Significant rise in detected malware on Linux

I thought it might be hidden somewhere!
First installation date perhaps? I believe I read somewhere something about that!

I found it:

[limo@limo ~]$ stat / | awk '/Birth: /{print $2}'
2022-07-09

Thatā€™s the date when the root directory was created. Itā€™s usually the date of install, but not necessarily. In general, there is no reliable way to tell when the OS was installed, but things like that give you a good guess most of the time.

But even so, the ISO names like ā€œArtemisā€ are pointless when you have the installed system, because itā€™s a rolling release. They make sense only for the ISOs.

Thatā€™s a good start.
I found as well:

ls -lact --full-time /etc |tail
-rw-r--r--  1 root    root      1634 2022-07-09 17:19:01.189930011 +0200 rpc
-rw-r--r--  1 root    root         0 2022-07-09 17:19:01.183263325 +0200 arch-release
-rw-r--r--  1 root    root        73 2022-07-09 17:19:01.183263325 +0200 host.conf
-rw-r--r--  1 root    root       117 2022-07-09 17:19:01.183263325 +0200 ld.so.conf
lrwxrwxrwx  1 root    root        19 2022-07-09 17:19:01.183263325 +0200 mtab -> ../proc/self/mounts
-rw-r--r--  1 root    root       359 2022-07-09 17:19:01.183263325 +0200 nsswitch.conf
-rw-r--r--  1 root    root      1020 2022-07-09 17:19:01.183263325 +0200 profile
-rw-r--r--  1 root    root       139 2022-07-09 17:19:01.183263325 +0200 securetty
-rw-r--r--  1 root    root    298782 2022-07-09 17:19:01.169929955 +0200 services
-rw-r--r--  1 root    root      3171 2022-07-09 17:19:01.166596612 +0200 protocols
[limo@limo ~]$ 

So whatā€™s your point?

POSIX filesystems typically do not keep the created time for files, only modified and accessed. These dates can be changed with a simple touch command.

In any case, there is no guarantee that this time is the when you installed your system.

I can know when my system was installed then from https://endeavouros.com/news/ I can know a bit more.

It is nothing muchā€¦ just learning!
Knowing when root directory was created is ok.

What do EndeavourOS news have to do with the exact time youā€™ve installed your system? :face_with_raised_eyebrow:

What are you trying to accomplish?

I find pacman.log to be a reliable indicator of the install date, because it does not rely on filesystem attributes and is only appended.

I can figure out which release I started with.
I could figure out we had Atlantis (8 months ago), then Apollo (April 8 2022) then Artemisā€¦

Yeah, it literally tells you when the system was installed. The problem is, it is not universaly reliable, because the user might have deleted it.

But why is that important? I told you above that it doesnā€™t matter from which ISO youā€™ve installed your system, as long as youā€™re updating it regularly. The problem with old ISOs is that itā€™s difficult to update them, thatā€™s the main reason new ISOs are released.

But even with old ISOs, if you do an online install, you should end up with an updated EndeavourOS installation.

You see, when you do an online install, youā€™re downloading packages from Arch repos. The same packages I am downloading when I update my system. So you end up at the same version of the system regardless of the ISO.

Just learning a bit!
Sorry, this is out of original post!

I seeā€¦ Thatā€™s a very random and fairly useless thing to learn about, but okay. :rofl:

The ongoing issue I see repeated very often on the forum is that many people fail to understand the concept of a Rolling Release. There are no versions, it is as @Kresimir says. These names are not releases of a new version, they are just the latest iso image. If you keep your system updated then you already are at the latest ā€œreleaseā€. The only difference is that there may be an extra bit of software from the Endeavour devs that might be useful but you can find these things on the website. Basically the core system is Arch and you roll with it as Endeavour does. Update, backup and you are fine. :smile:

1 Like

If you want extra software, thatā€™s just one pacman -S command away. :rofl:

And if you are not sure whether you need this extra software or not, you probably donā€™t.

1 Like

Yep K.I.S.S. until you learn a bit more. Then you can choose. Heck, 11 years now and Iā€™m still learning! But for me that is part of the adventure. Iā€™m still here so I guess Iā€™m doing OK! :crazy_face: :rofl:

1 Like

In reality, itā€™s usually the opposite: the more you know, the more you want to K.I.S.S.

1 Like

Exactly!

P.S. I want to live in the woods latelyā€¦ :rofl:

2 Likes

Actually that is true! Hindsight is a great thing no? :rofl:

1 Like

I hope youā€™re not a bear. There is a codeā€¦ :wink: :laughing:

Naaahā€¦iā€™m just a clown!

honka_memes-128px-42

3 Likes

ClamAV still leading malware checker?