[clamav-users] Silly question - clamav - linux viruses?

[Paul Smith]

On 17/04/2014 17:03, Benny Pedersen wrote:
> Dave Shevett skrev den 2014-04-17 16:46:
>
>> But, can I say "clamav does not scan for linux viruses" or is that 
>> not true?
>
> there is talented fools on every distros
>
> whats the point of tripwire when upstream management md5 sum there 
> installs ?
>
> okay windows have there problems aswell to allow unsigned installs to 
> be allowed, but in linux its still need atleast root access to let 
> this happend
>
> elf scanner in clamav might be waste of resources
For a strict definition of 'virus' that may be true - but you can run 
malware without being root... You can do a lot of bad stuff from a PHP 
or Python script (or user level executable)! You can easily have a 
trojan script or executable which participates in DDoS attacks or 
spamming without having any privileged access. It may not run as root, 
but it can still send emails or issue HTTP requests or scan for Heartbleed.

Just because everything doesn't run as root, it doesn't mean that Linux 
is immune from malware.


-


Paul Smith Computer Services
Tel: 01484 855800
Vat No: GB 685 6987 53