Tagged Questions

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
2answers
19 views

How to verify Swap area functioning?

After increasing the Swap area and RAM size, the /dev/sda2 has become the Swap area and there is change in the UUID of swap. When the Ubuntu icon appears first after booting, a long line shows some ...
0
votes
1answer
35 views

A question about the last security update for Ubuntu

I'm subscribed to the Ubuntu Security Notes, so everytime that I receive an e-mail, a new update is avalable. But in the last update, they wrote something in the end that I coudn't undertand much, so ...
0
votes
0answers
5 views

Is it safe to disable apparmor profile?

In this anwser I've been told I can get rid of annoying error messages by disableing AppArmor profile for telepathy-mission-control-5. However, I suspect the profile is enabled by default for a ...
0
votes
1answer
24 views

Is there a way to encrypt the entire hard drive after you have already installed Ubuntu 14.04?

How would you go about encrypting your entire system drive after you already have installed Ubuntu? I have Ubuntu version 14.04 LTS and I am using a laptop so I would like to have my data encrypted.
0
votes
1answer
20 views

A question about installing security updates

I'm always following a website to know when security updates for Ubuntu are available. But, today, I saw this update (http://www.ubuntu.com/usn/usn-2388-1/), but the website told me to update the ...
0
votes
1answer
6 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
0
votes
0answers
16 views

What is missing in my webserver ufw firewall configuration?

sudo ufw enable sudo ufw logging on sudo ufw allow proto tcp from any to any port 9999 sudo ufw allow proto udp from any to any port 9999 sudo ufw allow 80 sudo ufw app apache sudo ufw app OpenSSH ...
1
vote
1answer
25 views

How do I block all traffic except firefox?

Lets say for example I want to block all traffic except incoming from nginx, outgoing for firefox and allow out and incoming to some torrent client. Would that be possible? I took a look at apparmor ...
0
votes
0answers
24 views

nm-applet: No Certificate Authority certificate chosen

I have access to a wireless network that uses Protected EAP (PEAP), and requires a certificate. I don't have the certificate installed, and after I enter my password for the network it complains that ...
0
votes
1answer
56 views

Does ubuntu require antivirus [duplicate]

Does ubuntu require antivirus? If yes then please tell me what's the difference between windows virus and ubuntu virus?
0
votes
0answers
26 views

Checking of Residues of Windows

Years ago I had Windows OS in my System. But I now I am using Ubuntu only. I have 3 partitions in my Hard Disc Device Boot Start End Blocks Id System /dev/sda1 * ...
1
vote
0answers
17 views

How to disable mpm-itk for a specific virtualhost?

I've a main site on a server that needs to run a sudo command which I white listed via visudo. That worked fine until I installed apache-mpm-itk and then I started getting the following error: sudo: ...
0
votes
1answer
28 views

Modern Ubuntu home media, security, and automation center [closed]

I'm looking to set up a large computer to act as a home media center, a security system, and possibly home automation. I'd like the following features 64 bit support Modern (based on a recent ...
5
votes
1answer
62 views

What are the reasons to have strong password at home?

For a typical home PC the security situation is following: No servers running, not even the SSH. Firewall is ufw running in simple mode: all outgoing allowed, all incoming denied. Torrents and DC++ ...
0
votes
0answers
18 views

ConsoleKit history log file is suddenly huge

I've had a server running (accessible on the web) for a year or so. There's a series of compressed history files in /var/log/ConsoleKit that are a few kilobytes each. However. October's is 1.2 GB, ...
0
votes
0answers
154 views

How do I address CVE-2014-3566 (POODLE) for lighttpd (1.4.28) on Ubuntu 12.04? [duplicate]

As most of you know, CVE-2014-3566 (AKA POODLE) involves weaknesses in SSLv3 on clients and servers. See https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-2014-3566/ for more ...
0
votes
0answers
85 views

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption vulnerability) in Lubuntu 14.04 [duplicate]

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption) vulnerability in Lubuntu 14.04 and fix for the issue.
7
votes
3answers
5k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
0
votes
0answers
5 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
126
votes
3answers
107k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
0
votes
3answers
75 views

Run rkhunter regularely on a desktop system

I want to get a warning on my desktop when rkhunter finds something odd on my system. I whitelisted some files and dirs that seem ok in /etc/rkhunter.conf so I get no warnings anymore. Now I want to ...
0
votes
0answers
11 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables
0
votes
0answers
18 views

List only “security” related upgrades with apt-get upgrade

I'm interested in a shell command that can behave like apt-get dist-upgrade except only list/consider security related package upgrades. For example, limit it to packages in security.ubuntu.com or in ...
1
vote
1answer
29 views

restore patched bash to apt maintained

Last month I manually patched bash on a server running ubuntu 11.10 for the shellshock bug, as suggested in the comments here: What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I ...
0
votes
1answer
114 views

Does Ubuntu 14.10 have the security fix for Shellshock bash exploit? [duplicate]

On the internet, I noticed there were Patches for the Shellshock vulnerability which is scaring me a lot. Does Ubuntu 14.10 have this automatically in it?
0
votes
1answer
42 views

Ubuntu 14 home/personal use version of Windows Update or apt-get “Must Dos” for Security [closed]

What basic security measures should be taken for Ubuntu's distro for home/personal use. No apache or web server installed.
0
votes
0answers
17 views

Is there any way of preventing an encryptd folder from showing sundry file information?

I have set up an encrypted folder with EncFS and use it successfully through the terminal on ubuntu 14.04. One thing I have noticed though on the hidden encrypted folder while on giving away name or ...
0
votes
0answers
19 views

Secure SSH Server from brute-force? [duplicate]

I'm just a newbie in Linux and recently got a VPS (Ubuntu 14.04 LTS Server). How can I secure its ssh server from brute-force attacks?
0
votes
1answer
65 views

Encryption [STANDARD] Ubuntu?

During the installation of Ubuntu I ticked the encrypt system and encrypt home folder boxes. But I have heard that it is foolish to encrypt the home folder when I already have encrypted my system. So ...
0
votes
1answer
32 views

Samba - Windows Network

I was recently checking my network and realized Samba was installed. When I go to "browse network" in the file explorer I see that there is "windows network" and my home folder is located inside. My ...
0
votes
0answers
54 views

how to install mod_security apache2.4

I was looking at my logs yesterday, when I saw a bot roaming folders I have in my robots.txt file. I tried to block it with a rule in my UFW firewall, but this did not keep them out. So then I was ...
0
votes
0answers
11 views

Restrict users ports

How could I go about restricting specific users access to ports based on a whitelist based system. I heard it can be done with SELinux (I do have it installed), but I haven't been able to work out ...
1
vote
1answer
7k views

ShellShock - bash already updated?

I'm trying to fix this new ShellShock bug on my PC (running Ubuntu 14.04). From what I've gathered, the simplest way to do this is to just update bash via the terminal (I've tested my system for the ...
0
votes
1answer
215 views

shellshock vulnerability and super user

can shellshock vulnerability execute somehow commands with superuser permissions? And if yes, from where/how? It is possible to be executed commands from cgi yes, but is it possible to get executed ...
1
vote
1answer
1k views

How do I know if my system is vulnerable to the ShockShell vulnerability? [duplicate]

The recently discovered ShockShell vulnerability affects many Linux and Mac systems, because they are using the vulnerable BASH shell. How do I know if I am vulnerable to this attack and how do I ...
2
votes
2answers
235 views

CVE-2014-6271 over ssh example attack?

I've been reading about the CVE-2014-6271 bug on lots of pages, but I'm still not able to understand how exactly is it possible to exploit it over ssh. From all I've read, I couldn't find an example ...
0
votes
0answers
219 views

How do I upgrade from 12.10 on a DigitalOcean droplet?

The recent ShellShock exploit has prompted me to upgrade my Ubuntu 12.10 server, as I cannot upgrade bash on it (I receive 404 errors on apt-get-update (somebody else with a similar issue)). I opened ...
1
vote
0answers
352 views

How to Patch for Shellshock [duplicate]

So, in light of this closed thread, and this article, how can we patch for the shellshock bug/exploit/vulnerability for currently supported Ubuntu versions? 13.10 and 14.04?
126
votes
5answers
88k views

What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?

Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
4
votes
2answers
3k views

CVE-2014-6271 bash patch trouble

I have a Ubuntu [EDIT] 12.04.4 LTS server that is vulnerable to the recent bash remote executable exploit. Ubuntu says they have released a patch here. I have run a sudo apt-get update && ...
0
votes
0answers
17 views

rootkit hunter found suspect files

I recently run rkhunter and found 9 suspect files detected, why curl ,dpkg show warnings as shown in the image below what should i do to remove those warnings?
3
votes
1answer
116 views

ClamAV found infected files on Ubuntu server, what do I do now?

I checked the Ubuntu server using the command clamscan -r. I don't know whether or not the files were cleaned or deleted. This is a screenshot of the results: I'd like to know if these files still ...
0
votes
0answers
56 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
2
votes
2answers
114 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
0
votes
1answer
71 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
0
votes
0answers
48 views

How to avoid chrome store password in seahorse?

I am very concerned about the unencrypted passwords saved by chrome in seahorse. This equipment is shared and used by several people, so any user with the root password can change my user password ...
0
votes
1answer
82 views

how to verify that sbin/init isn't infected?

for sometime chkrootkit has been showing sbin/init as being infected with SuckIt rootkit. early this year when the warning first appeared a quick google search indicated that it was most likely a ...
0
votes
1answer
19 views

How do I report an Ubuntu Software Center “Listing” problem?

How do you report a possible security risk to users in Ubuntu Software Center? There is two game apps in the Ubuntu Software Center called "Karts" and "Kart 1000..." Both: - Listed as free - But the ...
0
votes
0answers
34 views

Setup Webgoat on ubuntu 14.04 with lamp server

Can any one give me the breif instructions for how to install Webgoat on Ubuntu 14.04 (not a server) step wise I am facing problem with setting java_home variable to java 1.5 jdk
0
votes
0answers
23 views

Ubuntu 14.04 installation permission denied from HDD & external HDD

Title is self explanatory sadly; had no luck after getting past the security (for now) and the same from my Samsung external HDD Desperate trying to get this to work but no luck except on a virtual ...