Re:Another Ransomware Outbreak Is Going Global
by idealhavoc on Tuesday June 27, 2017 @01:34PM
(#14647437)
To do it properly you would likely be looking at mandatory access control, such as SELinux, so that the ransomware wouldn't be authorized to modify the files and further would make itself obvious in the logs.
Not very easy to use (in a way that still provides meaningful security) outside of the server space, though it can be done.
[ Parent
| on HN ]
Re:Another Ransomware Outbreak Is Going Global
by kakarot on Tuesday June 27, 2017 @02:25PM
(#14647891)
RHEL products, including Fedora, come with a fairly usable SELinux out of the box. By extension, so does Qubes OS.
I currently run a QEMU setup at home with different VMs, all Fedora, for different domains of use (internet, work, development/art, untrusted, a clean environment for installing OS's, etc) in the spirit of Qubes. Regular backups of everything are made frequently.
In the highly unlikely event of a ransomware infection, it would be limited to a single domain.
I believe this is the way forward for personal computing.