Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
20 views

how to install mod_security apache2.4

I was looking at my logs yesterday, when I saw a bot roaming folders I have in my robots.txt file. I tried to block it with a rule in my UFW firewall, but this did not keep them out. So then I was ...
0
votes
0answers
10 views

Restrict users ports

How could I go about restricting specific users access to ports based on a whitelist based system. I heard it can be done with SELinux (I do have it installed), but I haven't been able to work out ...
1
vote
1answer
2k views

ShellShock - bash already updated?

I'm trying to fix this new ShellShock bug on my PC (running Ubuntu 14.04). From what I've gathered, the simplest way to do this is to just update bash via the terminal (I've tested my system for the ...
0
votes
1answer
180 views

shellshock vulnerability and super user

can shellshock vulnerability execute somehow commands with superuser permissions? And if yes, from where/how? It is possible to be executed commands from cgi yes, but is it possible to get executed ...
1
vote
1answer
643 views

How do I know if my system is vulnerable to the ShockShell vulnerability? [duplicate]

The recently discovered ShockShell vulnerability affects many Linux and Mac systems, because they are using the vulnerable BASH shell. How do I know if I am vulnerable to this attack and how do I ...
2
votes
2answers
157 views

CVE-2014-6271 over ssh example attack?

I've been reading about the CVE-2014-6271 bug on lots of pages, but I'm still not able to understand how exactly is it possible to exploit it over ssh. From all I've read, I couldn't find an example ...
0
votes
0answers
124 views

How do I upgrade from 12.10 on a DigitalOcean droplet?

The recent ShellShock exploit has prompted me to upgrade my Ubuntu 12.10 server, as I cannot upgrade bash on it (I receive 404 errors on apt-get-update (somebody else with a similar issue)). I opened ...
1
vote
0answers
344 views

How to Patch for Shellshock [duplicate]

So, in light of this closed thread, and this article, how can we patch for the shellshock bug/exploit/vulnerability for currently supported Ubuntu versions? 13.10 and 14.04?
118
votes
5answers
74k views

What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?

Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
4
votes
2answers
2k views

CVE-2014-6271 bash patch trouble

I have a Ubuntu [EDIT] 12.04.4 LTS server that is vulnerable to the recent bash remote executable exploit. Ubuntu says they have released a patch here. I have run a sudo apt-get update && ...
0
votes
0answers
15 views

rootkit hunter found suspect files

I recently run rkhunter and found 9 suspect files detected, why curl ,dpkg show warnings as shown in the image below what should i do to remove those warnings?
3
votes
1answer
67 views

ClamAV found infected files on Ubuntu server, what do I do now?

I checked the Ubuntu server using the command clamscan -r. I don't know whether or not the files were cleaned or deleted. This is a screenshot of the results: I'd like to know if these files still ...
0
votes
0answers
25 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
2
votes
2answers
102 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
0
votes
1answer
43 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
0
votes
0answers
17 views

How to avoid chrome store password in seahorse?

I am very concerned about the unencrypted passwords saved by chrome in seahorse. This equipment is shared and used by several people, so any user with the root password can change my user password ...
0
votes
0answers
29 views

Which effective security and antivirus programs are most popular? [on hold]

As the question leads, is there A program that verifies secure settings are on for Linux, and/or if there are signals of security problems? Is there a solid anti-virus that can perform one-time ...
0
votes
1answer
38 views

how to verify that sbin/init isn't infected?

for sometime chkrootkit has been showing sbin/init as being infected with SuckIt rootkit. early this year when the warning first appeared a quick google search indicated that it was most likely a ...
0
votes
1answer
19 views

How do I report an Ubuntu Software Center “Listing” problem?

How do you report a possible security risk to users in Ubuntu Software Center? There is two game apps in the Ubuntu Software Center called "Karts" and "Kart 1000..." Both: - Listed as free - But the ...
0
votes
0answers
18 views

Setup Webgoat on ubuntu 14.04 with lamp server

Can any one give me the breif instructions for how to install Webgoat on Ubuntu 14.04 (not a server) step wise I am facing problem with setting java_home variable to java 1.5 jdk
0
votes
0answers
17 views

Ubuntu 14.04 installation permission denied from HDD & external HDD

Title is self explanatory sadly; had no luck after getting past the security (for now) and the same from my Samsung external HDD Desperate trying to get this to work but no luck except on a virtual ...
1
vote
0answers
15 views

What kind of access flash has to our systems?

It seems like there is major security issue found in flash every other week or so. There was another one just yesterday. This and being closed source, I can't help but wonder, what kind of access it ...
0
votes
0answers
20 views

Allow one process access to /dev/uninput without completely compromising security

Steam In-Home-Streaming was turned back on the other day. This allows you to play games being rendered on one computer on another computer (commonly playing games on a TV/Media Centre that are being ...
-1
votes
0answers
11 views

can the webcam be restricted by a password?

Is it possible to to make using the webcam by applications restricted to the root? i mean like how one can change permissions for files using chmod. Or how you are asked for the password every time ...
0
votes
0answers
10 views

Questions about how malwares might operate under wine [duplicate]

a recent scan by clamav found that a few exe files in the WINE directory are infected with a trojan (called Ratnim?). A have a few specific questions on what a windows malware can do under linux. 1) ...
1
vote
0answers
40 views

Blocking HTTP requests without Host header using mod_security2

In my Apache configuration, I want to allow only Host header based vhosts. That is, I'd like to block any traffic by IP address only. I have mod_security2 installed, but I am only using the default ...
0
votes
2answers
59 views

What's the status of encfs?

Is the encfs project no longer maintained? It seems the last update 1.7.4 was released on November 18 2010. In a security audit several weaknesses have been identified, but no updates have since been ...
0
votes
1answer
29 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
0
votes
0answers
16 views

Ubuntu servers protection

Here is my needs : i need to protect data from being stolen on servers and Those servers are not physically secured. First i just wanted to base security solution on root password protection but ...
1
vote
1answer
64 views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
1
vote
2answers
88 views

How to access locked hard drive?

I have a hard drive with an old 12.04 server install and a data partition on it. I have the hard drive hooked up to my current desktop using a usb to sata adapter with external power supply. I am on ...
0
votes
1answer
21 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
47 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
0
votes
0answers
29 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
1
vote
2answers
33 views

Is this a security risk/concern?

According to: http://wiki.secondlife.com/wiki/Linux_Viewer#Installing_and_Running The Second Life Linux client entirely runs out of the directory you have unpacked it into - no installation step ...
0
votes
0answers
33 views

Nessus SNMP security warning

I ran a Nessus scan on my Ubuntu 14.04 machine. I received the following: High: SNMP Agent Default Community Name (public) Description: It is possible to obtain the default community name of the ...
0
votes
0answers
12 views

problems gaining root access and installing software due to authentication. [duplicate]

I have a laptop that had ubuntu installed, however though many ownerships, the pass word is lost, anyway of removing this absolute shite of an install block. every time I try to do something it asks ...
0
votes
1answer
90 views

Connect to my College's WPA from Ubuntu 14.04 LTS [duplicate]

I have Ubuntu 14.04 LTS, and am running it on a Sony Vaio VGN-CR12OE. It is the only operating system. I am trying to connect to my college's WPA WiFi. My settings for this WiFi connection are as ...
0
votes
2answers
131 views

What do LISTEN and ports mean in netstat? [closed]

I have been monitoring my system lately and I have found some strange things are running on my system. Can anyone please explain what they are and why same program use several processes? Output of ...
1
vote
2answers
67 views

Do logins by the gdm (or lightdm) user in auth.log mean my system is breached?

Please look at this auth.log (from Ubuntu 14.04) I have provided and tell me who this gdm user is and why there are all these unauthenticated logins? I am freaked out; please help! Here's the ...
1
vote
1answer
22 views

How do you detect file changes

Since Linux is vulnerable to a number of similar vulnerabilities as windows. I'm trying to find a daemon that catalogs and alerts me/user of any and all file changes as well as file additions. Is ...
2
votes
1answer
40 views

How to prevent data from being written into a directory?

Or: How to make a directory write protected, for all users until unlocked again?
1
vote
2answers
41 views

What lines should be commented out in my sources.list file?

I have just updated from Ubuntu 12.04 to 14.04 last weekend. I haven't downloaded any extra programs as of yet. I checked my sources.list file and it has the following lines in it: deb ...
0
votes
0answers
11 views

Locking all setting

Is there a way to lock all the system setting on ubuntu so people cant change them without permission? example removing printers. I am taking care of a schools computer room and teachers/students are ...
0
votes
0answers
36 views

How can I lock Seahorse GnuPG Keys?

since not long ago I've started to use seahorse to manage my encryption keys, and at the moment I'm finding myself a bit baffled about what it appears quite a security hole of the system... In fact, ...
0
votes
0answers
11 views

Prevent Network Injection

I read this article: http://gizmodo.com/pro-hackers-could-be-spying-on-you-through-youtube-1622367382 I'm running Ubuntu 14.04. How can I prevent network injection of my internet browsing traffic? ...
1
vote
2answers
65 views

What should I do to avoid my roommate from changing my password through using system recovery mode .?

He did this last time when I left my laptop at room. Opened the system recovery mode from advanced Ubuntu options and changed the password using 'passwd usrname ' command.Is there anything I can do ...
0
votes
1answer
43 views

Are there really security risk when running Wine? [duplicate]

I remember reading somewhere that since Wine's job is to pretty much emulate Windows so that you can run Windows programs, it puts a risk on your Linux machine since Windows Viruses can also run ...
0
votes
1answer
40 views

I have some questions about Firewall [closed]

So I am pretty new to Linux (With the exception of Android), and being use to the old ways of Windows pretty much all I had to do for Firewall was turn it on and forget about it. However with Ubuntu ...
1
vote
2answers
40 views

Don't remember PGP passphrase until end of session [duplicate]

To use my PGP key I always have to enter my passphrase. But as it happens, I have to unlock the key only once for every session. The desired behaviour would be, that I have to unlock the key each time ...