4 ms·
Malware running as root doesn't need kernel access to wreak plenty of havoc. Hell, your own user has access to almost all of the data that both you and the malw
by Nullabillity 6y ago
Malware running as root doesn't need kernel access to wreak plenty of havoc. Hell, your own user has access to almost all of the data that both you and the malware author are likely to care about.
- user-the-name 6y agoYes, the security model based around users in Unix is very outdated at this point. It doesn't really represent the kind of threats a modern computer faces.
- gruez 6y agoRelevant xkcd: https://xkcd.com/1200/ https://xkcd.com/1200/
- pilif 6y agoMalware running as a normal user can't put itself in a position where it's hidden from software running as root. Preserving system integrity was my point. The patch in the original article is about preserving system integrity in the face of a compromised root account and the only way of doing that is by limiting the capabilities of the root user. It adds one more and hopefully final level of defense in order to guarantee system integrity.