941,500 Members | Top Members by Rank

0

Five *nix Myths Busted

by on Jan 22nd, 2010, 7:00 pm
I love mythology and there's nothing like hearing a technology myth to make my day complete. Just today someone applied one of the following myths in a conversation with me. I didn't say anything but it gave me the idea for this post. Here are the five myths related to *nix systems that I hear most often when dealing with technical and non-technical people alike. You'd be surprised as to how often even the most technical people spout these myths to each other and to the unsuspecting and unknowledgeable bystander. I have to bite my tongue when I hear them. And now that you know them, I hope it ruins your day too when someone slips into mythland with one of these gems.

They are in reverse order of how much they irritate me. Enjoy.

5. Logging in as Root - The long-held myth that you should never login as root is ridiculous. The logic goes something like this: Login as a standard user, then su to root or use sudo to run something as root. Yes, it's safer to do so but not by much. If you su to root, then you are root. If you use sudo then you are executing a program, editing a file or doing whatever it is you're doing as root.
Should you disable the ability to ssh as root? Yes.
Should you never login as root to a system? No.
Should you always use sudo to perform single commands as root? If you're afraid of what you might do. But there's a caveat with sudo too. If you're actively doing things with sudo, you only have to enter your password once during a session, unless you walk away or take a five minute break, then you'll be prompted again for it.
If you're careless, you're going to make unrecoverable errors regardless of using su or sudo. Be careful.

4. su is SuperUser - OK, so this is a light myth but it's one worth busting. So many people use this term incorrectly that it is almost acceptable terminology. The term su does NOT mean superuser (super user). It means substitute user. It is used to login as another user though many use it for logging in or taking on the characteristics of the root user.
And for those who still don't believe me, this is from the su man page:
Quote ...
su - run a shell with substitute user and group IDs
There is no superuser. There are users and the root user. And there's no substitute for those terms.

3. *nix Systems Can't Get Viruses - This myth is a bit gray for some people. A *nix system can get viruses under certain circumstances. A virus is a computer program that can copy itself to other computers thereby infecting them with a harmful or potentially harmful payload. One of the circumstances where *nix systems could get viruses is where a user has access to a *nix system and other *nix systems on the same network. This user could deploy a computer program that would replicate itself and deliver its payload on all the systems. The virus would be even more effective if the user account has or gained root user access and wrote to cron to fire itself at a specific time and date. Once the payload is delivered, it would erase its tracks and itself.
So, to say that it's impossible for *nix systems to have viruses is incorrect. It isn't common but it can happen. And, yes, even the beloved Mac is susceptible and it is now *nix-based.

2. *nix Systems are More Secure - This is a very common myth that swirls around *nix systems and I don't expect that my entry here will make it go away. Any system can be insecure or can be made to be very secure. It has nothing to do with the operating system. It has everything to do with how that operating system is implemented. I had a co-worker with a FreeBSD system that was hacked. FreeBSD is well-known for its heightened security. But it takes some careful thought about what you're doing. It takes patching, updating and upgrading to prevent security issues. It also takes vigilance to make sure your systems are up to date and not compromised.
Remember that no system is completely secure. We used to say the only way to secure a system is to unplug it but that isn't true either as someone can still pick it up and carry it away. Don't forget physical security.

1. You Never Have to Reboot - I love this one. Every uninformed *nix nerd in the world will tell you that you never have to reboot a *nix system. It's laughable, really. For those of us who exist in the real world, you know that you have to reboot, and should, on a regular basis. Some enterprises reboot their systems weekly, monthly or quarterly. Where I currently work, it's quarterly.
There are good reasons for rebooting and some of them are: hardware maintenance and upgrades, kernel changes, major patches, getting rid of zombie processes, diagnostics and memory refresh.
I once used an Oracle database server (Solaris) that had an uptime of about 5 years, which is really, really stupid and here's why. The system administrators needed to do some major patching on that system but were afraid since it had been up so long. The system also needed a memory upgrade because it was 'thrashing.' Add thrashing to the list of reasons to reboot.
Once the system was patched and rebooted, there were lots of errors. Lots and lots of errors. Problems that had amassed over the last few years that, if taken one a time, could have been solved but after we saw what had happened, no one could determine what to do next. We upgraded the RAM and restarted the system. It kept failing and finally was decommissioned and replaced.
The moral to the story is that responsible system administrators would have done their due diligence (and their job) and maintained that system appropriately. Yes, you do, in fact, need to reboot your *nix systems.

Do you have any other technology myths that you can add to the list?
News Story Tags: linux, root, security, sudo, unix
Last edited by khess; Jan 22nd, 2010 at 7:04 pm.
Similar Threads
 
 
Comments on this News Story
Jan 23rd, 2010
2

Re: Five *nix Myths Busted

After reading this article, I can only assume that you don't have any idea what you're talking about.
Newbie Poster
jess912 is offline Offline
1 posts
since Jan 2010
Jan 23rd, 2010
-2

Re: Five *nix Myths Busted

I'm 100% in agreement with Jess912 on this one. The Author of this article has absolutely NO idea what he is talking about. I've been a GNU/Linux user for over a decade, and not a word written above is even remotely accurate today.
Newbie Poster
NoAsylum is offline Offline
1 posts
since Jan 2010
Jan 24th, 2010
2

Re: Five *nix Myths Busted

I thought su meant switch user, not substitute. Oh well.

I'd really disagree with points 2 and 1.
While *nix systems can be configured to have more holes than a plate of swiss cheese, it's built for a multi-networked, multi-user environment. That fact alone means there is more security in any *nix system than, say, Windows. As for FreeBSD being hacked, perhaps the hacker had many more resources at his disposal, such as a cluster or even a botnet, helping him get through; The article doesn't mention what his password was, which for all we know, was password.
The largest security risk in any organization, for any computer, is the user.

As for never rebooting, I do agree with some points. Yes, it's good to refresh your ram, remove zombie processes, etc.
But with KSplice, you don't have to reboot even after a kernel replacement / update. It handles it all live. And when you have servers running, 99.9% uptime minimum means no reboots unless necessary. Reboots on a regular basis seem to contradict that; shouldn't servers be built and maintained so no zombie processes are created, so all required packages are maintained and updated, secured to the hilt?
The longest running server I heard of was a Gnu/Linux machine that had been running for 10 years. It either had a hardware failure, or the company got rid of the machine and replaced it with something else.

I also don't mind logging in as root. Obviously I do not do my web browsing as such. It's great for maintenance though. Distros like (K)Ubuntu which stop a user from logging in as root, are frustrating to work with.

Point 3 is fairly accurate though, as viruses do exist but require root access or security holes to manifest. Most holes are patched quickly as it is.
Newbie Poster
Peon-Dev is offline Offline
2 posts
since Nov 2009
Jan 24th, 2010
2

Re: Five *nix Myths Busted

Regarding your point 4, "su is SuperUser", well, yes it is actually, see here:
http://pthree.org/2009/12/31/the-meaning-of-su/
Newbie Poster
jejejeje is offline Offline
1 posts
since Jan 2010
Jan 24th, 2010
-1

Re: Five *nix Myths Busted

The author of this article obviously takes several things out of context, and is wrong about others.
1: Yes you do need to reboot Linux systems occasionally, but not nearly as often as Windows systems.

2: As another commentor points out, Unix (and Linux) wer designed from the start to be secure network OSs. Windows was never designed to ne a network OS, and they still haven't got the network security (or any security) thing right yet.

3: This is fairly accurate (as another pointed out). The biggest security problem is uneducated users who will install anything (without checking for viruses/spyware/adware) and click on any attachment that they are sent.

4: As if this matters at all?

5: Never is the wrong word here. However, you should seldom (if ever) need to log in as root, and you should only do so when it is necessary. Too many Windows users are used to having
Newbie Poster
nonurs is offline Offline
1 posts
since Jan 2010
Jan 24th, 2010
0

Re: Five *nix Myths Busted

Umm, you guys think that Unix was designed as secure? That is wholly incorrect. Unix was originally designed as a workgroup operating system as a replacement for Multics with very little security in mind. It's only after it gained more widespread acceptance that security became a concern. Why else would you have services like the "r" services and commands? Have you ever heard of finger and the .plan file? What about a .project file? How about the talk service? How about FTP and Telnet?
These are all insecure and they were part of *nix (Still are if you want them) but to say that it was designed as secure is incorrect.
So, tell me again, please--where you think I'm incorrect in anything I said.

And to jejejeje:
See comment #7 on that link you sent me to--it reads:
Quote ...
I’m looking at volume 1 of the “UNIX Programmer’s Manual, Revised and Expanded Version”, published by Bell Laboratories, copywrite 1983, 1979 and according to this source, su means “substitute user id”. Of course the C code you posted above predates that, but I think you might be misinterpreting the comment. The comment is merely saying the “substitute user id” command is used to become the “super-user” AKA root user.
That's published by Bell Labs...you know, the people who started Unix. And posting the excerpt from the su man page didn't help either, I guess.

Anyone else? C'mon, put 'em up, put 'em up, I'll murderlize you even...
Practically a Master Poster
khess is offline Offline
638 posts
since Apr 2008
Jan 24th, 2010
0

Re: Five *nix Myths Busted

man su:

"su - change user ID or become superuser"

Duh.
Newbie Poster
penguin007 is offline Offline
1 posts
since Oct 2008
Jan 24th, 2010
0

some good can come from an intellegent disagreement

wow:-) I'll bet the author thinks it over very carefully before making another yelp!!!!

be it right or to the left the author has us all thinking, and lots of really good info has been brought out by posters, and I'm thankful for that. So I thank the author for setting wheels in motion that has given me much good information on a linux procedure that has always caused me to question my intelligence.
Last edited by ultrapup; Jan 24th, 2010 at 9:48 pm. Reason: more thought process
Newbie Poster
ultrapup is offline Offline
1 posts
since Jan 2010
Jan 24th, 2010
-1

Re: Five *nix Myths Busted

@ultrapup

Thanks, you "get it." It must be my roots as a teacher that makes me want to challenge accepted thought and make people think a bit. A lot of people don't get it. They also don't get my offbeat and dry sense of humor. It takes time, I guess. Thanks for reading.
Practically a Master Poster
khess is offline Offline
638 posts
since Apr 2008
Message:
Previous Thread in Linux Servers and Apache Forum Timeline: 10 Characteristics of a Linux Guru?
Next Thread in Linux Servers and Apache Forum Timeline: Reverse and Forward Proxy simultaniously





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC