Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found -1 articles for you...
209
security practicesantivirusmalwareExploring Antivirus Necessity for Linux Users and Security Practices
It is a common belief among Linux users that antivirus software is unnecessary. Many long-time Linux users have never encountered viruses or malware on their Linux desktop. . Understanding the distinction between being vulnerable on a network and being vulnerable to viruses and malware is crucial. While Linux systems still have vulnerabilities and are susceptible to network attacks, the strict permission-based nature of Linux mitigates the risk of viruses and malware. But are you completely safe without using antivirus software on Linux? Let's examine whether antivirus software is necessary for robust Linux security. Is Antivirus Necessary on Linux? How Secure Am I Without It? The concept of permissions is one of the main reasons Linux users generally feel secure without antivirus software. In Linux, an application or piece of software cannot be installed without explicit permission from the user. Even if a malicious file is downloaded onto a Linux system, it will not have executable permission by default, minimizing the risk of it causing harm. This permission-based system provides an additional layer of protection compared to other operating systems like Windows, where malware can easily execute without user consent. However, Linux users are not entirely immune to malicious software. The multiple avenues for software installation in Linux, such as third-party repositories and source code downloads, can introduce potential risks. It is crucial for users to exercise caution and install software only from reputable sources. This raises questions about the trustworthiness of various software channels and the measures users should take to ensure the integrity of their Linux systems. What Are the Implications of This Discussion? The implications of this discussion are significant. Security practitioners, Linux admins, and infosec professionals must critically analyze their safety and consider the broader implications for their own practices. Linux users should remain vigilant, especiallyregarding potential vulnerabilities introduced by third-party repositories or unrecognized source code. Moreover, the risk of Linux users unintentionally becoming transmitters of viruses or malware must not be overlooked. If a Linux user receives a malicious file and forwards it to a Windows user, it could severely impact the Windows user's system. This prompts questions about the responsibility of Linux users to protect their own systems and prevent the inadvertent spread of malware to others. How Can I Fortify My Linux Systems with Additional Security Measures? To address these concerns, Linux users should implement additional security measures. Although we believe antivirus software is unnecessary for Linux desktops, we recommend installing a mail scanner like ClamAV to scan attachments before forwarding them to others. Additionally, we suggest using browser extensions like uBlock Origin to protect against malicious web pages and ads. These suggestions underline the importance of a multi-layered approach to security and the need to adapt to evolving threats. Our Final Thoughts on Antivirus Software for Linux Users We aim to challenge the notion that Linux users do not need antivirus software. It is essential for security practitioners to evaluate the risks and implications for their specific environments critically. By understanding the nuances of Linux security and staying informed about emerging threats , Linux admins, infosec professionals, and sysadmins can make strategic decisions to protect their systems and the wider community. . Understanding the distinction between being vulnerable on a network and being vulnerable to viruses . linux, common, belief, among, users, antivirus, software, unnecessary, long-time. . Dave Wreski
Feb 20, 2024
•
Security Trends
79
security advisorysecurity enhancementpermissionsPostgreSQL Security Enhancements for Row-Level Permissions and SELinux
This message came across my INBOX this weekend: The PostgreSQL community is considering including security enhancements in Postgres 8.4, e.g. row-level permissions and SE-Linux security. However, to evaluate the patch and its usefulness, we need security experts who want to use this capability or have used it in other databases. If you use PostgreSQL and are interested in contributing in the discussion, click-through to read more! . The link for this article located at PostgreSQL Team is no longer available. . Engage with the PostgreSQL community to explore advancements in security measures aimed at bolstering database safeguards and user privilege management.. PostgreSQL Security, Row-Level Permissions, SELinux Enhancements. . LinuxSecurity.com Team
Jan 26, 2009
•
Security Projects
77
access controluser managementLinux administrationExploring User And System Control In Linux Permissions Management
I work for a government contractor, and have recently convinced them to purchase a Beowulf cluster, and start moving their numeric modelers from Sun to Linux. Like most historically UNIX shops, they don't allow users even low-level SUDO access, to do silly things like change file permissions or ownerships, in a tracked environment. I am an ex-*NIX admin myself ,so I understand their perspective and wish to keep control over the environment, but as a user, I'm frustrated by having to frequently call the help-desk just to get a file ownership changed or a specific package installed. . If you're an admin, do you allow your users basic SUDO rights like chmod, cp, mv, etc (assuming all SUDO commands are logged to a remote system)? If no, why don't you? If you allow root access to your knowledgeable users (ie developers with Linux experience), what do you do to keep them 'in line'?" The link for this article located at Slashdot.org is no longer available. . Delving into SUDO permissions in Linux boosts user efficiency while safeguarding system integrity. This selective access enables command execution and security retention. User Management, Linux Permissions, SUDO Access, System Control. . LinuxSecurity.com Team
Dec 30, 2005
•
Server Security
77
access controlsecuritypermissionsImproving Access Control and User Permissions in FreeBSD Systems
Unix permissions are flexible and can solve almost any access control problem, but what about the ones they can't? Do you really want to make a group every time you want to share a file with another user? Perhaps you don't . . . . Unix permissions are flexible and can solve almost any access control problem, but what about the ones they can't? Do you really want to make a group every time you want to share a file with another user? Perhaps you don't have root, and you can't create a group at will. Sometimes the limitations can cause security problems; it would be nice to be able to make a directory available to a web server or other user without making the files world-readable or world-writable. Root-owned configuration files often need to be edited by those without root privileges; instead of using programs like sudo or calife and risking shell escapes in editors, it would be better just to allow certain non-owners to edit these files. Access Control Lists (ACLs) solve these problems. They allow more flexibility than the standard Unix user/group/other set of permissions. ACLs have been available in commercial UNIXes such as IRIX and Solaris (and in Windows NT) for years. Now, thanks to the TrustedBSD project's work, ACLs are available in FreeBSD 5.0-RELEASE and beyond. Much of the information below applies, at least in part, to ACL implementations on other platforms; however, you will want to look at specific documentation to avoid being tripped up by differences in syntax. There shouldn't be many, as FreeBSD attempts to conform to the latest POSIX.1e draft. . Explore the advantages of FreeBSD Access Control Lists (ACLs) in enhancing Unix permissions, providing robust and adaptable solutions for secure file sharing.. FreeBSD, Access Control Lists, Secure File Sharing, Unix Permissions. . LinuxSecurity.com Team
Aug 18, 2003
•
Server Security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!