|
||||||
| Forums FAQ | Members List | Search | Today's Posts | Mark Forums Read |
| ARCHIVES - Security Want to know if you should really apply the latest kernel patch? Want to know how to configure your firewall? Discuss any Security related topics in here! |
|
|
|
LinkBack | Thread Tools | Display Modes |
|
|||
|
how secure will open suse10.3 be??there giving an option for app armer.and how good will the firewall be??if they give wine as a package will this make open sues more easily to hacking??after all it will let users be able to use some windoz programs.is that good or bad??i would like to order 10.3 but i don't know if i should because it is so new.any help with these issues are welcome.
|
|
|||
|
Quote:
IMHO SuSE is inherently reasonably secure, especially when compared to Windoze PCs. Probably the biggest security aspect for an OS, and openSUSE Linux is no exception, is how the user takes care of the PCs security. In the case of Linux, do NOT log in as root (but rather use su, sudo, or kdesu on an as required basis). Have a good user and root password. Ensure ssh is well secured. Properly configure one's Linux firewall. And only install 3rd party applications from reputable sources. As for running a Windoze application with a virus from wine, ... I recall an article once where a user tried many of the more common Windoze virus against a Linux PC (under wine). The applications crashed in pretty much all cases, although in once case on application (with the virus) did run, although the virus failed miserable to do anything. |
|
|||
|
openSuSE will be just as secure as the user makes it, most security issues i have seen have been the result of users not understanding the basic principles of security ( i.e. fiddling & not understanding what they are doing )
andy |
|
|||
|
Quote:
|
|
||||
|
Quote:
Quote:
http://en.opensuse.org/Apparmor IMHO apparmor is a pro-active security approach adopted by openSUSE. The odds of you needing to do anything special with it are very very remote. Again, if you never operate as user root (only using "su", "sudo", "kdesu", etc ... on a minimal as required basis), and have a good user and root password, ensure ssh is well secured, properly configure your Linux firewall, and only install 3rd party applications from reputable sources you should be fine. .... Quote:
Quote:
|
|
|||
|
Speaking for myself as Oldcpu and deltaflyer have said, sensible use i.e not installing everything from every where etc. I find I don't use app armour.
Now from here http://developer.novell.com/wiki/index.php/Apparmor_FAQ "<-snip->compromise systems that host critical data in the enterprise<-snip-> Plenty more there. Also here http://en.opensuse.org/Apparmor and here http://en.wikipedia.org/wiki/AppArmor as for firewall I'd thought the defaults are good to go, as a rule you'll have only a few ports open, anyway a service needs to be running to be exploited. The next thing is to make sure your system is regularly updated, just in case an exploit is found for a specific application. Now if you look at a site such as http://secunia.com/ what you will see is many are low risk exploits and local exploits not remote. 9/10 I'd say are fixed by a patch or an update to newer software. Where here you'll find Suse very good at releasing patches and security updates. As an example I know by default Suse's php is protected by the Suhosin Patch, http://www.hardened-php.net/ If you take into consideration you may behind a router, firewalls on both, with a dynamic IP running very few services I doubt you'll need to do much. Apparmour is really for the enterprise, for example if your running web servers, php or mysql databases, really sensitive data or data that you absolutely need to keep as is. But do need the additional services that you may need running on a enterprise. Apparmour locks down tightly the application I've not really played but think you need to give rules for each application/user/group to me it seems a little overkill on a home pc. |
|
|||
|
Apparmor rocks, but I have not seen any need for it on a home PC. I uninstalled it on my system.
Linux is inherently more secure, but any user can make it unsecure. Simply failing to do security updates is the number one way. |
|
|||
|
Quote:
|
|
|||
|
Put it on the old one that you have now. If you still get a new PC, you can load it on that one too!
|
|
|||
|
Quote:
|
|
| Bookmarks |
| Thread Tools | |
| Display Modes | |
|
|