions maybe), but only for nontechnical users
who are likely to click yes to something by mistake.

Since this will clearly not be of any benefit to me, and I have no
intention of installing proprietary software on my machine, can anyone
point me in the direction of some evidence or other article that I can
give to the management to convince them that it's not in anyone's interest
to bother?

Thanks.
Simon

If you are using Windows machines it might be in your interest to actually use one, for the sake of you not spreading them unintentionally to those with lesser systems.

A good place would be the Ubuntu community docs as you're using Ubuntu. Try https://help.ubuntu.com/community/Antivirus

Gibbs

You just need to look at the user space

If a file lands on the user's Desktop ( or Downloads or Temp folder as in a Email attachment)  look at the file permissions when it has landed.

You will find it has no Executable flag set and the owner is the user.

So the worst thing that could happen is the User ( and there is no such thing as a FoolProofUser) makes the file Executable by changing the Permissions.

The file will only stay within the Users's Home dir if it is changed, unless Someone has given Him/Her access to another part of the File System.

[Attached are 320 viruses fo you to try]

Just kidding.....

Java and ActiveX type viruses have the same problem and are confined to the User Space.

Most Viruses I find on Windoze get themselves in using three steps
1 The User
2 the All Users Dir
3 The Start /Run part of the reg
Then the machine is not yours any more

Linux has a defense as "NOBODY" runs as ROOT ( Do they!?)

Sudoers can pose a problem but in a Business Enviroment Ubuntu type users with Sudo permissions would just not Happen.

--

Kevin Lucas
Minions Post Master(Sub) 
Eleven Years in the Making!
www.minionsbandb.co.uk
www.tearooms.minionsbandb.co.uk
FaceBook Minions_shop
Po House, Minions,
Liskeard Cornwall 
PL14 5LE
01579363386

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq