How would I know my fedora 21 have no spywares , virus and my privacy is protected?

asked 2015-05-30 17:32:13 -0600

ddkroyal001
395 ●24 ●34 ●49

updated 2015-05-31 08:03:08 -0600

How would I know my fedora 21 have no spywares , virus and my privacy is proitected? Currently what happen tonight my cursur suddenly disappeared and google chrome is automatically opened; one website is there "http://hisham.hm/htop/index.php?page=main" and i never visited this website as before. Is it ok? Is there any program which certify that my fedora 21 safe?

edit retag flag offensive close merge delete

Comments

XFCE? no, maybe a problem of cache...

davidva ( 2015-05-30 19:50:54 -0600 )edit

I am using GNOME and KDE ; its happened with kde.

ddkroyal001 ( 2015-05-31 08:07:16 -0600 )edit

By design, nothing can be installed on your system without your permission. Please be careful who your give permissions too.

FranciscoD_ ( 2015-06-01 05:39:24 -0600 )edit

add a comment

5

answered 2015-05-31 11:19:31 -0600

bodhi.zazen

2408 ●6 ●28 ●52 http://bodhizazen.net/

updated 2015-06-01 16:46:21 -0600

There are several layers of security in Fedora, see https://docs.fedoraproject.org/en-US/...

With that in mind, there can be several issues or concerns including bugs and vulnerabilities , for example poodle and shockshell

https://access.redhat.com/articles/12...

http://fedoramagazine.org/shellshock-...

Your main lines of defense are:

Linux permissions - you should be running as a user , not as root.
Updates - As bugs/vulnerabilities are found, they are patched, so keep your system up to date.
selinux - selinux helps mitigate zero day exploits.

BUT you can have malicious code in your home directory such as browser hijacks. For this remove your files in $HOME

See https://ask.fedoraproject.org/en/ques...

Beyond those issues ....

Use safe browsing. You can run browsers in a selinux sandbox if you wish (install sandbox if needed)

sudo dnf install policycoreutils-sandbox

Then

sandbox -X -H sehome -T tmp -t sandbox_web_t firefox

Adjust your browser as needed ;)

To know if you have malware you need to do some sort of penetration testing. Pentesting is a large topic but you can do some basics

rpm will confirm system files, but you sort of need to know what a fresh install looks like as the is a large output evein on a fresh install

http://www.sans.org/security-resource... and http://www.rpm.org/max-rpm/s1-rpm-ver...

HIDS - OSEC or similar - http://www.ossec.net/
Antivirus - Antivirus for linux exists, but again often throws false positives.
rootkits - these can be very difficult to detect. there is a program, rkhunter, but as with antivirus, you get more false positives then true positives. See http://www.tecmint.com/install-linux-... and also https://ask.fedoraproject.org/en/ques...

I can not stress enough, you really need to be familiar with all of the tools you wish to use and what a "normal" system looks like BEFORE you go looking for problems.

After all that you are left with forensics

See www.blackhat.com/presentations/bh-usa...

There is a Fedora security spin and you will need to make extensive use of google or obtain training/education.

Privacy is also a broad issue, sort of depends on what you mean by privacy.

First line - give each user a unique home.
If guests use your machine, use xguest.
Internet privacy is , IMO, very much an illusion as "the internet" is public. Take a look at

http://bodhizazen.net/Tutorials/Privacy

and the TOR documentation https://www.torproject.org/docs/faq.h...

edit flag offensive delete link

add a comment

0

answered 2015-05-30 19:41:37 -0600

davidva
3965 ●10 ●56 ●72 http://www.kuboosoft.b...

rm -rf $HOME/.cache/sessions/*

edit flag offensive delete link

Comments

That might keep malware from running, but it doesn't really address the question of making sure the system's not infected. However, there are very few malware programs that can directly infect Linux so I don't think there's much to worry about.

sideburns ( 2015-05-30 21:11:15 -0600 )edit

@sideburns, is a common problem, all session saves a cache, maybe the user shutdown your pc when the user has opened Chrome... I had the same problem with other programs; when I turn off or closed the session; without closing a specific program ... check my first comment ;)

davidva ( 2015-05-31 01:15:44 -0600 )edit

I doubt that there's any real problem, because all that happened is that his browser opened up to an unexpected page telling how to use a Linux command. Still, he wants to know how to check his system for virus, spyware or other malware, and your reply doesn't address that issue.

sideburns ( 2015-05-31 01:35:59 -0600 )edit

And what, pray tell, does that have to do with finding and removing malware, which is what the question is about?

sideburns ( 2015-05-31 03:26:12 -0600 )edit

@sideburns , then; Do You affirm the user has a malware? sorry but is premature conclution... complete question... "google chrome is automatically opened" I have sometimes the same issue with gedit, firefox, thunar and other programs; if I shutdown my pc, with the programs opened... ¿bug? I do not know. the first step is check and delete the cache of session; after the user will need remove the configuration and cache of browser. the way if the user know have malware etc. is the prevention. Read this complete wiki about security in Linux. https://wiki.archlinux.org/index.php/...

davidva ( 2015-06-02 04:24:03 -0600 )edit

see more comments

0

answered 2015-05-31 09:49:49 -0600