Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
11 views

dpkg-sig produces no output

Installed dpkg-sig to verify a package - it produces no meaningful output, just "processing" and then no result either way (signed or not signed correctly). Example: $ dpkg-sig -c ...
3
votes
0answers
26 views

Kernel security levels in ubuntu

Is there any ubuntu equivalent of BSD Kernel Security Level? If yes, how can one change the security level?
1
vote
1answer
14 views

What is a (reasonably) secure and automated way to backup my mysql database using (any) free cloud/online services?

I have a mysql database that I use for personal devlopment. I would like to back-it up online using any free (in cost) online storage. (dropbox, google-drive etc...) I am assuming a shell script ...
0
votes
0answers
9 views

xubuntu suddenly asked me for my password to mount an USB flash disk. Is this normal?

It never asked for it before or after and this one time was after the flash disk was inserted in an untrusted computer. I don't remember the message exactly. Is it possible malware got on the flash ...
1
vote
0answers
20 views

Can i run apache 1 / 2 as root?

I am hoping someone can confirm if apache 1 and / or 2 could be run as root if the user wishes it? There are previous questions around this, where people say "no you don't want to do that" and don't ...
2
votes
1answer
35 views

Can malware enter Ubuntu?

I have a desktop computer with Window 7 system and Ubuntu (installed by my boyfriend). Last week when I shopped online on Win7, I accidentally caught Eye Perform ads in Firefox. I Google and found ...
0
votes
0answers
10 views

How do I add an existing ubuntu user to a new domain?

Our organization is making some changes in their security model and they have created a domain server with which each machine would be linked. For this, they have created a new user on my laptop which ...
0
votes
0answers
25 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...
1
vote
1answer
24 views

Locking down an apache server - Prevent '/' page from being visible to all

I first installed Apache as part of a ZoneMinder setup. I then added to the server with an ownCloud setup. All this is only accessible to LAN or to WAN-through-ssh and that part works great. I now ...
9
votes
3answers
441 views

sudo permission doesn't time out durring apt-get upgrade

Consider this: You type $sudo apt-get upgrade and get a list of things that need upgrading with a "Y\n" confirmation. before you can read the list, and type "Y" or "n", the phone rings, or your boss ...
0
votes
1answer
15 views

Can I make the Windows folder require a password to access it? [Edit/change or add flder and data]

Recently, I was thinking that while running wine an application that contains a virus can inject into the windows folder. I don't know if this is possible, but it would be nice to make the Windows ...
0
votes
0answers
22 views

How would I securely connect to a smartphone?

I have got Ubuntu 14.04 LTS and a smartphone with no brand name of any kind. How do I connect the smartphone to my computer securely? The OS is unspecified. it looks like android. I am worried ...
1
vote
1answer
33 views

launch ipython but not like root

ipython is launched like root (UID); ok, but I need that after ipython cann't run and don't allow, script/code that can gain root privilegies. eg I launch ipython, ok the UID is root. And in my ...
0
votes
1answer
20 views

Stateful Packet Inspection on Ubuntu?

By default Ubuntu doesn't have open ports (exceptions: Avahi and dhcp). Assuming that my system is connected to the internet by direct way (no hardware firewall used): If I am sending a UDP packet to ...
-1
votes
0answers
7 views

why do I encounter multiple authentication requests after a restart [closed]

why, after restarting Ubuntu 15.04,do i have to enter my password multiple times to authentication requests?
0
votes
1answer
26 views

Block all but one ip address

I need to allow access to only one IP address and block the rest, so I wrote the following: sudo iptables -F sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables ...
0
votes
0answers
7 views

Does installing WINE make a Ubuntu PC less secure? [duplicate]

Does anyone know if installing WINE on a Ubuntu PC make it more prone to security risks i.e. malware, virii, system security exploits, etc? I would like to know more about why it would or would not ...
1
vote
1answer
34 views

Why ntpd needs an open port?

On my Ubuntu system I have activated the 'Time Synchronization via Internet'. Because of that the ntp daemon gets started. What I don't understand: Why needs ntpd an open UDP port 123? Actually, I ...
0
votes
0answers
19 views

How do I compare my openssl version with non-ubuntu openssl versions?

I have an ongoing problem where every time an openssl vulnerability is found, the announcement documentation tells me what versions of openssl are safe -- but ubuntu doesn't actually use the same ...
0
votes
1answer
34 views

What does these logs means? (DHCPREQUEST)

I'm using Ubuntu 14.04 LTS as my OS. For safety purposes, I'm always checking the logs to see any strange thing. Today, I have found something that (probably) never happened to me: Jun 11 23:33:59 ...
1
vote
1answer
32 views

Suspected rootkit, what should I do?

I inherited ubuntu 12.4 server and I want to check it for possible rootkits/modifications. Is there a way to test all executable/library files for modification (test if currently installed files are ...
0
votes
1answer
30 views

How to deal with this untrusted program

The program is IPFS. I do not fully trust the program, how should I keep it from making changes to my system outside of its designated folders?
0
votes
0answers
42 views

Password popup on USB unplug/replug “Authentication is required to change your own user data”

After upgrading from 14.04 to 14.10 when I unplug and re-plug a USB mouse (or switch keyboard/monitor/mouse with a KVM switch.) an authentication popup dialog appears asking for my password saying ...
0
votes
0answers
14 views

virtualization and security vis PCI DSS security

I have a couple questions about the effect of virtualization and the security of both the host and guest systems. The OS on both is Ubuntu server 14.04. I opted for use of Oracle's Virtualbox. I ...
0
votes
0answers
26 views

Failing PCI audit

I am Running Ubuntu 14.04.2 with Apache as a reverse proxy the server is fully patched and I am getting the following information when I use www.mynpcdata.net to scan the system. I have no idea if ...
1
vote
1answer
54 views

What are the features in Snappy Ubuntu that make it more secure than the normal Ubuntu?

I am thinking of using Snappy Ubuntu for IoT application. Security is important in IoT. What is the difference between Snappy Ubuntu and the normal Ubuntu that makes Snappy more secure compared to ...
0
votes
0answers
25 views

Do I have all the security benefits of Ubuntu if I install it on an android tablet?

Background: I will go traveling and need a small computer to check things, do banking, book flights and write. I want Ubuntu on it to have a secure, save and stable environment (as I have it on my ...
0
votes
0answers
13 views

Wireless network connection won't stay secured

I set my wireless connections with WPA & WPA2 Personal Security & a password. Every time I shut down & come back later those settings are gone & my network connection is unsecured ...
0
votes
1answer
23 views

How to exclude a specific folder from search in Synapse?

I added excluded folder to Security & Privacy settings and I followed this instructions but all of them seem to be working only when using Unity Dash search. Inside System and Home Dir. I could ...
2
votes
2answers
34 views

When would my application need to run with privileges?

One way of making sure an application is less prone to attack is to make sure it runs with the least privileges required (user mode preferred). I've only usually programmed for Windows using the .NET ...
1
vote
1answer
268 views

can windows virus affect Linux machine through wine? [duplicate]

When we use wine on Linux PC windows Virus can affect folders of wine? I think may be not; But I still Confuse about that. What is accurate answer? Wine is emulator of windows then some question ...
0
votes
1answer
52 views

Ubuntu Phone prevent text messages from lock screen

On my Aquaris Ubuntu Phone, text messages quickly pop up on the lock screen. As I consider this a serious security issue, is it possible to hide any messages from the lock screen? Thanks for any ...
0
votes
1answer
24 views

Unresolvable problem [duplicate]

An unresolvable problem occurred while initialising the package information. Please report this bug for the 'update-manager' package and try to include the following error message: 'E:Malformed line ...
2
votes
0answers
117 views

Could not load host key: /etc/ssh/ssh_host_ed25519_key in /var/log/auth.log

I have an Ubuntu 14.04 instance running on AWS. I was browsing the auth logs (/var/log/auth.log*), and noticed the following line appearing: Could not load host key: /etc/ssh/ssh_host_ed25519_key ...
0
votes
0answers
64 views

How to encrypt dual-booted Xubuntu?

I'm running a dual-booted Windows and Xubuntu system. I need full partition encryption, but only on the Xubuntu side. Is it possible to set it up without loosing any data? Which method is the safest ...
3
votes
1answer
61 views

How to show all files created on a specific date

On 16/05/2015 at 17:18 I visited a malicious website. And I suspect a drive-by-download, so I want to check my machine to see since that time in order of creation which files have been created or ...
0
votes
0answers
38 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
1
vote
2answers
61 views

What is this and how can this happen? Is this a security issue or can it be a virus?

From the last 3-4 days, my laptop has started becoming much laggy when I'm working on Android Studio or if it is just running in the background. So, today again I was working in Android Studio. My ...
2
votes
1answer
41 views

How to enable unhide in rkhunter

I have installed rkhunter with: sudo apt-get install rkhunter And even though I have enabled all test, when I run: sudo rkhunter --check --sk If I check in the log file, I see this about the ...
0
votes
0answers
33 views

Upgrade hardware enablement stack but retain kernel

Ubuntu 14.04.01 According to official documentation, upgrading the hardware enablement stack in Ubuntu to utopic-lts upgrades the kernel and xorg. I only want to upgrade xorg to correct a display ...
2
votes
1answer
31 views

Installing Tripwire

I just installed a fresh version of Ubuntu 15 and while I installed it I did not connect to the Internet. I have read you should install tripwire first thing after a fresh install and before you even ...
2
votes
1answer
85 views

Mumblehard Malware on my Server?

this morning, I watched a monthly webinar about IT-Security. One of the actual topics was the malware "mumblehard". This malware makes your server to a part of a botnet and sends spam via email. The ...
1
vote
0answers
31 views

Cannot download security updates in Lubuntu 14.04 LTS

Software Updater offers Security Updates--Ubuntu Base--61.9MB. I click Install now and authenticate. Screen shows "Failed to download package, check your internet connection'. There is no problem with ...
0
votes
0answers
102 views

Is this a security threat (failed SSH login as root)

I was checking the /var/log/auth.log and I found it's full of these two paragraphs May 6 07:42:12 mypc2 sshd[4489]: Failed password for root from 221.229.166.29 port 36998 ssh2 May 6 07:42:18 ...
3
votes
1answer
47 views

Is running packages from Ubuntu universe more risky than running the same packages on Debian? [closed]

I am running Ubuntu LTS Server. Are there any concerns with security patching of universe packages? I mean am I in risk of running vulnerable system if having universe packages when compared to the ...
0
votes
0answers
64 views

/var/cache/apt/apt-file/gb.archive.ubuntu.com_ubuntu_dists_vivid-backports_Contents-amd64.gz: PUA.File.Exploit.CVE_2012_1461 FOUND

I recently scanned my machine with ClamAV (using the latest virus definitions) with this command: sudo clamscan -r --detect-pua --infected --bell / And this was one of the outputted results: ...
1
vote
1answer
420 views

.android Folder and adbkey Files

Today I discovered a folder in my home directory with the name ".android". Inside the folder are just two files, "adbkey" and "adbkey.pub". I have searched around and have found out that adbkey.pub ...
0
votes
0answers
9 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...
1
vote
1answer
48 views

Set password security with pam.d (urgent homework)

I am trying to change the password security check. I would like to set rules for the password when adding a new user. Here is the content of my /etc/pam.d/common-password file: password ...
1
vote
0answers
21 views

How do I close Chrome when entering standby or hibernate?

If I leave Chrome open, it keeps me logged into my sites even during standby, so the only defence I have is my Linux password. I would like to have Chrome shut down on standby or hibernate, and then ...