Xubuntu 22.04 LTS中Chromium被自动安装的安全性疑问及原因排查求助

Hey there, let's take this step by step to put your mind at ease first—you probably don't have anything to worry about, but let's dig into the details to be sure.

First off, unexpected installs of Chromium on Xubuntu 22.04 LTS are almost always legitimate, not a sign of a breach. Here are the most common reasons this might happen:

• Dependency or recommended package pull-in: Your hunch about VirtualBox isn't off base, but it could also be any other package you installed (or updated recently) that lists Chromium as a dependency, or even a recommended/suggested package. By default, Ubuntu-based systems like Xubuntu automatically install recommended packages unless you've explicitly disabled that setting.
• System update-related change: Rarely, a post-release system update might adjust default desktop components, and Chromium could get pulled in as part of that adjustment—though this is less likely if you hadn't had it installed before.

To get a clear picture of why Chromium showed up, try these quick terminal checks:

1. Check APT installation logs: Run this command to see exactly when and alongside which packages Chromium was installed:

   cat /var/log/apt/history.log | grep -i chromium
   

   The output will show you the installation entry, including the other packages that were installed at the same time—this should point you to the source.
2. Trace dependency relationships: To see which packages depend on or recommend Chromium, run:

   apt-cache rdepends chromium
   

   (If the package is named chromium-browser on your system, swap that in instead.)
3. Verify APT's recommended packages setting: Check if your system is set to auto-install recommended packages with:

   grep -i "APT::Install-Recommends" /etc/apt/apt.conf.d/*
   

   If you see APT::Install-Recommends "true";, that's the default behavior and explains why Chromium might have been pulled in alongside another package.

As for security concerns: Since you're the only user with a strong password, the chance of unauthorized access leading to this install is extremely low. Malicious actors wouldn't typically install a well-known browser like Chromium—they'd opt for far more covert tools. That said, if your log checks turn up something odd, you can run a quick rootkit scan with tools like rkhunter or chkrootkit (install them via sudo apt install rkhunter chkrootkit if needed) to rule out any edge cases.

Hope this helps you get to the bottom of it!

备注：内容来源于stack exchange，提问作者jack3443