Go Back   openSUSE Forums > Archives > SLS Archives > ARCHIVES - SuSE Linux > ARCHIVES - Network & Security > ARCHIVES - Security
Forums FAQ Members List Search Today's Posts Mark Forums Read


ARCHIVES - Security Want to know if you should really apply the latest kernel patch? Want to know how to configure your firewall? Discuss any Security related topics in here!

 
Page 1 of 2 1 2
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 23-Sep-2007, 20:27
abc
Guest
 
Posts: n/a
Post

how secure will open suse10.3 be??there giving an option for app armer.and how good will the firewall be??if they give wine as a package will this make open sues more easily to hacking??after all it will let users be able to use some windoz programs.is that good or bad??i would like to order 10.3 but i don't know if i should because it is so new.any help with these issues are welcome.
  #2 (permalink)  
Old 24-Sep-2007, 00:36
oldcpu
Guest
 
Posts: n/a
Default

Quote:
how secure will open suse10.3 be??there giving an option for app armer.and how good will the firewall be??if they give wine as a package will this make open sues more easily to hacking??after all it will let users be able to use some windoz programs.is that good or bad??i would like to order 10.3 but i don't know if i should because it is so new.any help with these issues are welcome.
[/b]
I don't see openSUSE-10.3 very much different from earlier 10.x versions, in terms of security.

IMHO SuSE is inherently reasonably secure, especially when compared to Windoze PCs.

Probably the biggest security aspect for an OS, and openSUSE Linux is no exception, is how the user takes care of the PCs security. In the case of Linux, do NOT log in as root (but rather use su, sudo, or kdesu on an as required basis). Have a good user and root password. Ensure ssh is well secured. Properly configure one's Linux firewall. And only install 3rd party applications from reputable sources.

As for running a Windoze application with a virus from wine, ... I recall an article once where a user tried many of the more common Windoze virus against a Linux PC (under wine). The applications crashed in pretty much all cases, although in once case on application (with the virus) did run, although the virus failed miserable to do anything.
  #3 (permalink)  
Old 24-Sep-2007, 01:46
deltaflyer
Guest
 
Posts: n/a
Default

openSuSE will be just as secure as the user makes it, most security issues i have seen have been the result of users not understanding the basic principles of security ( i.e. fiddling & not understanding what they are doing )

andy
  #4 (permalink)  
Old 24-Sep-2007, 06:05
abc
Guest
 
Posts: n/a
Post

Quote:
I don't see openSUSE-10.3 very much different from earlier 10.x versions, in terms of security.

IMHO SuSE is inherently reasonably secure, especially when compared to Windoze PCs.

Probably the biggest security aspect for an OS, and openSUSE Linux is no exception, is how the user takes care of the PCs security. In the case of Linux, do NOT log in as root (but rather use su, sudo, or kdesu on an as required basis). Have a good user and root password. Ensure ssh is well secured. Properly configure one's Linux firewall. And only install 3rd party applications from reputable sources.

As for running a Windoze application with a virus from wine, ... I recall an article once where a user tried many of the more common Windoze virus against a Linux PC (under wine). The applications crashed in pretty much all cases, although in once case on application (with the virus) did run, although the virus failed miserable to do anything.
[/b]
old wise one.so your saying that wine is ok to use with Linux??what about the app armer in 10.3??? the stuff i have been able to see says that you can do different things with it can any one help me understand this .and if it should be left as is" out of the box".would it be the same for the firewall as well???
  #5 (permalink)  
Old 24-Sep-2007, 06:30
oldcpu
Guest
 
Posts: n/a
Default

Quote:
old wise one.so your saying that wine is ok to use with Linux??[/b]
Yes, wine is safe to use on Linux.

Quote:
what about the app armer in 10.3???[/b]
What about apparmor? You can read more about it here:
http://en.opensuse.org/Apparmor

IMHO apparmor is a pro-active security approach adopted by openSUSE. The odds of you needing to do anything special with it are very very remote.

Again, if you never operate as user root (only using "su", "sudo", "kdesu", etc ... on a minimal as required basis), and have a good user and root password, ensure ssh is well secured, properly configure your Linux firewall, and only install 3rd party applications from reputable sources you should be fine.

....

Quote:
the stuff i have been able to see says that you can do different things with it can any one help me understand this .and if it should be left as is" out of the box".[/b]
As a newbie, I don't think you need to spend any time worrying about the configuration of apparmor. Leave it "as installed".

Quote:
would it be the same for the firewall as well???[/b]
What about the firewall? Simply leave it "as is". By default the openSUSE firewall is enabled. Leave it enabled, and only open ports to the firewall on an "as required" basis.
  #6 (permalink)  
Old 24-Sep-2007, 06:40
FeatherMonkey
Guest
 
Posts: n/a
Default

Speaking for myself as Oldcpu and deltaflyer have said, sensible use i.e not installing everything from every where etc. I find I don't use app armour.

Now from here http://developer.novell.com/wiki/index.php/Apparmor_FAQ "<-snip->compromise systems that host critical data in the enterprise<-snip-> Plenty more there. Also here
http://en.opensuse.org/Apparmor and here http://en.wikipedia.org/wiki/AppArmor as for firewall I'd thought the defaults are good to go, as a rule you'll have only a few ports open, anyway a service needs to be running to be exploited.

The next thing is to make sure your system is regularly updated, just in case an exploit is found for a specific application.

Now if you look at a site such as http://secunia.com/ what you will see is many are low risk exploits and local exploits not remote. 9/10 I'd say are fixed by a patch or an update to newer software.

Where here you'll find Suse very good at releasing patches and security updates. As an example I know by default Suse's php is protected by the Suhosin Patch, http://www.hardened-php.net/

If you take into consideration you may behind a router, firewalls on both, with a dynamic IP running very few services I doubt you'll need to do much.

Apparmour is really for the enterprise, for example if your running web servers, php or mysql databases, really sensitive data or data that you absolutely need to keep as is. But do need the additional services that you may need running on a enterprise.

Apparmour locks down tightly the application I've not really played but think you need to give rules for each application/user/group to me it seems a little overkill on a home pc.
  #7 (permalink)  
Old 24-Sep-2007, 10:38
Wilson Phillips
Guest
 
Posts: n/a
Default

Apparmor rocks, but I have not seen any need for it on a home PC. I uninstalled it on my system.

Linux is inherently more secure, but any user can make it unsecure. Simply failing to do security updates is the number one way.
  #8 (permalink)  
Old 26-Sep-2007, 06:57
abc
Guest
 
Posts: n/a
Post

Quote:
Apparmor rocks, but I have not seen any need for it on a home PC. I uninstalled it on my system.

Linux is inherently more secure, but any user can make it unsecure. Simply failing to do security updates is the number one way.
[/b]
thank you all for your opinion.now i wonder if i should put it on a new computer or keep the one i got??the graphics are old i have right now on my Compaq presario with amd athlon ,2800,1.5 gig of memory,120gig hard drive.+a dvd rewriter. i would like to get a hp amd 64x2,with 3gig of memory,500gig hard drive,and g force graphics card.im unsure of what to do.any help is welcome.
  #9 (permalink)  
Old 26-Sep-2007, 13:38
Wilson Phillips
Guest
 
Posts: n/a
Default

Put it on the old one that you have now. If you still get a new PC, you can load it on that one too!
  #10 (permalink)  
Old 26-Sep-2007, 21:54
abc
Guest
 
Posts: n/a
Post

Quote:
Put it on the old one that you have now. If you still get a new PC, you can load it on that one too!
[/b]
ok.i will do that.how many computers can i put one boxed Linux on??and on my old computer the graphics card is old i don't think that the 3d desk top will work on it!!!should i still use the old computer??
 
Page 1 of 2 1 2

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




 

Search Engine Friendly URLs by vBSEO 3.3.0 RC2