Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

-1
votes
0answers
4 views

Customize which files OSSEC HIDS does an integrity check on

I have installed OSSEC HIDS (2.8.1) and am very happy with it, but now for security reasons it would be very useful if I could customize which files it does an integrity check on. So how would I tell ...
0
votes
0answers
4 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...
0
votes
0answers
10 views

Set password security with pam.d (urgent homework)

I am trying to change the password security check. I would like to set rules for the password when adding a new user. Here is the content of my /etc/pam.d file: password requisite ...
1
vote
0answers
6 views

How do I close Chrome when entering standby or hibernate?

If I leave Chrome open, it keeps me logged into my sites even during standby, so the only defence I have is my Linux password. I would like to have Chrome shut down on standby or hibernate, and then ...
3
votes
0answers
15 views

KeePass2 and KeePassX, which is more secure?

I use KeePass2 on Windows and KeePassX on Linux. I understand the arguments between the two on database compatibility and cross-platform performance. What I'm curious about is whether either one is ...
0
votes
0answers
15 views

what are the parallel processing system realistic constraints in security ,ethical,economic [on hold]

what are the parallel processing system realistic constraints in security ,ethical,economic sides I' want to use Beowulf cluster in parallel processing based on Ubuntu as an operation system ,and I ...
0
votes
0answers
14 views

How can i Change the Password of hostapd

i am using hostapd wi-fi access_point ,the moment i turn-on the hotspot unknown device are accessing it .Can you tell me the procedure to change password of hostapd?
0
votes
0answers
28 views

Connect button grayed out in 802.1x authentication dialog

Since I upgraded to 15.04 I can't connect to our office wired network anymore since I can't press connect in the authentication dialog.
3
votes
0answers
22 views

Are WINE applications sandboxed? [duplicate]

I want to run a small Windows program that has no reputation. I can always scan it, but I can't get feedback from other users on its performance or if it is at all malicious. Rather than go through ...
0
votes
0answers
14 views

How can I secure Ubuntu while allowing me to login remotely? [duplicate]

I'm very new to Ubuntu and I would like to know how to secure Ubuntu but still allow me to login remotely. Preferrably using ssh keys and how I can and should do it. :)
0
votes
1answer
7 views

Reenable ASLR Ubuntu

For some buffer overflow tests, I disabled ASLR in Ubuntu 14.04 using below command: echo "0" >/proc/sys/kernel/randomize_va_space however trying to enable it agian, my developed program run in ...
0
votes
1answer
12 views

How to install Ubuntu on a small partition with the highest security settings

I want to make a fresh Ubuntu installation on my laptop. In the past I used to follow the default installation instructions by creating a single partition and then enabling passphrase and encrypting ...
0
votes
0answers
11 views

ubuntu 14.04 firefox starting without sudo gives security library failure on SSL sites

I have a problem with ubuntu desktop 14.04. When executing firefox without sudo, then all the https sites (even http://google.com) gives me Error code: sec_error_library_failure But when ...
1
vote
2answers
13 views

How to check validity of an Ubuntu installation via debootstrap?

My goal is to set up an Ubuntu Server installation via debootstrap from another Ubuntu installation and to be sure that this new installation is a correct Ubuntu installation without modifications. ...
0
votes
0answers
20 views

How can I get capabilities to work with su?

I added a line to /etc/security/capability.conf so I can have a user who can read everything for backups, but not do everything root can. cap_dac_read_search backup If I add a password and shell ...
1
vote
2answers
35 views

Is there a way I can password protect a folder without encrypting/compressing?

I have got a folder that contains private stuff and I don't want others to be able to see its content. I will frequently open it and the folder is quite large. I know I can password protect it by ...
2
votes
1answer
9 views

Priority field in CVE pages on http://people.ubuntu.com/~ubuntu-security/cve/CVE-XXXX

On http://people.ubuntu.com/~ubuntu-security/ security patches for packages are announced and correlated with the corresponding CVE from Mitre. I just wonder, how the "Priority" is set. For ...
1
vote
1answer
176 views

Security of Ubuntu flavours, especially Kubuntu

Does Kubuntu gets the same level of OS security as Ubuntu with the Unity desktop? Does Ubuntu developers offer special security updates to the unity desktop, or security is only dependent on the ...
4
votes
1answer
49 views

How do I allow a user to only run the apt-get update command with sudo?

I cannot figure out how to allow a user (in this case test) to only be able to run the apt-get update command with the sudoers file. When ever I try to add the user and then test it out it still does ...
3
votes
2answers
72 views

Are there any security issues with making my /etc/sudoers publicly readable?

I've recently started to use my GitHub account as a way to synchronize my various config files across computers, including my /etc/sudoers. Are there any security vulnerabilities that this exposes? ...
2
votes
1answer
427 views

PUA.Win.Exploit.CVE_2012_0110 FOUND

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
1
vote
0answers
25 views

Upgrade, unable to boot [closed]

I've just done a regular upgrade on my system. I restarted my computer and Ubuntu won't load. All I've got is a small blue window that says HDD has been blocked by the current security ...
2
votes
1answer
19 views

Does Kubuntu have GPG keys?

Does a Kubuntu have a GPG keys to prove the authenticity of OS image? I saw the Ubuntu have, but didn't see anything for [K]ubuntu.
3
votes
0answers
23 views

Find Kali Security tester tools after installation

I'm a 'beginner' with Ubuntu. I tried it already a few times. I also tried Kali, etc already. I think Ubuntu is very useful, and has many possiblities. But I missed one thing from Kali. The Security ...
2
votes
1answer
20 views

Can PGP keys in Ubuntu be replaced?

If some attackers compromised an ISO image of Ubuntu and replaced inner PGP keys , then I will not to able get & install security updates. Is it right? I'm asking it because I possible may meet ...
0
votes
0answers
11 views

DropbBox suddenly restarted with “Killed” message

I have installed DropBox with: cd ~ && wget -O - "https://www.dropbox.com/download?plat=lnx.x86_64" | tar xzf - And it normally works fine, but today when I was syncing with my online ...
1
vote
1answer
17 views

Encrypt second hard disk with same password

I installed Ubuntu 14 LTS with disk encryption (selected during installation). I have two questions: 1- What is encryption algorithm of current encrypted disk? 2- I have a second hard disk and I ...
0
votes
2answers
39 views

Was my SSH server compromised? If so, how, and what steps should I take?

I recently enabled ssh access to my machine to work on a group project with my classmates. I read the guide for setting up ssh on ubuntu and tried to follow good security practices. I disabled ...
2
votes
0answers
24 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
0
votes
1answer
35 views

UFW blocking connection every minute at home [duplicate]

I'm using a router to connect to the internet at home. I used a long password with WPA2/AES, changed the SSID and changed the default password. But strangely, even if I disconnect the router from the ...
-3
votes
1answer
58 views

need to check if my ubuntu 14.10 has been hacked [closed]

I have a Ubuntu 14.10 machine and I would like to check if my security is OK. I doubt that some one accessed my machine from internet and remotely controlled it. so what are the suitable tools I need ...
0
votes
0answers
18 views

Tiger Warns and Alerts

I am using Plesk 11 and have installed Fail2Ban, RKHaunter and Tiger. Tiger and Fail2Ban sends me emails, but Tiger shows a lot of warnings and alerts. # Checking for known intrusion signs... # ...
0
votes
1answer
53 views

Can an unmounted USB be infected my malware?

Yesterday, I went on a dark creepy site whose js freezed my system/firefox (Ubuntu 14.04 up to date, Firefox 37.0.1 up to date). Now I tried, from the same system, to find any malware with: sudo ...
1
vote
0answers
43 views

Start programming [closed]

I am a beginner ubuntu user, and I am interested in learning a programming language. My demands are that I would like it to help me master the command line, and be a good base voor learning future ...
0
votes
1answer
16 views

gnuPG encrypt and decrypt folder

I use this command to compress and encrypt a directory: tar zcvf - /tmp/directory | gpg -c > /tmp/directory.tar.gz.gpg What is the command to decrypt and unpack at the same time?
2
votes
1answer
26 views

OSSEC HIDS reports “Interface entered in promiscuous(sniffing) mode”

I have installed the latest version of OSSEC HIDS (2.8.1), and I keep now getting these email notifications from it: OSSEC HIDS Notification. 2015 Apr 08 11:26:17 Received From: ...
0
votes
1answer
60 views

someone is using may sendmail to spam other

I have an Ubuntu (14.04.1 LTS) install on AWS with sendmail. I keep getting messages from mail servers that are unable to deliver some of my messages (I did not send) and all are about sex. So I ...
11
votes
2answers
180 views

Do I need to install Security updates for Ubuntu base?

I installed Lubuntu 14.04 LTS from a disc and have added updates.System info shows 14.04.2 LTS. Software updater >security updates offers Ubuntu base 103MB. Do I need to install this?
1
vote
1answer
43 views

Why the attack's ip address has a string 'dia'

This is a record from netstat –lnt | grep ^tcp: tcp 0 0 xx.xxx.xx.72:ssh 106.49.174.61.dia:55983 ESTABLISHED "x" is hidden by me :) my questions are: why does the address have ...
1
vote
1answer
64 views

How do I prevent webcam hacks [closed]

I have read on many websites that there is an increasing number of attacks on webcams, based on viruses and similar software that allow third parties to gain control of the webcam of an attacked ...
1
vote
2answers
25 views

Is an application in Ubuntu allowed to open other applications if it does not have elevated privileges?

Let's assume an application in Ubuntu is compromised. Since, by default, downloaded applications do not have root privileges, no major damage can occur. The worst a malicious hacker can possibly do ...
-2
votes
3answers
37 views

Does Ubuntu accept purely random incoming connections outside the LAN by default (meaning ufw is disabled)? [closed]

By "purely random," I mean that the connection was not initiated by the Ubuntu user. EDIT: For example, think of a malicious SSH connection from a source outside the LAN.
0
votes
1answer
51 views

Automatically installing security updates on desktop system more than once per day

I see that the GUI configuration for update-manager has a maximum check interval of once per day. I'm sure Canonical thought about this carefully, but these days I don't want to be without a ...
0
votes
1answer
21 views

OSSEC user accounts disabled

I have recently installed OSSEC (2.8.1), and during the installation I noticed that it created some extra user accounts. But when viewing those user accounts in my System Settings > User Accounts ...
0
votes
1answer
46 views

How to get a program to startup at start if it requires sudo to start

I have got a program which to start needs to be started with sudo, but as it would be very useful for this program to start up at startup without me having to manually start it, is there a way to get ...
6
votes
2answers
146 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
2answers
68 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
-10
votes
2answers
679 views

I think my PC is being hacked. What should I do? [closed]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
0
votes
2answers
18 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
1
vote
2answers
23 views

mitigation of grub attacks

I want to disable the sing user mode attack performed at the grub level by passing kernel parameters. I know a solution that is putting the grub password & bios password.but I want to know ...