Re: [Hampshire] Linux.Lion worm

> There is nothing to patch to fix this issue. If you can, for example,
> write to /bin/ls, or /home/$user/bin/script, the virus can update that
> binary to include a copy of itself.

[vic@goliath ~]$ echo "knickers" >> /bin/ls
bash: /bin/ls: Permission denied

Oh look. No way to start modifying stuff like that.

> So if you download untrusted code, run it as root, you're at risk of
> it.

If you deliberately circumvent the security of your system, you might do
something bad. There's a lesson there somewhere...

> And short of running SELinux,
> or similar system there is no magic cure or software patch that
> will protect you.

Well, some of us run SELinux anyway - but the basic protection is the same
as it always is - don't use root except for administrative purposes.
Pretty simple, really.

Vic.