App Armor vs Anti-Virus

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

AppArmor does a good job of preventing things from running that should
run but should not run in ways not intended. Viruses should never run.
Chances are extremely good you will never have an AppArmor policy for a
virus (really... why would you ever have a policy for a program you
should never have?). With that said I never use AV software on my
machines because I'm fairly careful about what I download, I use
Firefox, and I'm on Linux. The chances of my catching a virus that can
actually do something is very small and, if it does, it would need to be
exceptionally well-written to do more to my system than mess up my
user's own files (vs. the system files). With that said there is more
out there than workstations and servers which host files should probably
have some kind of AV software so that when a windows box running a virus
puts a copy of that virus on a Linux-hosted share it can be found and
possibly deleted before it propagates further.

So, is AppArmor a replacement for AV software? Definitely not. It's a
way to keep programs from doing things they shouldn't while they are
allowed to run and run well on a system.

Good luck.





Kirk White wrote:
> If I'm running App Armor, Do I need an Anti-Virus solution?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHYEs8vtsLmbbyAAERAsa7AJ91T2V5r6P6rT+D4wS7ay xsEVLWCQCgmj1K
c5boTCCtETlDWu87y9CYjA0=
=jPoU
-----END PGP SIGNATURE-----