olsztyn
If the user ‘test’ is assigned to only these groups, does it deprive ALL the abilities to break the system, even when the user invites a malware due to reckless usage? Or how far does it deprive? What other measures regarding group assignment, can be taken, to improve the situation? Or, is this sufficient as far as User-Groups are concerned?
My opinion is the following:
I do not think there is 100% guarantee that nothing can break the system. However you can reduce such chance to the very minimum with sufficient security precautions discussed above. Furthermore, with the method in the second point below, any such breaks would be for the current session only and return your system to the healthy state after reboot:
– If your antiX system is installed as often linux systems are, then any malicious program that infected your system usually survives reboots and continues doing what it is designed to do with the next session after reboot.
– If your antiX system is set up on your hard drive as Frugal (Similar to Live USB, but on hard drive) and is finalized with no persistence then any malicious infection acquired during session will be automatically gone after reboot. And if such malicious code manages to make any changes to the system during that first session, such changes will be also gone after reboot and your system will return to the your finalized pristine state as before.
In other words no permanent malicious changes can be made to your system in such scenario.
There is a hardly better way to harden your system against malicious changes.
Best of luck!
Live antiX Boot Options (Previously posted by Xecure):
http://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parameters