Tagged Questions
1
vote
1answer
41 views
Should I install non-repository software as root or as my user?
What is the right way of installing programs that are not available in repositories: should my user own the binaries and keep them in ~/bin/, or should root own the binaries and keep them in, say, ...
1
vote
1answer
92 views
Need help for locking down linux desktop
Good morning all.
So I work with a disabled guy and he has a computer. This guy asked for assistance, I put windows xp on his computer and I discovered that he loves deleting files (he managed to ...
3
votes
1answer
50 views
Preventing a specific application from accessing a folder
I just installed an application that has the bad habit of automatically scanning all my folders for files to edit.
The app has no available options to disable this behavior. I cannot just remove ...
1
vote
1answer
231 views
File permissions vulnerability in pure-ftpd using php script
I have created ftp-server using pure-ftpd following this wonderful tutorial. Everything works fine, except file access. Here is the problem.
Joe's home folder is /var/www/joe and Steve's home folder ...
2
votes
3answers
177 views
GUI Tool to deny Standard users from Using CD-ROM and USBs?
As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access.
I could do it by removing the user from the 'cdrom' and 'plugdev' ...
2
votes
1answer
228 views
polkit: disable all users except those in group wheel?
Is it possible to do the following using 1 polkit .pkla file?
Disable all users except those in the wheel group from using polkit.
The users in the wheel group will need to provide the root password ...
3
votes
1answer
112 views
Is file permission secured when it transferred from Ubuntu to Windows?
I am having 9GB text file which is encrypted .
This file contains some confidential data . Which is on my system(Ubuntu) and my external HDD (ntfs) . This file get daily updated and then encrypted . ...
1
vote
3answers
148 views
Who created files in “/proc” with my username?
I just learned about file security, user & group, etc.
And I appreciate a lot about the elegance of the filesystem of linux.
My username is lyg, and I found there are some files with owner lyg in ...
1
vote
1answer
74 views
Configuring permissions with Bastille
I was using Bastille to improve the security of my OS. To set this software properly, it ask you several questions related to security rules and you respond it (Y-N). I'm stuck at this question that I ...
0
votes
1answer
49 views
Why are many operations or commands in Ubuntu not allowed normally when you can just do the same thing by typing sudo?
What purpose does this server when bypassing is as easy as typing sudo?
Forgive the naivety here but I am a rookie and I'm sure there has to be a good reason for this, and I'd like to know that.
1
vote
1answer
150 views
Deb Installation And Man In The Middle Attack
Is the deb installation process protected against Man In The Middle Attacks that would alter the install script?
It seems if not, then it would be possible for a Man In The Middle Attack to place ...
3
votes
1answer
186 views
Can issetuid() be cleared for a child process? [closed]
I have a wrapper script A which is calling program B. A must be invoked as root so some initial setup can happen. After that, A calls setuid() and setgid() to reduce its own privileges, for safety and ...
9
votes
1answer
7k views
Can see samba shares but not access them
For the life of me I cannot figure this one out.
I have samba installed and set up on the ubuntu box and on the Win7 box I CAN SEE all the shares I created.
I created two users on ubuntu that map ...
1
vote
2answers
182 views
Prevent accidental low-level access (formatting) of system disk by root?
Is it possible to prevent accidental mounting and/or reformatting of a disk or partition by the root user during normal operation of a system?
For example, this happened to me a while ago:
Under ...
1
vote
1answer
442 views
Permission problems with Clamfs
been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these.
But I am having permission troubles with a ...
1
vote
1answer
395 views
Setting up fastcgi on an Ubuntu server (socket file permissions issue)
I am trying to set up mod_fcgid on my server. Part of the requirement is that Apache needs to create a socket file for mod_fcgid.
I specified the folder for Apache to write the socket data to:
...
11
votes
2answers
773 views
Is it a bad idea to run SELinux and AppArmor at the same time?
My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...
29
votes
2answers
8k views
Why should /var/www not have chmod 777
When opening a page from my server, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for security ...
3
votes
2answers
10k views
What file permissions should I set on web root?
I use Ubuntu Server 10.10 and have installed Nginx web server with apt-get install nginx. It creates a default web page at /var/www/nginx-default/ and that directory has the permissions drwxr-xr-x 2 ...
