Michael Leone on Sun, 17 Mar 2002 00:56:04 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Linux Virus Writing HOWTO


On Sun, 2002-03-17 at 00:47, Tobias DiPasquale wrote:
> On Sat, 2002-03-16 at 19:21, Michael Leone wrote:
> > On Sat, 2002-03-16 at 23:56, Tobias DiPasquale wrote:
> > > On Sat, 2002-03-16 at 11:20, Michael Leone wrote:
> > > > On Fri, 2002-03-15 at 08:37, Arthur S. Alexion wrote:
> > > > > 
> > > > > Is the real reason *nix is relatively spared virus problems practical 
> > > > > rather than technical?
> > > > 
> > > > What about Win2000, then? It's security model tries to come close to a
> > > > Unix model, with user accounts deliberately kept separate from the
> > > > "root" user.
> > > 
> > > Unfortunately, you still need to have Administrator privileges to do
> > > anything worthwhile on Win2K, as well as Win.NET Server/XP. You cannot
> > > install any programs (since InstallShield just *HAS* to screw with the
> > > Registry), 
> > 
> > I've installed software as "Power Users" before; they're less than
> > Administrator.
> 
> Power Users are administrators that can't change system files. (well,
> not without knowing the trick, that is) That's the only difference.

Right. But they can install software. And not all software needs to be
installed as Administrator. And most things I install on my Linux
systems wants me to install as root. Not run, just install. Same thing,
isn't it?

> > > nor change any system-wide environment variables nor start
> > > any service without having administrator priviledges. 
> > 
> > Can't services start as specified administrative users, while users log
> > in as themselves? User accounts can't start services, not as themselves .
> 
> Yes, but you have to be an administrator to *install* a service to being
> with. You cannot make changes to anything in the Component Services
> panel without being an administrator.

Ditto for most stuff in Linux. I can't start up many services as a
regular user.

-- 

PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
PGP public key:
<http://www.mike-leone.com/~turgon/turgon-public-key.gpg>

The secret of flying is simple: Throw yourself at the ground and miss.

Attachment: signature.asc
Description: This is a digitally signed message part