F15 Why does gnome-shell automatically start Adobe acroread updater? (malware?)

Bruno Wolff III bruno at wolff.to
Mon Jul 11 21:07:51 UTC 2011


On Mon, Jul 11, 2011 at 17:13:27 -0400,
  Deron Meranda <deron.meranda at gmail.com> wrote:
> 
> I do blame Adobe though.  Yes, I contemplated very long very before
> installing acroread because I do try to keep my system extremely pure
> .. but alas, the needs to fill out tax forms nudged me over.  But
> Adobe to their failing did not notify me that their software would
> periodically attempt to download and install software on my system
> without my knowledge.  Bad on them.

If you just needed fill out forms, evince might have worked for you.

> Concerning Fedora.  This could perhaps be partially guarded against if
> there were an SELinux context into which I could label the "foreign"
> software -- that would prohibit it from accessing the network, or
> running scripts out of /tmp.  Is there such a type label that I could
> chcon /usr/local/bin/acroread ??

You can run programs in a sandbox which will limit what they can do.
You can use 'man sandbox' to see how to use it.


More information about the users mailing list