Antivirus

[Clayton]

> I would sooner advocate only using an AV if you're setting up a mail or
> file server in a cross-platform environment and saying that a "good
> Linux configuration" would have some mechanism for using MD5 hashes on
> your system taken and compared at regular intervals.
>
> What I'm missing is a configuration that will take MD5 hashes, find
> differences, and compare them to your update logs on an Ubuntu system so
> it doesn't give you false alarms about altered files when you already
> authorized them via the update manager or installed them with
> apt-get/Synaptic.


You might be looking for something like AppArmor....
https://wiki.ubuntu.com/AppArmor
http://en.opensuse.org/AppArmor
http://developer.novell.com/wiki/index.php/Apparmor_FAQ

C