New answers tagged

5

It's world-readable now because it was made world-readable when it was created twenty years ago or so. I haven't researched the history (which probably exists only in Linus Torvalds's head anyway) but it's likely that this file is world-readable because there's no obvious reason to make it so. After all, it doesn't contain any confidential information: just ...


4

It seems that the issue has been reported back in 2011. In addition, a patch proposed to make /proc/interrupts readable by root only. By reading the thread, it seems that they consider the distributions should change the permission of /proc/interrupts if they wanted to. An issue was raised about the fact that it can be cumbersome to force everyone mounting ...


1

You can easily do this by being a good, secure user. Follow the basic tenants of security, and be careful of what you install on your phone. After all games are great, but not when they're really viruses. Since it sounds like you're really going for a super secure phone with data archiving and backup, don't install something unless you KNOW it's safe, and ...


-3

You have already said the answer to your question: I want to use a few apps (Titanium Backup, Droidwall and maybe XPrivacy) with root access in a "secure way", which means: I want to limit the security implications described above to the least possible. Yes, use those apps to secure your phone, but I do not recommend you to install some credit card ...


1

The recipe here, while not by any means foolproof, is incomplete or wrong. Installing untrusted software under your unprivileged account is a disaster. Installing it in a carefully prepared other unprivileged account? Less risky, but by no means guaranteed to be safe. If: you are sure that your system is set up as a secure multi-user system (no random ...


7

This is a horrible case of Security Theater Security Theater is the practice or belief of something that looks like it improves security, but in reality does little/harm to it. This false belief has been around as long as the following rumor Linux has no viruses because of it's permission system That's almost as good as saying I don't have a ...


4

The system itself is safe from accounts that aren't root-equivalent, but that doesn't help much on a desktop where most of what you care about is your own data, and you authenticate regularly to become root from your account. If someone has an account on a correctly-configured multi-user system, and they don't have sudo privileges or the root password, then ...


31

In short: yes, being on a low-privilege account helps protect you against malware, but does not make you immune. Like any security measure, no single thing is going to keep you 100% safe. TL;DR: Running on a low-privilege account (aka "principle of least privilege") should be part of a balanced breakfast which also includes good firewall configurations; ...


-3

isn't it possible for a low-level user to install a script with a keylogger, for example, that waits for an su - or sudo call and takes system control from there? No - and you've already given the answer, because that is "out of their permission scope". Linux has always been a multi-user system and (nearly) everything which can be implemented outside of ...


54

We always hear... Do we? I don't. Installing some untrusted program as a normal user is a bad idea with Linux the same it is with Windows or Mac: this program has access to all your data and can delete these data, send these data to somebody else etc. Moreover it can make screenshots, control other applications running on the same X windows screen ...



Top 50 recent answers are included