On Fri, 30 Mar 2001, David Jones wrote:
> On 29 Mar 01 at 6:00, Richard Adams wrote:
>
> > If i understand correctly they are saying when the
> > program is installed it starts to work, as i see it
> > that will only happen if 'root' does it,
Is that not the way most of them work.???
> Hmm, my reading was that if it's run under Windows on a
> Linux/Windows dual boot machine, the virus could infect
> ELF binaries residing on the Linux partition. Since Linux
> wouldn't be running at the time, the permissions for the
> infected file would still be the same. If it happened to
> infect a binary run during the logon process, I would
> think it could spread, even if the person wasn't logging
> in as root.
How would a program run on a windows booted machine affect an ext2 filesystem,
AFAIK DOS does not see the linux partition, i cant speak for win2000 but my
win98 system does not see anything of linux, thats the way i lke it.
Even if it could see it, what is the point of mounting an ext2 file system on a
widows partition. The other way around is a different kettle of fish.
So in my saying it seems like a sales stunt, that is what i sorta meant.
The message over the virus said, it is written in a very old and primative
language, so considering that fact i doubt if it touches the bios or any
resident memory or what ever.
>
> Yes, under Linux, it could only spread if run by root, as
> someone else on the list mentioned.
>
> > now what is the rule of thumb, dont read mail as root
> > right.!.
>
> I don't do anything as root unless I absolutely have too!
> Still newbie enough that being logged in as root gives
> me jitters ;-)
>
> > The time to start worrying is when Linux distributers
> > warm of pending problems, like Redhat and Slackware do
> > at regular intervals, they also include details of what
> > happend, how others "comprimise" a linux system and most
> > important post a cure for the problem.
>
> Thanks, I'll keep my eyes on those sources ...
I have not seen any mail on this subject as yet from any Linux distributer.
--
Regards Richard
[EMAIL PROTECTED]
http://people.zeelandnet.nl/pa3gcu/
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
