WhoIzDisIz comments on China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade (thehackernews.com)

submitted 2 months ago by monica_b1998@lemmy.world to c/linux@programming.dev

14 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] WhoIzDisIz@lemmy.today 2 points 2 months ago* (last edited 2 months ago) (2 children)

~~Go to something immutable.~~

Apparently this is not as strong a solution as I thought. Apologies.

parent

hideshow 4 child comments

[–] moonpiedumplings@programming.dev 6 points 2 months ago (1 child)

Not really. Immutability can be overriden by root, who can then edit files.

And in addition to that, /etc/, system config files, including pam files mentioned here, are not immuable even in immutable distros.

parent

hideshow 2 child comments

[–] WhoIzDisIz@lemmy.today 2 points 2 months ago

TIL, TY.

parent

[–] PabloSexcrowbar@piefed.social 4 points 2 months ago

I don't know that the current crop of immutable distros would be able to prevent something like this. rpm-ostree, at least, lets you install out-of-tree rpm packages to the base system, you just have to reboot for them to take effect.

parent