Linux

67631 readers

381 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago

MODERATORS

nooter692@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

104

how to be secure for idiots? (sh.itjust.works)

submitted 2 days ago by lemmingsareawesome@sh.itjust.works to c/linux@lemmy.ml

77 comments fedilink hide all child comments

linux isnt immune to viruses even though its not as bad as windows

what should i do to be safe if i have a safe browser, vm, but pirate and download risky things? i know its a vm but i still dont want to have to delete everything in the vm if something happens. also the malware doesnt go to the router and spread rigt????

you are viewing a single comment's thread
view the rest of the comments

[–] Semi_Hemi_Demigod@lemmy.world 16 points 2 days ago (3 children)

Take regular VM snapshots and never forget that exploits can breach the VM

[–] hirihit640@sh.itjust.works 7 points 2 days ago* (last edited 2 days ago) (1 children)

very rare for exploits that can breach a VM. Like once-every-10-years kind of rare.

One important thing to be aware of. By default your VM will have access to the same network resources as the host. So, say, if you use tailscale or some other secure VPN to protect your NAS, but you give your host access, the VM will be able to access it too! You can use firewall rules or bridge networking to fix this, but tbh it isn't trivial.

[–] nyan@sh.itjust.works 3 points 2 days ago (1 children)

Depends on your VM. qemu, by default, isolates each VM on a subnet. It's a PITA when you actually need the VM to be able to see the LAN.

[–] hirihit640@sh.itjust.works 2 points 1 day ago* (last edited 1 day ago) (1 children)

It's been a while since I've tested the defaults, but if your VM has internet access it would also have access to the LAN right? From the perspective of the VM it's all the same, just sending requests to the router. Unless QEMU specifically blocks requests to LAN network ranges.

[–] nyan@sh.itjust.works 1 points 1 day ago

I'm not sure what the mechanism is, but I discovered the issue by empirical testing a few months ago, and I'm still trying to sort it out and make the LAN visible to that VM. Granted, I haven't been able to put much time into it, but I keep ending up down among the weeds of iptables/nftables, with all the documentation either out of date or not intended for a host using netifrc for network management (or both). I'll probably have to ask on the Gentoo boards eventually.

[–] lemmingsareawesome@sh.itjust.works 3 points 2 days ago (1 children)

what do u do to stop it (before it happens) tho??

[–] Semi_Hemi_Demigod@lemmy.world 9 points 2 days ago (1 children)

Don’t download shady shit

[–] lemmingsareawesome@sh.itjust.works 1 points 1 day ago

but i wanaaaaa (((((

[–] MonkderVierte@lemmy.zip 1 points 2 days ago* (last edited 2 days ago)

Rather, malware detect the vm, assume a security lab testing environment and hold still. Don't take that stuff outside.