Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
10 views

Can ubuntu security updates restart services started via supervisord?

When unattended-upgrades install security patches for services like mysql, nginx or ssh, automatic demon restarts would get triggered. Will the same happen if I am running them via supervisord?
0
votes
1answer
16 views

How easy is it to get Linux.Ekoms.1?

I read about this malware, one of the biggest specimens of malware on the Linux news right now. How easy is it to get? Paranoia has gotten the better of me. According to the sites I visited, it is ...
0
votes
0answers
17 views

firefox on ubuntu triggers huge download in the background

I am using ubuntu 14.04.02, and firefox 44.0.2. Recently I noticed, my downloads were going really high but I never downloaded anything. After step by step debugging, I could find that the moment I ...
0
votes
0answers
30 views

From where to start [on hold]

I am a network security engineer. However I have never worked on linux. Most of the firewall that i worked on had gui or their custom command line. Now I wish to get more deep in security specially ...
0
votes
0answers
7 views

Automatic security upgrades, unattended-upgrades, and controlling when it does it

I have a linux server running a java app. The vendor indicates that 99+% of the time that one of their customers gets hacked, it's because they haven't installed JDK security upgrades in months. I'm ...
0
votes
0answers
24 views

Can I run Flash player for my browser in sandbox?

Flash player has a lot of Vulnerabilities. I have disabled the plug-in for security reasons, but there are times when content needs it. Can I run Flash player for my browser in a sandbox (isolated)? ...
1
vote
0answers
24 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
-1
votes
0answers
21 views

Ubuntu server content security [on hold]

I am learning server side administration ... I can across one requirement where I want to setup a local server(preferably Ubuntu server) such that it connects to computer on same network. My ...
3
votes
1answer
18 views

Security risks with fakeroot?

Is there a security risk having fakeroot installed on my system? I can't find much more than was is provided in the manpage.
1
vote
1answer
18 views

Ubuntu Mozilla Security, do I need this? General questions

I was searching for info on enabling/disabling javascript in firefox, some pages I need to have it function and without the java they're broke. I came across this and was wondering is this something ...
-1
votes
2answers
27 views

How to edit /etc/default/ntpdate and prevent ntpdate from ever running without uninstalling

Since both ntpd and ntpdate rely on ntp servers, and since the Ubuntu repos have yet to complete an update of ntp to 4.2.8p4 (the version recommended by ntp researchers), I expect this means that both ...
0
votes
0answers
11 views

Restricting the Number of IP/TCP Connection Request Per Second Using Ubuntu Sever

I know what type internet connection my machines have and how much CPU/RAM they are using. So Is it possible to restrict the accepting number of IP/TCP connections per second at the OS level, before ...
0
votes
0answers
17 views

Run file when USB device inserted

I want to implement a strict policy of nobody being able to insert any USB device into my laptop. If someone inserts a memory stick, keyboard, light etc... into any USB PORT (while the computer is ...
1
vote
0answers
12 views

Securing a port in ubuntu with username and password

I have Elasticsearch running on 9200 port.I want to secure it and I dont want others to access the data stored in the index in ElasticSearch. How do I secure the port and limit its access using ...
1
vote
1answer
32 views

With secure boot disabled, is there long term vulnerability to malicious code (on 14.10 and 15.04/Win multiboot setups)?

In a nutshell: is it really a good safe idea to leave Secure Boot disabled? I have two laptops with LinuxMint,Xuntu, Ubuntu 14&5 Win 10 and Win 8.1 between them. Grub 2 works fine with /,/boot ...
6
votes
2answers
118 views

Email on failed login attempt?

I was wondering if it is possible to set it up in such a way that on a failed login Ubuntu will send me an email? And of course if the computer is not connected to the internet when the attempt ...
0
votes
0answers
10 views

encfs reset settings to standard

I do not correctly identify the customizations when it first installs. Encrypted data is now not displayed. How to reset the settings to standard?
15
votes
2answers
465 views

How can I further secure my system using 2 factor authentication?

The title pretty much says it. I have been hearing more about 2 factor authentication, one-time passwords, hard-tokens, and other improved security features. With the decreasing security of using just ...
0
votes
4answers
52 views

What is the reasoning behind hiding characters when entering the sudo password?

When entering the sudo password, the • characters are hidden. Apparently the • are omitted for better security. They seem secure enough to me, and I don't see why they're not used. I think I'm ...
-1
votes
2answers
44 views

Is firefox safe to use on Ubuntu/Linux? [closed]

While using Firefox on Ubuntu, I frequently run into warnings from various sites (recent examples: when checking gmail, www.hitrecord.org), that inform me that I am using an outdated/unsupported ...
0
votes
0answers
34 views

UFW ACCEPT Problem

I'm having problem with UFW. If i block like whole /24 network becouse lots of bruteforcing etc. coming from China / Korea or somewhere. They still get to open ports. If i have, lets say port 443 ...
-1
votes
1answer
37 views

Of what help is SE linux to me?

i am new to Linux. I have heard about SE linux ... how does it work with Ubuntu and what can i do with it?
14
votes
3answers
1k views

Unsupported Ubuntus - is it safe to continue with them?

I'll try to be as clear as I can about this, hoping to get clear answers. I have Ubuntu Studio 15.10, which is not an LTS version, and will only be supported till July 2016. Does that mean there ...
-1
votes
0answers
21 views

Whats the diffrents between chkrootkit and rkhunter? [closed]

I've heard about the famous linux anti-rootkits called chkrootkit and rkhunter I use rkhunter with clamav but do I need to use chkrootkit also or is that a different story?
0
votes
0answers
17 views

Does ubuntu comes with any encryptions programs by default [duplicate]

Is there any preinstalled encryption program in linux that I can use to encypt my data or do I need to install a third party program
1
vote
2answers
31 views

Auto unlock keyring on auto login without leaving password unencrypted

So I keep getting this unlock keyring popup when I login to Ubuntu automatically. There is a fix here: How can I stop being prompted to unlock the 'default' keyring on boot? I have been googling ...
1
vote
1answer
44 views

Remove string “please enter passpharase for disk…”

I traveled to Australia it seems they didn't like my face or I looked suspicious since they made me turn on my laptop and when ubuntu encryption password popped up they asked me for it, nothing to ...
0
votes
0answers
13 views

How to only allow a file to be opened or executed by certain application(s)?

Let's say that I've got a security application (or something which I just don't want any old application or user to have access to because it is very important and if the wrong guys had access to it ...
0
votes
1answer
41 views

Automatic kernel security updates no long being installed

A while back my /boot partition filled up on my Ubuntu server 14.04 install. This caused an automatic kernel security update to fail and be in a partially installed state. To fix the problem I removed ...
15
votes
2answers
4k views

New Zero-day exploit reportedly found affecting Linux/Android (CVE-2016-0728)

Russia Today reports (20 January 2016) that there is a new zero-day exploit that has been discovered affecting Linux and all Linux-based OSes for computers and phones. What is the deal; how does it ...
0
votes
0answers
8 views

cureent Kerberos password specifications

Current kerberos password, there must a certain number of used charecters or length...I keep getting, that doesn't work please try again from my welcome screen, does anyone know the specifications?
0
votes
1answer
37 views

Secure browsing

I would like to hear from you suggestions, how to improve security during browsing. Let's say that I am going to use Chromium. With this extensions: Web of Thrust (to be noticed, if i visit bad ...
0
votes
0answers
19 views

NTP question on ntpdc -c peers

I just started learning networking. I recently installed ntp on Ubuntu 14.04 running in Virtualbox on OS X. I was just trying to understand how it works. so when I executed ntpdc -c peers command in ...
0
votes
0answers
16 views

Everything in syslog has been removed! Security risk?

I am new to Ubuntu. I've only been using it for a few weeks. I was wondering; does Ubuntu delete the logs after a while? My syslog was full of logged events this morning, but when I checked it now, ...
1
vote
1answer
64 views

Linux overwriting RAM with zeroes on free()

I was just wondering if it is possible to tell Linux/Ubuntu to overwrite freed memory with zeroes before letting the next application allocate it? If not, why isn't this possible? I know that ...
0
votes
1answer
33 views

Ubuntu : Disable access to file-manager, keyboard,mouse(Touch screen available) for guest account

I am looking to configure Ubuntu(Any version, new installation) for presentation in which I would like to do the following things : Automatic guest-login at startup. Completely disable ...
0
votes
2answers
13 views

Are ssh keys generated individually by Ubuntu Server LTS 14.04 setup?

Let's assume freshly installed and updated&upgraded Ubuntu Server 14.04 LTS with ssh server. Does installation scripts generate new ssh keys for each installation (so I am safe having unique ...
0
votes
0answers
10 views

Maintenance/Security of installed Apache Tomcat 7.0 on Ubuntu (14.04 LTS) “Trusty Tahr”

I recently installed Apache Tomcat 7.0 on my "Trusty Tahr" linux machine. I wanted to know if I should be preforming any type of maintenance or adding any type of security measures to my system? I'm ...
0
votes
1answer
32 views

What to do about a false positive in clamtk

I am getting a message from clamtk antivirus after running a scan on the download folder the result said 10 viruses found how can 10 viruses be found if nothing in the download folder but some files ...
0
votes
3answers
75 views

Help I can't update clamav!

I was updating the clamav antivirus defenitons with the sudo freshclam command and the output was ERROR: /var/log/clamav/freshclam.log is locked by another process ERROR: Problem with internal ...
0
votes
1answer
68 views

What are the alternative to clamtk

I installed the antivirus clamtk/clamav, the installion went well, but I can't run the program. I tried a terminal, but that did not work. The result was if I typed sudo clamtk nothing happen, but if ...
0
votes
1answer
37 views

How to know that my ubuntu system is clear from bad file? [closed]

How to know that my system have been accessed through by backdoor and how to know there is rootkit, malware or trojan in my ubuntu system.
0
votes
1answer
70 views

Redirection to ad pages in browsers

I have a serious problem when visiting web pages, with anything in any moment, as you can see in the screenshots. photo1 - ubuntu-es | photo 2 - ask ubuntu | i.imgsafe.org/373b693.png | ...
17
votes
3answers
866 views

How can I force sudo to always ask for a password after waking from suspend?

Say I execute a command with sudo, then if I use sudo within the next 15/5 minutes (not sure how long it remembers me for) it won't prompt me for a password. It will only prompt me again if I haven't ...
0
votes
2answers
21 views

Run service with previledges of another user?

I want to host a CouchDB but heard that it might be wise not to run it as a root but create an own user for that with little privileges as possible. How can I achieve that? When I just install ...
1
vote
1answer
26 views

Protect Ubuntu system from MSFvenom attacks

I have been reading about MSFvenom and its usage as a tool to attack devices connected to a common network (for example, see here and here). Kali is a well-known Linux distribution that implements ...
1
vote
0answers
27 views

Security risk of shared folder outside home folder

I recently set up a shared folder over my network sharing files that are located on hard drives attached to my Ubuntu machine with an Android home theatre system. Since I am NOT the owner of the ...
3
votes
1answer
28 views

Any CA Cert trusted by default on ubuntu?

I understand I can copy the CA cert to certain location and run script update-ca-certificate to import CA cert to the system. But I'm curious is there a list of CAs that are trusted by default on ...
0
votes
2answers
37 views

Why does Ubuntu comes with two firewalls by default?

I just realised Ubuntu comes with two firewalls by default iptables and ufw. But why? I mean running more than one software firewall on one computer can be insecure, that's what they say. I don't ...
4
votes
1answer
31 views

How to make a computer running on runlevel 3 ask for password when waking up from suspend in X?

I have recently set runlevel 3 as a kernel parameter instead of runlevel 5, though this has caused a little bit of a problem... Because when I execute startx and then once the GUI has loaded, if I ...