Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I'm linux user and I'm thinking about it's vulnerabilities to malware.

Can I get any malware if I run only trusted applications from distro's repository?

share|improve this question
    
Define malware. –  Nils Oct 8 '12 at 20:53
    
Use google: en.wikipedia.org/wiki/Malware :) –  Miro Oct 9 '12 at 13:16

3 Answers 3

This is a question likely to generate better feedback at Security SE.

Packages are generally signed; if the signing key has been compromised (by breaking in into the computer where private key is stored), all bets are off. Then an attacker may craft a package with malware inside, sign it with the key, hack one or several mirrors, replace the packages and wait for infection to spread before it is found out.

A threat may come as a source-code patch that is committed without due review process and introduces a vulnerability into a piece of software, and then this attack vector is exploited in the wild.

Existing applications may have a score of vulnerabilities that allow malware to install itself on a given computer.

As a bottom line, there is no such thing as a "trusted application" anywhere, anytime. You as computer owner and maintainer bear the ultimate responsibility for the overall safety and security of your system, especially if you keep it connected to the 'Net where there be dragons. Would suggest starting reading on computer security, and again, a nice starting point is the Security StackExchange site.

HTH

share|improve this answer
1  
Apart from that the signature-check has to be activated to discover badly signed packages. –  Nils Oct 8 '12 at 20:54

The other side of what @Deer Hunter has said, and what I think you are getting at, is "can malware install itself and get executed like so many similar malware programs Windows gets?". The answer to that is no. Without direct user involvement giving permissions for installation and, then, execution, this cannot happen.

share|improve this answer
1  
There are enough privilege escalation problems with linux. So yes - malware is possible. –  Nils Oct 8 '12 at 20:55
    
@Nils - Correct me if I'm wrong but privilege escalation comes from software that was installed by the user and given access to the system. I'm talking about drive by attacks where, say, you visit a web page that downloads/installs/executes without user intervention. –  Rob Oct 8 '12 at 21:31
    
The software installed might be a png-picture that gets downloaded by the browser provided by the operating system. Now a flaw in the png-library will execute code just because you look at that picture (user-context). That code will use another glibc-fault in combination with a OS-provided suid-root-script to elevate the rights further to the root-account. So yes - it is possible. –  Nils Oct 9 '12 at 21:08

Yes, you can get malware.

Imagine combining a PNG-library-flaw like CVE-2007-5259 with a glibc-problem like CVE-2011-1089. Into an execution under your normal user account with a priviledge escalation triggerd by - lets say viewing a PNG-picture in the konqueror browser from your OS.

There might even be a backdoor programmed into your OS by a regular programmer.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.