Weblog entry #3 for fsateler
See all weblog entries made by fsateler.
#3
trojan-scan
Posted by fsateler on Tue 18 Oct 2005 at 06:00
I recently installed trojan-scan, following these instructions. Nifty tool. However, I found out 3 things I didn't like: Kopete likes to connect ispell to someone (apparently the msn server) whenever a chat window is opened, and most importantly: sshd runs as root instead of a dedicated user, and smbd opens random ports with the root user. Am I just being too paranoic?
I sent a message to KDE forums about ispell, but I don't really know how to handle these programs. Should I treat them as normal behaviour, or do something about it?
I sent a message to KDE forums about ispell, but I don't really know how to handle these programs. Should I treat them as normal behaviour, or do something about it?
Comments on this Entry
Posted by Anonymous (213.164.xx.xx) on Tue 18 Oct 2005 at 09:51
sshd runs as root, then drops privileges.
smbd is designed to open these random ports, which is why firewalling smb is such a pain.
not sure about ispell, sounds like a misreport.
smbd is designed to open these random ports, which is why firewalling smb is such a pain.
not sure about ispell, sounds like a misreport.
[ Parent | Reply to this comment ]