On Thursday, December 17, 2020 10:08:54 AM EST Jonathan Ryshpan wrote:
I read that there has been a major security hack of at least two
companies, FireEye and SolarWinds, which supply security software
to the US Government and to major corporations. (see:
https://www.nytimes.com/2020/12/16/opinion/fireeye-solarwinds-russia-hack...).
Does this have any effect on Fedora?
Well, SolarWinds installs "agents" on servers to do their monitoring.
So it is conceivable that their problem *could* be affecting Fedora
systems. They use some pretty lame processes to do monitoring that
require a program or programs to be installed as the root user. One
program seems to fire off every second or two to sniff around and
report. I do not know if the reported exposure extends to the agents
installed on Linux systems, but we recently uninstalled all of that
crap on our production Debian systems. (They are systems not exposed
to the Internet, but still...)
--
Garry T. Williams