From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.54) id 1FH69g-0004OB-Kz for garchives@archives.gentoo.org; Wed, 08 Mar 2006 21:25:13 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id k28LO80P007302; Wed, 8 Mar 2006 21:24:08 GMT Received: from mail.nucoretech.com (mail.nucoretech.com [12.146.132.130]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id k28LK0Ca027958 for ; Wed, 8 Mar 2006 21:20:01 GMT Received: from paris ([192.9.200.83]) by mail.nucoretech.com (8.13.1/8.13.1) with SMTP id k28LJwdw001738 for ; Wed, 8 Mar 2006 13:19:58 -0800 From: "Bob Young" To: Subject: RE: [gentoo-user] antivirus Date: Wed, 8 Mar 2006 13:19:59 -0800 Message-ID: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 Importance: Normal In-reply-to: <440F46A8.6010809@gmx.net> X-Archives-Salt: 5a1168c2-8fb1-4be9-87cb-70ae092695f3 X-Archives-Hash: a9d0ece3930d82495d07630011dbf4db -----Original Message----- From: Jarry [mailto:jarry@gmx.net] Sent: Wednesday, March 08, 2006 1:04 PM To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] antivirus Bob Young wrote: > In the vast majority of Windows cases, simply *not* routinely logging on > with admin privileges would probably stop 99% plus of the infections. True, but unfortunatelly, there are too many win-applications (even serious ones), which does not work correctly (or at all) without user having admin (power-user) privileges... PowerUser is different from Admin, Admin is the equevelent of root in the Linux/Unix world, PowerUser is not. The primary and most important difference is the ability to *write* to the registry, It's perfectly safe to routinely log on as a PowerUser, as PowerUsers can *not* write to registry keys that affect the entire system, while Admin users can write to *any* registry key. Most applications will run just fine as PowerUser, apps that truly *require* Admin rights are frankly, poorly designed. Even so, routinely logging on with Admin rights just because you need/want to run one or two badly designed apps is still a very bad idea. For the very very few aps that actually do require Admin rights RunAs is a much better and safer solution. Regards, Bob Young -- gentoo-user@gentoo.org mailing list