Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
15 views

How do I know if the programs used in PlayOnLinux can be safely installed?

I'm seeing this large list of mostly commercial programs there and I'm wondering where they came from, if I run the risk of compromising my system by installing any of them.
1
vote
1answer
21 views

Security - Apache's websites folder inside Home folder

Is it secure to change DocumentRoot path to some folder in user's Home directory? Or it's better to leave it be and using a shared group between your user and Apache server as you can see it in the ...
0
votes
0answers
12 views

Encryption enabled on Ubuntu Snappy Core

Is there any kind of encryption enabled by default in the latest Ubuntu Snappy Core release? Is the home dir encrypted? or other locations?
1
vote
0answers
25 views

Why doesn't the admin always run an admin terminal? [duplicate]

If I'm the admin, is there a benefit to using sudo in front of every command that requires it instead of just turning on root access with sudo -i and not worrying about it?
0
votes
0answers
18 views

Running user code in extremely restricted folder

I am trying to set up a web server for students. Students will upload a cpp file, which will then be compiled and tested. I need to do this through a web interface, so students won't have their own ...
0
votes
0answers
25 views

PCI compliance/scan company that supports Ubuntu? [closed]

We are starting a project in which we will need to scan and get PCI compliance certification for 4 nearly identical Ubuntu servers. I did some preliminary work on this last fall using Trustwave and ...
4
votes
1answer
51 views

What is the danger of running untrusted softwares as a normal user

Sometimes I have to use some propriety softwares which I don't trust in them and in their behavior. Lets say we installed a propriety software in /opt/software, then we run it as a normal user (...
0
votes
0answers
8 views

access and security keypair download

is there a way to download/export a keypair (not import) that is showing in the security section, or at least a way to access it? We need it to ssh into the boxes. Thanks,
0
votes
1answer
25 views

Best backup approach for a USB drive [on hold]

I'm currently using the grandfather, father, son approach to create backups of my everyday usb drive which I always carry around with me. The full drive is encrypted using dm-crypt and I use dd to ...
0
votes
2answers
38 views

How safe is luks?

I constantly think about encryption, and how safe it might be. The general information I have tends to be secured by passwords that range in the hundreds with random key combinations in between random ...
-3
votes
0answers
30 views

Can malware (virus, trojans, etc.) operate within Ubuntu which is not connected to Internet? [closed]

Pretty much sums the question. I have newest Ubuntu installed on a laptop which has a network problem, so can't install scanner either. Can malware (virus, trojans, etc.) operate within Ubuntu which ...
1
vote
0answers
20 views

How are snap applications being protected?

How are snap applications being protected when we look at different aspects? Runtime protections? Memory protections? Differences to ordinary processes? Differences to VMs? Storage protections? ...
0
votes
0answers
14 views

Prevent Outbound IP Address spoof

We have multiple computers running Ubuntu Desktop, all connected to same Router. Using UFW firewall, all inbound and outbound ports are blocked on these Desktops, except for only one outbound port (...
0
votes
0answers
25 views

Add a repository for security testing

I want to use some security tools because I study security (A total beginner). I tried adding the repos of kali, and install some security tools from there, the security tools works great but I had ...
0
votes
1answer
46 views

PSS software for Linux? [closed]

In order to control a CCTV camera, I have to install a software some recommended me PSS, Pro Surveillance System (Surveillance CMS software), which supports both analog and digital recorders. Dahua ...
1
vote
2answers
57 views

Can you empty cached items from memory without needing to close Firefox?

I currently have Firefox set up so that a persistent cache is not stored after closing Firefox. I only have the memory cache enabled which it empties when Firefox is closed. Sometimes I need for ...
0
votes
0answers
42 views

How to use iptables to prevent repeated attacks on port 80?

There a is massive attack on port 80 on my Server i try to use iptable This way to banned attackers iptables -A INPUT -s 212.252.96.128 -j DROP but there are too many IPs attacking how to prevent ...
0
votes
0answers
46 views

username/password. [duplicate]

I just updated ubuntu from 14.04 to 15.10. Now when I boot up ubuntu asks for username/password. I entered what I thought was correct, but the system says it is incorrect. I can't get past this - is ...
0
votes
0answers
27 views

ubuntu feature?

I started receiving discourse on my display re: icc profile file updates relating to the display. I was nowhere near the software update manager, just doing some general surfing. I started getting ...
0
votes
1answer
149 views

Why I can't login without a password in my encrypted account?

I have an encrypted disk, and I get asked for a password before reaching the login prompt, then again to log in. As I have only a single user account, the password to which is the same as my disk ...
1
vote
2answers
49 views

What are the dangers of using an unsupported Ubuntu version? [closed]

Non-LTS versions of Ubuntu only receive security updates for up to 9 months after their release (for Ubuntu 15.10, until 07/2016) and are not recommended for use after the expiration of the support. ...
-1
votes
0answers
29 views

administrative password changed after losing but now doesn't login

I did the recovery mode then root then after receiving authentication token manipulation error I did the mount remount then chmod 640 /etc/shadow then when I tried the recovery on root passwd '...
29
votes
4answers
4k views

How to block input to webcam?

When I was running Windows 7 on my Lenovo machine there was a pre-installed Lenovo utility which would make it so that anyone trying to see what my webcam sees would instead see a still image of a ...
1
vote
0answers
35 views

Security of JBOD vs RAID while there is no backup

I have some large amount of data (~40 TB) consisting of small files. The data is currently stored on JBOD. Because the data is not super important and I cannot afford the needed disks there is no ...
2
votes
1answer
50 views

i3wm screen locking security issue

I am using i3-wm on Ubuntu 16.04. I am locking the screen using dm-tool lock, and it looks good, but I noticed you can circumvent the lock screen by switching a TTY (Ctrl+Alt+F1) and then switching ...
0
votes
0answers
25 views

Harden Ubuntu Server 14.04

I have a personal server I primarily use for downloading media. Besides hardening ssh, I was wondering if there are any other preferred means to securing the rest of the server, virus', so forth and ...
0
votes
0answers
22 views

Ubuntu 14.04.4 LTS: Firewall - block countries

I'm having trouble with my VPS. IPs from both China and Russia is trying to brute-force my VPS (not like there's anything interesting), and it's annoying. I'd like to ask, if there's any way I can ...
0
votes
0answers
13 views

How to blacklist certain commands from aliasing? [duplicate]

There are certain important commands I use a lot such as sudo, cd and ls which if malicious aliases were created of could cause some major problems, especially with the first listed. And I know that ...
0
votes
0answers
48 views

Could I have gotten a virus from this?

So I was browsing a thread in 4chan that had dirty pictures. Yeah haha pervy whatever. There was a link to a page that the user said I could use to download a dirty video. I didn't think it was ...
3
votes
0answers
63 views

Is my Ubuntu Desktop under attack?

I am currently facing random freeze of my Ubuntu(16.04) desktop and screen fills up with the garbage pixels. I even cannot start command line using Ctrl-Shift-F1. Every time I have to manually do the ...
0
votes
1answer
57 views

Unable to clear recent files from history

I run a 64 bit version of Ubuntu 15.04. Often when I delete recent history using the Security and Privacy application, I can still see the files in the Unity lens when I press the Windows key (both ...
1
vote
1answer
24 views

How to audit file created under a specific path?

I would like to know if there is an audit tool I can use to monitor the file created under a specified folder? I would like to know the user and program used (ftp, ssh , php) to create the file.
0
votes
0answers
15 views

Can I configure unattended-upgrades to reboot only for urgent issues?

This is how to configure unattended-upgrades to reboot the machine if needed: Unattended-Upgrade::Automatic-Reboot "true"; (in /etc/apt/apt.conf.d/50unattended-upgrades ) But is there no way to ...
0
votes
1answer
47 views

Mosquitto Configuration on 16.04

I installed the MQTT mosquitto package from the standard repos on a fresh 16.04. I'm confused about where to place/edit the conf file for MQTT to work with a username and password. There is a conf ...
0
votes
1answer
61 views

virus threat detected in /usr/lib/shim

I recently ran a virus scan with clamtk and was pleased that not much came up except for one system folder: /usr/lib/shim with the following files being flagged: fallback.efi.signed MokManager.efi....
6
votes
1answer
91 views

Torrents blocked by ISP in Ubuntu but on Windows works fine

I have a dual boot system: Ubuntu and Windows. When I use Transmission for torrents, it doesn't download anything and in the browser torrents sites are blocked, But if I do same thing on Windows in ...
-2
votes
2answers
33 views

Replace Windows 7 Entirely W/ Ubuntu & Security Feature Allows Wildows Files? [duplicate]

If Ubuntu supports files from windows, doesn't this defeat the "security" of Ubuntu? Obviously not a technie How to install and "replace" Windows 7 entirely, and get Microsoft out of my desktop. ...
0
votes
0answers
23 views

x11vnc configuration with SSH

I have followed after those steps of setting up the x11vnc, Run the following to install: sudo apt-get install x11vnc sudo x11vnc -storepasswd **yourVNCpasswordHERE** /etc/x11vnc.pass sudo nano /lib/...
1
vote
0answers
83 views

Skip sign verification at module loading

With secure boot enabled, is there a way to load a custom kernel module not signed, or signed with an auto-generated private key? Trying to load my custom module, insmod exits with the error Required ...
4
votes
1answer
38 views

Using binfmt-misc in conjunction with xattrs

I currently use a piece of sandboxing software on my 14.04 machine that isolates Linux binaries from one another (Using a special type of namespace isolation different than AppArmor) Currently, the ...
1
vote
1answer
129 views

Apparmor Init Failed, Exit Code 123

Apparmor fails boot and command line start with same result as below x@x-NICEPUTER:~$ systemctl --failed UNIT LOAD ACTIVE SUB DESCRIPTION ● apparmor.service loaded failed failed ...
4
votes
1answer
2k views

Why hasn't Trusty received the updates for OpenSSL's CVE-2016-2108 and CVE-2016-2107? [duplicate]

OpenSSL released a security advisory, warning users of two recently discovered vulnerabilities: Memory corruption in the ASN.1 encoder (CVE-2016-2108) Padding oracle in AES-NI CBC MAC check (CVE-...
0
votes
1answer
39 views

Start firefox using apparmor (for extra security)

I'm having some trouble starting firefox with apparmor. Here's what I've run: $ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox $ firefox /usr/lib/firefox/firefox: error while loading shared ...
1
vote
2answers
54 views

How to check for executable files in a given directory and its sub-directories?

I understand that it is a bad practice to keep files owned by oneself in one's home area which are executable, so I am in need of a script/tool which checks recursively through a given directory (in ...
0
votes
0answers
10 views

gnome-session-Unity logs - VNC connection messages

I recently realized that my 'Desktop Sharing' was turned on and as a result there were numerous Brute Force attacks on my system. Going through the gnome-session-Unity logs I have searched to see if ...
0
votes
2answers
43 views

Is there anything that should be done to increase security on a new system? [closed]

Let's assume I just installed Ubuntu on a laptop. This laptop may be used in different networks with different security measurements (at home, university, work place). Is there anything that should ...
25
votes
6answers
4k views

Personal computer hacked: How do I block this user from logging in again? How do I find out how they are logging in?

I am 99.9% sure that my system on my personal computer has been infiltrated. Allow me to first give my reasoning so the situation will be clear: Rough timeline of suspicious activity and subsequent ...
4
votes
4answers
132 views

How does FDE (Full Disk Encryption) work so quickly?

I'm curious about how does Ubuntu's full disk encryption works under the hood. Here's an example: Considering the following string as all the disk's content: hello world After applying some kind ...
9
votes
1answer
81 views

How to ensure user separation on an old school shell server

I want to run an old school shell server for a couple of people, ie. one where users get ssh access so they can run software (their own or provided). My concern is appropriate separation between users....
1
vote
1answer
47 views

How can I encrypt my pendrive with password? [duplicate]

In windows 7 or windows 8, I can use BitLocker Drive Encryption to encrypt and set a password in my pendrive but i am unable to access files of my pendrive in Ubuntu. Is there is any method to ...