0
votes
0answers
17 views

Allow one process access to /dev/uninput without completely compromising security

Steam In-Home-Streaming was turned back on the other day. This allows you to play games being rendered on one computer on another computer (commonly playing games on a TV/Media Centre that are being ...
0
votes
1answer
25 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
1
vote
1answer
53 views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
0
votes
1answer
17 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
24 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
2
votes
1answer
57 views

Sudo is also user login password - why? how to change?

When installing Ubuntu I can create a user with an encrypted folder, what I always do. Now after the installation the login password for this user is also the sudo password. Is that how it should be? ...
1
vote
1answer
88 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
6
votes
1answer
804 views

How did this exploit allow write access to root owned files?

For a computer security assignment at my university I need to find and understand an exploit that works on ubuntu 10.04. I have already found and tested one on an Ubuntu 10.04 machine (that I own) ...
0
votes
0answers
18 views

New user only RWX one directory

So, I read this: Is it possible to create users that can only use one directory? I would like to make it where my newly created user "kevin" (to keep in theme with the referenced post) cannot RWX in ...
0
votes
0answers
29 views

How does security differ between any two standard users?

If we take two standard users, so ignoring admin/sudos, are the security limitations between one user and another down to their respective file permissions? So what Alice can do in the system vs ...
6
votes
1answer
395 views

What are the risks of running Nautilus as root?

Whenever I try to access files outside my home directory I get a permission error. People keep recommending running Nautilus as root by running the following commands in a terminal: sudo -i nautilus ...
2
votes
2answers
572 views

Untrusted Application Launcher

So I'm trying to create a desktop icon for an application, and I dragged it from the top-left menu (I think it's called Dash or something). I clicked on it and it says it is untrusted and refuse to ...
-1
votes
2answers
496 views

How to create a root privilege file for a normal user?

I got a scenario where a customized Ubuntu 12.04 Linux OS has a read only filesystem which doesn't have terminal access. My goal is to create a file with root access using normal users permission. I ...
2
votes
1answer
122 views

Can chmod 777 be a security risk on a personal machine?

Can 777 permissions increase security risk on an average Ubuntu single-user machine? How? What are other downsides of it? Thanks
0
votes
1answer
199 views

Do some files downloaded from the internet have execute permission by default?

I noticed that some files downloaded from the internet have executing permission (e.g. Tor, Bit-torrent, Sync etc.) by default. Therefore the permission information is stored within the files itself, ...
3
votes
1answer
333 views

Why is a group writable directory considered unsafe?

More specifically, why does libslack's daemon consider files that are being executed in a group writable directory to be "unsafe"? If you can give me an explanation of why group writable directories ...
2
votes
0answers
202 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
0
votes
1answer
32 views

How secure is root read-permissions?

How secure is a file whos permissions are set so only root has any privileges with the file? Say I had the file on an unencrypted ext4 partition, would I be able to boot up another live OS, copy the ...
4
votes
2answers
4k views

unable to delete file - rm: cannot remove Input/output error

Some file is in my NTFS file system which I can't delete. It's giving this error: rm: cannot remove `zigBqC04': Input/output error Any other files also could not be copied in that folder and ...
-1
votes
2answers
106 views

Where is dconf in ubuntu-12.04 desktop-32 bit [duplicate]

I am not able to find dconf in ubuntu-12.04 desktop-32 bit?
1
vote
2answers
2k views

How do i change the password of root, using webmin in one command line?

I have lost root password of one old server, where i can only have normal user login and via webmin login. Via webmin interface i have one option to execute command, i have been trying the following ...
2
votes
1answer
460 views

Should I install non-repository software as root or as my user?

What is the right way of installing programs that are not available in repositories: should my user own the binaries and keep them in ~/bin/, or should root own the binaries and keep them in, say, ...
2
votes
2answers
313 views

Need help for locking down linux desktop

Good morning all. So I work with a disabled guy and he has a computer. This guy asked for assistance, I put windows xp on his computer and I discovered that he loves deleting files (he managed to ...
4
votes
1answer
187 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
1
vote
1answer
427 views

File permissions vulnerability in pure-ftpd using php script

I have created ftp-server using pure-ftpd following this wonderful tutorial. Everything works fine, except file access. Here is the problem. Joe's home folder is /var/www/joe and Steve's home folder ...
2
votes
3answers
285 views

GUI Tool to deny Standard users from Using CD-ROM and USBs?

As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access. I could do it by removing the user from the 'cdrom' and 'plugdev' ...
3
votes
1answer
173 views

Is file permission secured when it transferred from Ubuntu to Windows?

I am having 9GB text file which is encrypted . This file contains some confidential data . Which is on my system(Ubuntu) and my external HDD (ntfs) . This file get daily updated and then encrypted . ...
1
vote
3answers
292 views

Who created files in “/proc” with my username?

I just learned about file security, user & group, etc. And I appreciate a lot about the elegance of the filesystem of linux. My username is lyg, and I found there are some files with owner lyg in ...
1
vote
1answer
86 views

Configuring permissions with Bastille

I was using Bastille to improve the security of my OS. To set this software properly, it ask you several questions related to security rules and you respond it (Y-N). I'm stuck at this question that I ...
0
votes
1answer
53 views

Why are many operations or commands in Ubuntu not allowed normally when you can just do the same thing by typing sudo?

What purpose does this server when bypassing is as easy as typing sudo? Forgive the naivety here but I am a rookie and I'm sure there has to be a good reason for this, and I'd like to know that.
1
vote
1answer
206 views

Deb Installation And Man In The Middle Attack

Is the deb installation process protected against Man In The Middle Attacks that would alter the install script? It seems if not, then it would be possible for a Man In The Middle Attack to place ...
3
votes
1answer
203 views

Can issetuid() be cleared for a child process? [closed]

I have a wrapper script A which is calling program B. A must be invoked as root so some initial setup can happen. After that, A calls setuid() and setgid() to reduce its own privileges, for safety and ...
9
votes
2answers
23k views

Can see samba shares but not access them

For the life of me I cannot figure this one out. I have samba installed and set up on the ubuntu box and on the Win7 box I CAN SEE all the shares I created. I created two users on ubuntu that map ...
2
votes
2answers
347 views

No user name/password required when exploring from live USB?

A few months back when I buggered up my netbook and then booted into it to get information from it using a live USB. (Thinking that was 10.10) When I was copy/pasting this to another USB at no time ...
1
vote
2answers
237 views

Prevent accidental low-level access (formatting) of system disk by root?

Is it possible to prevent accidental mounting and/or reformatting of a disk or partition by the root user during normal operation of a system? For example, this happened to me a while ago: Under ...
1
vote
1answer
655 views

Permission problems with Clamfs

been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these. But I am having permission troubles with a ...
1
vote
1answer
567 views

Setting up fastcgi on an Ubuntu server (socket file permissions issue)

I am trying to set up mod_fcgid on my server. Part of the requirement is that Apache needs to create a socket file for mod_fcgid. I specified the folder for Apache to write the socket data to: ...
12
votes
2answers
1k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...
38
votes
2answers
17k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...