Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
1answer
18 views

How can I find the database directory of Thunderbird?

I want to automate loading a security module in Mozilla Thunderbird. For this I should know the application directory so that I can edit the database. In Windows we have a function SHGetFolderPathA()...
0
votes
0answers
5 views

cap_immutable and coreutils

somehow somewhere this got deleted and it is a viable question, so Im going to ask it again. CAP_IMMUTABLE is a coreutils flag that removes explicitly permissions given to root in such a way to ...
0
votes
1answer
10 views

SFTP security: Can't verify the identity of an IP

When I connect to sftp://10.116.202.136 via Nautilus, I receive this message: Can't verify the identity of “10.116.202.136 (10.116.202.136)”. This happens when you log in to a computer the first ...
0
votes
0answers
25 views

AppArmor profile

Can someone audit my apparmor qbitorrent profile? I'm sorta new to apparmor and don't want to give away more permissions than necessary. Using Xubuntu 15.10. #include <tunables/global> /usr/...
5
votes
1answer
32 views

Keep computer locked in a view-only state

Is there any way to keep my computer locked in a "view-only" state? I want to be able to see the screen, but if I want to control the computer, I'll have to enter my password. I cannot move the ...
7
votes
1answer
744 views

Is “LD_LIBRARY_PATH” a security risk?

We know ld.so searches for libraries in directories specified by the environment variable $LD_LIBRARY_PATH, but regular users could run: export LD_LIBRARY_PATH=dir1:dir2... They can save infected ...
1
vote
0answers
29 views

12.04 - Cannot unlock user account although it is an admin account

I am having problems similar to these, but in this post no one managed to solve it. How do I unlock system tools such as users and date and time This issued is bothering me a lot, because it also ...
0
votes
0answers
12 views

Restoring backup from another installation and myy Encryption Password for Dejadup does not work. Why, and what do I do?

I recently reinstalled Ubuntu. I was running Ubuntu MATE and decided to scale down to a stripped down version. I backed up all of my files to an external HDD and took a picture of my passphrase so I ...
-2
votes
0answers
23 views

i need help about installing parrot security os tools in ubuntu 14.04

As tittle says i need to install all tools for pentesting which used in parrot security OS ( http://parrotsec.org ) i am using ubuntu 14.04 i386 want to install parrot security os's tools on ubuntu ...
1
vote
1answer
32 views

Suspect of keylogger/screen logger in Ubuntu machine [closed]

Seems my Ubuntu was hacked by a site while browsing. Is there a way that I can remove any logging software that may have been installed, or identify if a threat is present?
13
votes
3answers
849 views

How to disable HTTP referrer in Firefox?

I feel that the HTTP referrer is a violation of my privacy (the HTTP header field that identifies the webpage you just came from which was linked to the webpage you are going to) and I understand that ...
3
votes
1answer
42 views

How do I prevent root access from all TTYs

I am trying to secure root access on my Ubuntu servers (running 14.04 desktop and 16.04 server). I would like to disable root access on all TTYs except TTY1. I know this can be done by editing /etc/...
6
votes
1answer
140 views

What testing is done to make sure no packages in the repos have malware?

How is it ensured that a trusted user can't compile a package with malware and place it in the universe repo.
0
votes
0answers
55 views

Video surveillance camera onvif

I have an IP camera with ONVIF 2.4 protocol(http://www.pni.ro/sisteme-securitate/supraveghere-video/camere-cu-ip/camera-supraveghere-video-pni-ip10mp-720p-cu-ip-de-exterior.html , the page is in ...
0
votes
2answers
31 views

If I only use when needed, does enabling the “su” account present dangers? [duplicate]

So I'm the only the user of my computer, and I eventually figured out how to enable the "su" user on my account with a password (really quite simple actually), just in case I ever needed to do ...
3
votes
1answer
113 views

URL for Ubuntu 16.04 security updates

Which URL is recommended for Ubuntu 16.04 (Xenial Xerus) security updates? deb http://security.ubuntu.com/ubuntu xenial-security ... or deb http://archive.ubuntu.com/ubuntu xenial-security ......
4
votes
0answers
26 views

Signature-based rootkit scanner?

Currently the only rootkit scanners I know of have to be installed on the machine before the rootkit so that they can compare file changes etc (e.g.: chkrootkit and rkhunter), but what I really need ...
2
votes
1answer
17 views

How do I know if the programs used in PlayOnLinux can be safely installed?

I'm seeing this large list of mostly commercial programs there and I'm wondering where they came from, if I run the risk of compromising my system by installing any of them.
1
vote
1answer
22 views

Security - Apache's websites folder inside Home folder

Is it secure to change DocumentRoot path to some folder in user's Home directory? Or it's better to leave it be and using a shared group between your user and Apache server as you can see it in the ...
0
votes
0answers
21 views

Encryption enabled on Ubuntu Snappy Core

Is there any kind of encryption enabled by default in the latest Ubuntu Snappy Core release? Is the home dir encrypted? or other locations?
1
vote
0answers
26 views

Why doesn't the admin always run an admin terminal? [duplicate]

If I'm the admin, is there a benefit to using sudo in front of every command that requires it instead of just turning on root access with sudo -i and not worrying about it?
0
votes
0answers
19 views

Running user code in extremely restricted folder

I am trying to set up a web server for students. Students will upload a cpp file, which will then be compiled and tested. I need to do this through a web interface, so students won't have their own ...
4
votes
1answer
53 views

What is the danger of running untrusted softwares as a normal user

Sometimes I have to use some propriety softwares which I don't trust in them and in their behavior. Lets say we installed a propriety software in /opt/software, then we run it as a normal user (...
0
votes
0answers
8 views

access and security keypair download

is there a way to download/export a keypair (not import) that is showing in the security section, or at least a way to access it? We need it to ssh into the boxes. Thanks,
0
votes
2answers
54 views

How safe is luks?

I constantly think about encryption, and how safe it might be. The general information I have tends to be secured by passwords that range in the hundreds with random key combinations in between random ...
1
vote
0answers
26 views

How are snap applications being protected?

How are snap applications being protected when we look at different aspects? Runtime protections? Memory protections? Differences to ordinary processes? Differences to VMs? Storage protections? ...
0
votes
0answers
16 views

Prevent Outbound IP Address spoof

We have multiple computers running Ubuntu Desktop, all connected to same Router. Using UFW firewall, all inbound and outbound ports are blocked on these Desktops, except for only one outbound port (...
0
votes
1answer
34 views

Add a repository for security testing

I want to use some security tools because I study security (A total beginner). I tried adding the repos of kali, and install some security tools from there, the security tools works great but I had ...
1
vote
2answers
68 views

Can you empty cached items from memory without needing to close Firefox?

I currently have Firefox set up so that a persistent cache is not stored after closing Firefox. I only have the memory cache enabled which it empties when Firefox is closed. Sometimes I need for ...
0
votes
0answers
42 views

How to use iptables to prevent repeated attacks on port 80?

There a is massive attack on port 80 on my Server i try to use iptable This way to banned attackers iptables -A INPUT -s 212.252.96.128 -j DROP but there are too many IPs attacking how to prevent ...
0
votes
0answers
46 views

username/password. [duplicate]

I just updated ubuntu from 14.04 to 15.10. Now when I boot up ubuntu asks for username/password. I entered what I thought was correct, but the system says it is incorrect. I can't get past this - is ...
0
votes
0answers
29 views

ubuntu feature?

I started receiving discourse on my display re: icc profile file updates relating to the display. I was nowhere near the software update manager, just doing some general surfing. I started getting ...
0
votes
1answer
166 views

Why I can't login without a password in my encrypted account?

I have an encrypted disk, and I get asked for a password before reaching the login prompt, then again to log in. As I have only a single user account, the password to which is the same as my disk ...
1
vote
2answers
53 views

What are the dangers of using an unsupported Ubuntu version? [closed]

Non-LTS versions of Ubuntu only receive security updates for up to 9 months after their release (for Ubuntu 15.10, until 07/2016) and are not recommended for use after the expiration of the support. ...
29
votes
4answers
4k views

How to block input to webcam?

When I was running Windows 7 on my Lenovo machine there was a pre-installed Lenovo utility which would make it so that anyone trying to see what my webcam sees would instead see a still image of a ...
1
vote
0answers
41 views

Security of JBOD vs RAID while there is no backup

I have some large amount of data (~40 TB) consisting of small files. The data is currently stored on JBOD. Because the data is not super important and I cannot afford the needed disks there is no ...
2
votes
1answer
65 views

i3wm screen locking security issue

I am using i3-wm on Ubuntu 16.04. I am locking the screen using dm-tool lock, and it looks good, but I noticed you can circumvent the lock screen by switching a TTY (Ctrl+Alt+F1) and then switching ...
0
votes
0answers
29 views

Harden Ubuntu Server 14.04

I have a personal server I primarily use for downloading media. Besides hardening ssh, I was wondering if there are any other preferred means to securing the rest of the server, virus', so forth and ...
0
votes
0answers
27 views

Ubuntu 14.04.4 LTS: Firewall - block countries

I'm having trouble with my VPS. IPs from both China and Russia is trying to brute-force my VPS (not like there's anything interesting), and it's annoying. I'd like to ask, if there's any way I can ...
0
votes
0answers
13 views

How to blacklist certain commands from aliasing? [duplicate]

There are certain important commands I use a lot such as sudo, cd and ls which if malicious aliases were created of could cause some major problems, especially with the first listed. And I know that ...
0
votes
0answers
51 views

Could I have gotten a virus from this?

So I was browsing a thread in 4chan that had dirty pictures. Yeah haha pervy whatever. There was a link to a page that the user said I could use to download a dirty video. I didn't think it was ...
3
votes
0answers
78 views

Is my Ubuntu Desktop under attack?

I am currently facing random freeze of my Ubuntu(16.04) desktop and screen fills up with the garbage pixels. I even cannot start command line using Ctrl-Shift-F1. Every time I have to manually do the ...
0
votes
1answer
67 views

Unable to clear recent files from history

I run a 64 bit version of Ubuntu 15.04. Often when I delete recent history using the Security and Privacy application, I can still see the files in the Unity lens when I press the Windows key (both ...
1
vote
1answer
26 views

How to audit file created under a specific path?

I would like to know if there is an audit tool I can use to monitor the file created under a specified folder? I would like to know the user and program used (ftp, ssh , php) to create the file.
0
votes
0answers
15 views

Can I configure unattended-upgrades to reboot only for urgent issues?

This is how to configure unattended-upgrades to reboot the machine if needed: Unattended-Upgrade::Automatic-Reboot "true"; (in /etc/apt/apt.conf.d/50unattended-upgrades ) But is there no way to ...
0
votes
1answer
68 views

Mosquitto Configuration on 16.04

I installed the MQTT mosquitto package from the standard repos on a fresh 16.04. I'm confused about where to place/edit the conf file for MQTT to work with a username and password. There is a conf ...
0
votes
1answer
89 views

virus threat detected in /usr/lib/shim

I recently ran a virus scan with clamtk and was pleased that not much came up except for one system folder: /usr/lib/shim with the following files being flagged: fallback.efi.signed MokManager.efi....
6
votes
1answer
111 views

Torrents blocked by ISP in Ubuntu but on Windows works fine

I have a dual boot system: Ubuntu and Windows. When I use Transmission for torrents, it doesn't download anything and in the browser torrents sites are blocked, But if I do same thing on Windows in ...
-2
votes
2answers
33 views

Replace Windows 7 Entirely W/ Ubuntu & Security Feature Allows Wildows Files? [duplicate]

If Ubuntu supports files from windows, doesn't this defeat the "security" of Ubuntu? Obviously not a technie How to install and "replace" Windows 7 entirely, and get Microsoft out of my desktop. ...
0
votes
0answers
33 views

x11vnc configuration with SSH

I have followed after those steps of setting up the x11vnc, Run the following to install: sudo apt-get install x11vnc sudo x11vnc -storepasswd **yourVNCpasswordHERE** /etc/x11vnc.pass sudo nano /lib/...