Skullgrid comments on China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade (thehackernews.com)

submitted 2 months ago by monica_b1998@lemmy.world to c/linux@programming.dev

14 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Skullgrid@lemmy.world 3 points 2 months ago* (3 children)

what are we meant to do?

hideshow 6 child comments

[–] Ooops@feddit.org 20 points 2 months ago*

Don't let people steal your device to break into it and replace the login software with a compromised version...

parent

[–] randamumaki@lemmy.blahaj.zone 18 points 2 months ago

Nothing. The group in question attacked a specific system. The title is misleading.

parent

[–] WhoIzDisIz@lemmy.today 2 points 2 months ago* (last edited 2 months ago) (2 children)

~~Go to something immutable.~~

Apparently this is not as strong a solution as I thought. Apologies.

parent

hideshow 4 child comments

[–] moonpiedumplings@programming.dev 6 points 2 months ago (1 child)

Not really. Immutability can be overriden by root, who can then edit files.

And in addition to that, /etc/, system config files, including pam files mentioned here, are not immuable even in immutable distros.

parent

hideshow 2 child comments

[–] WhoIzDisIz@lemmy.today 2 points 2 months ago

TIL, TY.

parent

[–] PabloSexcrowbar@piefed.social 4 points 2 months ago

I don't know that the current crop of immutable distros would be able to prevent something like this. rpm-ostree, at least, lets you install out-of-tree rpm packages to the base system, you just have to reboot for them to take effect.

parent