[sf-lug] Need help with VirtualBox on openSUSE and Feisty (or Gutsy)

Rick Moen rick at linuxmafia.com
Wed Apr 9 12:04:45 PDT 2008


Quoting Ernest De Leon (edeleonjr at gmail.com):

> Aside from the fact that it goes against FHS, your directory structure,
> access levels and security will be all over the place.

Bingo.  (There are also a bunch of minor reasons, but that's the major
one.)

I keep trying to get this across to people, and it's one of the reasons
for the system-security aspects of my page of essays on Linux viruses.
E.g., let's say that I deliberately execute an ELF-infector virus as
user "rick" on my system.  It hunts around for files whose magic(5)
signature proclaims them executables or libraries in ELF format:  It
hunts through /sbin, /bin, /usr/bin, /usr/sbin, /usr/local/bin,
/usr/local/sbin, /opt....  Lots of binaries, none of them writable by
user "rick" .  The little beastie tries its last hope:  /home/rick/bin .
Finally, an executables directory that's writeable -- but all it has in
it are a few minor scripts in shell and perl.  The life of an ELF
infector (unless run privileged) is not a happy one.

As a somewhat related topic, here are a bunch of reasons to avoid
locally compiling and installing software if you can possibly manage it:
http://linuxgazette.net/118/weatherwax.html#1
http://linuxmafia.com/~karsten/Rants/spyware.html#cultural






More information about the sf-lug mailing list