This is the mail archive of the
mailing list for the Cygwin project.
Re: Exclude cygwin folder from malware scans?
- From: "Larry Hall (Cygwin)" <reply-to-list-only-lh at cygwin dot com>
- To: cygwin at cygwin dot com
- Date: Sun, 07 Jan 2007 21:00:17 -0500
- Subject: Re: Exclude cygwin folder from malware scans?
- References: <firstname.lastname@example.org>
- Reply-to: cygwin at cygwin dot com
Fred Ma wrote:
Fred Ma wrote:
After some surfing, I haven't found any evidence of malware targetting
cygwin. I'm considering excluding the massive file tree from scans
(AV, SpyBot, AdAware). I'd be interested in more experienced opinions
about this. Thanks.
Any such reports on this list in the past have later been shown to
be problems with the software that claims to have found a fault in
Cygwin. Such is the reasoning behind the following FAQ:
There has actually been more evidence to support that virus
scanners, firewalls, and spyware detection programs *cause* Cygwin
problems by interfering with its proper operation. You can see such
reports and the subsequent resolutions (un-install faulty security
software) in the email archives.
I haven't had any problems in that regard (malware scanners
interfering with cygwin or having false positives), though I don't
doubt that it has happened before. I was more wondering about the
wisdom of taking the plunge and excluding the cygwin directory tree
from future scans based on the past track record of not being
I doubt there are many out there that would think Cygwin is a good vector
to compromise machines with. It's just not on enough machines to attract
that kind of attention. The call is, of course, yours but I would say that
a Cygwin-based attack isn't likely to be your biggest concern.
Larry Hall http://www.rfk.com
RFK Partners, Inc. (508) 893-9779 - RFK Office
216 Dalton Rd. (508) 893-9889 - FAX
Holliston, MA 01746
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html