Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
11 views

How secure is Ubuntu/Linux?

After doing some reading I've become very interested in Ubuntu's (or maybe all Linux distro's?) security. I've read in a couple places there's a "built in" firewall and it's generally more protected ...
0
votes
0answers
11 views

Lock the position of desktop icon 14.03

I was wondering if there is a way to prevent a user from moving a desktop icon but it still be usable? I am on ubuntu 14.03 32 bit. Any help wnd suggestions are appreciated. Thanks.
4
votes
4answers
307 views

Check security mode of connected Wi-Fi network

How do I check the security mode of the connected Wi-Fi network, using the command-line interface? I want to know whether the current Wi-Fi connection is protected with WPA, protected with WEP, or is ...
2
votes
0answers
74 views

Someone somehow gained access to my system and ran malicious software off of it

I run game servers off of my Ubuntu 12.04 dedicated server and I just got home from work to find out that someone somehow gained access to my dedi, ran a malicious gameserver from it that installed a ...
2
votes
2answers
35 views

How to enable Secure Boot without issue?

I read here that it is essential to have Secure Boot enabled: However I find that when I enable Secure Boot, it changes it so that systems can boot with UEFI boot, but not Legacy, it also disables ...
1
vote
1answer
38 views

how to scan my wifi connection?

I used to do it with SoftPerfect Wifi Guard, but 1.0.6 new version isn't allowed for Linux and I can't find previous version 1.0.5. The target is identify all devices connected into my wireless ...
0
votes
0answers
5 views

istartsurf on chomium

A few days ago I noticed that I'd got the istartsurf malware in Chromium on my Ubuntu laptop despite being careful of which software I'm installing, but anyway. So I reinstalled Ubuntu on my laptop ...
0
votes
0answers
21 views

Locked down guest account

I need to setup a computer so a user can surf the internet and that's it. I want an admin account to make changes, apply updates, ect. I would like the guest account to be locked down with no access ...
1
vote
1answer
56 views

Is Ubuntu spyware (referring to article by Richard Stallmann)? [duplicate]

I received a link to the article "Ubuntu Spyware: What to do?" by Richard Stallmann which advises the reader not to use or recommend Ubuntu for several reasons: It does not meet all four freedoms of ...
0
votes
0answers
10 views

Best way to secure a virtualised ubuntu running apache 2

I do front end web development for clients and have a local webserver that acts as my production/staging ground I have a Windows 7 machine that has Ubuntu installed within a virtual box, Ubuntu is ...
1
vote
0answers
5 views

Challenge-response local user login

Is it possible in Ubuntu, or in any Debian based distro, to use Digital Signatures with a Challenge-response setting for local user login(I don't mean ssh), instead of a password ? Storing the key on ...
0
votes
1answer
27 views

What is this file *(1147.desktop)? [closed]

A link ("Link to INBOX>1147") appeared on my desktop (lower right corner, partially hidden) Its properties are unknown, as are its permissions. It evidently points to a text file on my desktop no, in ...
0
votes
0answers
7 views

It it safe to keep a PamUSB enabled usb drive always connected?

I'm wondering if it's safe to the usb drive always connected, some program could sudo without my permission. It there a way to receive some notifications about pamusb's authentications? Thanks in ...
0
votes
0answers
24 views

Possible security issue? (syslog connect messages)

I was just looking through my syslog and noticed theese lines repeating over and over almost endlessly: Aug 25 16:52:56 xxx-xxx-xxx-xxx postfix/smtpd[9572]: connect from ...
1
vote
2answers
26 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
0
votes
1answer
25 views

compiz screen lock can be bypassed by `metacity --replace`, how to protect against it?

While compiz is running, open a terminal and type: sleep 10;metacity --replace now lock your screen and wait, you will see compiz end and metacity comes in, in an unlocked state. What I expected was ...
1
vote
0answers
35 views

logrotate broken after security breech

I downloaded a PDF which evidently had Linux malware, which executed when I ran the PDF through firefox, or atril, Im not sure which. I figured it out shortly after running clamav, and I believe ...
0
votes
4answers
56 views

Is “Ubuntu Server 14.04.3 LTS + LAMP” production-ready? [closed]

Installing a fresh copy of Ubuntu Server 14.04.3 LTS and then: $ sudo apt-get update $ sudo apt-get upgrade $ sudo apt-get install lamp-server^ Is this configuration production-ready in terms of ...
0
votes
1answer
45 views

files where break-in attempts are logged

Ubuntu Server with Apache, hosting multiple websites and mail-servers. Besides /var/log/auth.log, are there other places where break-in attempts are logged? Context: I used to have a lot of break-in ...
5
votes
2answers
437 views

how to find out the address pool for DDOS Attack IP addresses

Of recent I have been experiencing DDOS attacks against my mail server with a series of IP addresses. I have been blocking these IP addresses one by one using the firewall. The process was and is ...
0
votes
2answers
31 views

Problem with Login password [duplicate]

when ever I'm logging in, I have set a login password for my account but it is logging in automatically with out asking me for a password. Please tell me what I can do to get rid of this problem.
0
votes
0answers
9 views

What programs the USN covers? (besides Ubuntu)

I'm using Ubuntu 14.04 LTS, and I'm always taking some looks into the USN (Ubuntu Security Notices), and when there's something new, I make sure to install the patch as fast as possible. But today, I ...
0
votes
0answers
25 views

Webcam light ON suspiciously

Today after I just finished my skype chat with my parents, I noticed that my webcam light was on. I closed skype and then classes all browsing or internet related applications but it was still on. I ...
-2
votes
1answer
64 views

Is ubuntu really more secure than windows [closed]

For years i am considering ubuntu(or any linux distro) far secure than windows But when i read this most most vulnerable operating systems I couldn't belive it thant's why isearched again and i got ...
0
votes
2answers
34 views

Is there a way to make your computer automatically lock the screen?

Just wanted a way to have my computer lock if I walk away from it it and forget to lock it manually.
0
votes
0answers
21 views

How to prevent people from using 'ro recovery nomodeset' [duplicate]

I really need a way to protect my grub menu from being attack by students who know to go to grub menu press 'e' and then change splash to ro recovery nomodeset. How do I protect that page from ...
0
votes
0answers
9 views

soft security camera webcam for the ubuntu (like iSpy for win) [duplicate]

have ubuntu security camera like iSpy of Windows?
-2
votes
1answer
56 views

Norton Products (on Ubuntu/Linux) [duplicate]

Do I need to use an anti-virus software with Ubuntu such as Norton?
0
votes
2answers
50 views

How can I prevent Firefox from accessing files outside of its .config directory?

A vulnerability in Firefox was disclosed today that allows an attacker to execute JavaScript in a "local file context", giving them access to the file system. In the wild, this was used to scan the ...
0
votes
0answers
20 views

LUKS encryption + USB dongle keyfile = if not plugged, disallow passphrase prompt?

My laptop is LUKS-encrypted. I put boot & keyfile on a USB dongle: if the dongle is not plugged at boot, you cannot enter linux. But when I dont plug the USB dongle (which contain the keyfile), ...
0
votes
1answer
29 views

How to block the use of apps from other users

How would I go about not allowing none-administrative users from using applications that I don't them to? I'm new to configuration files so please give me step-by-step instructions so that I don't ...
0
votes
0answers
27 views

Configuring strong firewall rules

How to configure strong firewall settings via ufw? All inbound settings set to deny and only specific outbound ports to be allowed. Will the following be good enough? ...
1
vote
2answers
33 views

SSH session alway active, what is it? Should I close it?

I've been trying to setup a server-> client local network with x2go. I have it working, sort of... but I don't know much about networking, SSH, etc -- so it's been a steep learning curve. I'm ...
0
votes
0answers
17 views

How do I lock specific apps from users?

I want to be able to lock down apps from my 'student' user and don't know, like I said in earlier post please give step by step instructions to do this. Thank you.
0
votes
1answer
28 views

heavy write to disk activity as soon as I turn on computer

Can someone tell me if something nefarious is going on? I recently had to wipe my drive (losing all my data) and do a reinstall. So, I've been using the new 15.04 for 3 weeks without incident. But I ...
0
votes
0answers
22 views

LUKS encryption, switch from passphrase to keyfile

Using LUKS encryption, I set it during the Ubuntu installation. I entered a passphrase. But now I want to use a keyfile and I dont manage to find the right process to. How can I make the switch ...
4
votes
1answer
48 views

Which unattended-upgrades system takes precedence and how?

I've just run into an answer that has made me question how the unattended upgrade system works. There seem to be at least two systems on my computer: unattended-upgrades with ...
2
votes
1answer
54 views

Security: Automatic updates - automatic or not?

I am using kubuntu 14.04.2 I have updates set to download and update automatically for where there are security updates - yet the security update for Adobe Flash was not automatically installed when ...
2
votes
1answer
67 views

Ubuntu 14.04 LTS Security?

[Ubuntu 14.04 on 2014 Retina MacBook Pro 15" using rEFInd] (ThomasW's Why is everybody so concerned about etc/passwd? link addresses my initial comments about accessibility to passwd and other files, ...
0
votes
2answers
24 views

Recovery ubuntu encrypted home

If someone gets physical access to my pc, mounts my ubuntu and changes my user password (e.g. in the shadow file). Will he be able to log into my account and decrypt my (encrypted) /home partition? ...
3
votes
1answer
80 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
30
votes
2answers
3k views

Why is everybody so concerned about etc/passwd?

Here is the content of my vagrant machine of this particular file: root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin ...
1
vote
0answers
29 views

Strange ping result?

I'm new here. I just would like how this is done? Here's the scenario of events: I was pinging randomly some no-ip adresses(i just imagine an adress and ping it) Every thing is fine, most of ...
0
votes
0answers
9 views

Setting up firewall for my hosting

I am having an Ubuntu 14 instance installed in Amazon Cloud. In there, I have setup apache2,tomcat7, and phpmyadmin. Any request to port 80 will be forwarded to the tomcat based java application. ...
1
vote
1answer
147 views

Does Canonical collect data about how I use Ubuntu?

Does Canonical collect any user data about me or my habits during my use of Ubuntu? And if so, how can I stop this data collection?
1
vote
2answers
51 views

Is sharing a mounted USB drive on Samba without a password a security risk?

At my low level of expertise, the only way I can share a mounted external drive from Ubuntu 14.04 to Windows computers in my house is to use the Samba GUI to share it, then edit smb.conf to add "force ...
1
vote
1answer
66 views

Ubuntu Server minimal package

What is the best why to install an Ubuntu Server image with the minimum possible of package ( no default, no extrat ) that can only allow ssh connection to it and nothing else.
4
votes
3answers
321 views

How to stop firefox from downloading files in public computer to its Home/Download folder?

I work in IT-department and we have a situation. We have public computers installed in city library and they are using Ubuntu 12 kind off kiosk operating system. People are opening and downloading ...
1
vote
3answers
258 views

Ubuntu 12.04, PCI, and CVE-2015-5352

PCI compliance will fail when the CVE-2015-5352 vulnerability is present. OpenSSH 6.9 fixes this vulnerability, but none of the supported versions of Ubuntu (12.04, 14.04, 15.04 and 15.10) have been ...
0
votes
0answers
163 views

virus in ubuntu 14.04 adware malware spyware…?

I am using Ubuntu 64 14.04. I have used Ubuntu for many many years, and today I got malware or spyware, although I don't really know what it is. I use chrome Version 44.0.2403.89 (64-bit) the latest ...