Skullgrid comments on China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade (thehackernews.com)

submitted 5 months ago by monica_b1998@lemmy.world to c/linux@programming.dev

13 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Skullgrid@lemmy.world 3 points 5 months ago (5 children)

what are we meant to do?

hideshow 5 child comments

[–] randamumaki@lemmy.blahaj.zone 17 points 5 months ago

Nothing. The group in question attacked a specific system. The title is misleading.

parent

[–] WhoIzDisIz@lemmy.today 2 points 5 months ago* (last edited 5 months ago) (3 children)

~~Go to something immutable.~~

Apparently this is not as strong a solution as I thought. Apologies.

parent

hideshow 3 child comments

[–] moonpiedumplings@programming.dev 5 points 5 months ago (1 child)

Not really. Immutability can be overriden by root, who can then edit files.

And in addition to that, /etc/, system config files, including pam files mentioned here, are not immuable even in immutable distros.

parent

hideshow 1 child comment

[–] WhoIzDisIz@lemmy.today 2 points 5 months ago

TIL, TY.

parent

[–] PabloSexcrowbar@piefed.social 4 points 5 months ago

I don't know that the current crop of immutable distros would be able to prevent something like this. rpm-ostree, at least, lets you install out-of-tree rpm packages to the base system, you just have to reboot for them to take effect.

parent