Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
16 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
0
votes
1answer
31 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
0
votes
0answers
10 views

How to avoid chrome store password in seahorse?

I am very concerned about the unencrypted passwords saved by chrome in seahorse. This equipment is shared and used by several people, so any user with the root password can change my user password ...
0
votes
0answers
19 views

Which security and antivirus programs do you recommend?

As the question leads, is there A program that verifies secure settings are on for Linux, and/or if there are signals of security problems? Is there a solid anti-virus that can perform one-time ...
0
votes
1answer
25 views

how to verify that sbin/init isn't infected?

for sometime chkrootkit has been showing sbin/init as being infected with SuckIt rootkit. early this year when the warning first appeared a quick google search indicated that it was most likely a ...
0
votes
1answer
19 views

How do I report an Ubuntu Software Center “Listing” problem?

How do you report a possible security risk to users in Ubuntu Software Center? There is two game apps in the Ubuntu Software Center called "Karts" and "Kart 1000..." Both: - Listed as free - But the ...
0
votes
0answers
12 views

Setup Webgoat on ubuntu 14.04 with lamp server

Can any one give me the breif instructions for how to install Webgoat on Ubuntu 14.04 (not a server) step wise I am facing problem with setting java_home variable to java 1.5 jdk
0
votes
0answers
16 views

Ubuntu 14.04 installation permission denied from HDD & external HDD

Title is self explanatory sadly; had no luck after getting past the security (for now) and the same from my Samsung external HDD Desperate trying to get this to work but no luck except on a virtual ...
1
vote
0answers
15 views

What kind of access flash has to our systems?

It seems like there is major security issue found in flash every other week or so. There was another one just yesterday. This and being closed source, I can't help but wonder, what kind of access it ...
0
votes
0answers
19 views

Allow one process access to /dev/uninput without completely compromising security

Steam In-Home-Streaming was turned back on the other day. This allows you to play games being rendered on one computer on another computer (commonly playing games on a TV/Media Centre that are being ...
-1
votes
0answers
11 views

can the webcam be restricted by a password?

Is it possible to to make using the webcam by applications restricted to the root? i mean like how one can change permissions for files using chmod. Or how you are asked for the password every time ...
0
votes
0answers
10 views

Questions about how malwares might operate under wine [duplicate]

a recent scan by clamav found that a few exe files in the WINE directory are infected with a trojan (called Ratnim?). A have a few specific questions on what a windows malware can do under linux. 1) ...
1
vote
0answers
31 views

Blocking HTTP requests without Host header using mod_security2

In my Apache configuration, I want to allow only Host header based vhosts. That is, I'd like to block any traffic by IP address only. I have mod_security2 installed, but I am only using the default ...
0
votes
2answers
50 views

What's the status of encfs?

Is the encfs project no longer maintained? It seems the last update 1.7.4 was released on November 18 2010. In a security audit several weaknesses have been identified, but no updates have since been ...
0
votes
1answer
26 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
0
votes
0answers
16 views

Ubuntu servers protection

Here is my needs : i need to protect data from being stolen on servers and Those servers are not physically secured. First i just wanted to base security solution on root password protection but ...
1
vote
1answer
59 views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
1
vote
2answers
86 views

How to access locked hard drive?

I have a hard drive with an old 12.04 server install and a data partition on it. I have the hard drive hooked up to my current desktop using a usb to sata adapter with external power supply. I am on ...
0
votes
1answer
21 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
43 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
0
votes
0answers
25 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
1
vote
2answers
31 views

Is this a security risk/concern?

According to: http://wiki.secondlife.com/wiki/Linux_Viewer#Installing_and_Running The Second Life Linux client entirely runs out of the directory you have unpacked it into - no installation step ...
0
votes
0answers
29 views

Nessus SNMP security warning

I ran a Nessus scan on my Ubuntu 14.04 machine. I received the following: High: SNMP Agent Default Community Name (public) Description: It is possible to obtain the default community name of the ...
0
votes
0answers
12 views

problems gaining root access and installing software due to authentication. [duplicate]

I have a laptop that had ubuntu installed, however though many ownerships, the pass word is lost, anyway of removing this absolute shite of an install block. every time I try to do something it asks ...
0
votes
1answer
78 views

Connect to my College's WPA from Ubuntu 14.04 LTS [duplicate]

I have Ubuntu 14.04 LTS, and am running it on a Sony Vaio VGN-CR12OE. It is the only operating system. I am trying to connect to my college's WPA WiFi. My settings for this WiFi connection are as ...
0
votes
2answers
114 views

What do LISTEN and ports mean in netstat? [closed]

I have been monitoring my system lately and I have found some strange things are running on my system. Can anyone please explain what they are and why same program use several processes? Output of ...
1
vote
2answers
60 views

Do logins by the gdm (or lightdm) user in auth.log mean my system is breached?

Please look at this auth.log (from Ubuntu 14.04) I have provided and tell me who this gdm user is and why there are all these unauthenticated logins? I am freaked out; please help! Here's the ...
1
vote
1answer
22 views

How do you detect file changes

Since Linux is vulnerable to a number of similar vulnerabilities as windows. I'm trying to find a daemon that catalogs and alerts me/user of any and all file changes as well as file additions. Is ...
2
votes
1answer
39 views

How to prevent data from being written into a directory?

Or: How to make a directory write protected, for all users until unlocked again?
1
vote
2answers
36 views

What lines should be commented out in my sources.list file?

I have just updated from Ubuntu 12.04 to 14.04 last weekend. I haven't downloaded any extra programs as of yet. I checked my sources.list file and it has the following lines in it: deb ...
0
votes
0answers
11 views

Locking all setting

Is there a way to lock all the system setting on ubuntu so people cant change them without permission? example removing printers. I am taking care of a schools computer room and teachers/students are ...
0
votes
0answers
36 views

How can I lock Seahorse GnuPG Keys?

since not long ago I've started to use seahorse to manage my encryption keys, and at the moment I'm finding myself a bit baffled about what it appears quite a security hole of the system... In fact, ...
0
votes
0answers
11 views

Prevent Network Injection

I read this article: http://gizmodo.com/pro-hackers-could-be-spying-on-you-through-youtube-1622367382 I'm running Ubuntu 14.04. How can I prevent network injection of my internet browsing traffic? ...
1
vote
2answers
63 views

What should I do to avoid my roommate from changing my password through using system recovery mode .?

He did this last time when I left my laptop at room. Opened the system recovery mode from advanced Ubuntu options and changed the password using 'passwd usrname ' command.Is there anything I can do ...
0
votes
1answer
42 views

Are there really security risk when running Wine? [duplicate]

I remember reading somewhere that since Wine's job is to pretty much emulate Windows so that you can run Windows programs, it puts a risk on your Linux machine since Windows Viruses can also run ...
0
votes
1answer
40 views

I have some questions about Firewall [closed]

So I am pretty new to Linux (With the exception of Android), and being use to the old ways of Windows pretty much all I had to do for Firewall was turn it on and forget about it. However with Ubuntu ...
1
vote
2answers
34 views

Don't remember PGP passphrase until end of session [duplicate]

To use my PGP key I always have to enter my passphrase. But as it happens, I have to unlock the key only once for every session. The desired behaviour would be, that I have to unlock the key each time ...
0
votes
2answers
60 views

wget security.ubuntu.com not working on ubuntu

We are able to use wget for other URLs, such as google.com, but wget security.ubuntu.com not working and giving output: Resolving security.ubuntu.com (security.ubuntu.com)... 91.189.92.200, ...
-1
votes
1answer
19 views

How to accept only essential security updates?

sometimes i am getting problem in software updates. So i would like to get only essential security updates and also need to make it as default. Please let me know is there any way to sort out that?
1
vote
1answer
21 views

Terminal message “Access control disabled”

Every time I open up the terminal the message access control disabled, clients can connect from any host pops up in the first line. Then the terminal behaves as usual, no errors at all. But this ...
1
vote
1answer
54 views

Confused about the security of ubuntu (Linux)

Assume I have a laptop with ubuntu installed and two users abc and root. Both users are password protected. It is possible to reset root password using live CD or USB using chroot which would mean ...
0
votes
0answers
18 views

There doesn't seem to be a decent guide for Stealth could someone either write one or point me to one?

Stealth Integrity Scanner I'm very interested in being able to setup an IDS and this one seemed like it was really cool and worth while and fairly underrated. I've not really found much on what a ...
1
vote
0answers
95 views

SSH connection failing since I changed server port number

Yesterday I changed the default ports on the server from 22 to 1993 then restarted but now I can't connect at all. I used ssh -i keyname.pem ubuntu@remotehost to connect then sudo vi ...
1
vote
1answer
41 views

Is it possible to setup a root like user for global read only access?

I'm hoping to give a security scanner a user that can read everything but not change or execute anything. Is this possible and if so how?
1
vote
0answers
12 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
0
votes
0answers
24 views

How do you set up a systemwide read only user for a security scanner

I'm hoping to play with STEALTH https://apps.ubuntu.com/cat/applications/precise/stealth/ It suggests the creation of a read only access user that the integrity scanner can use to access its target ...
0
votes
1answer
26 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
1
vote
1answer
23 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
0
votes
0answers
27 views

Is this a bug or normal (mis) behavior?

When I sudo-rebooted from the top-right menu, after Unity closed I was taken to an open tty, where I saw my login password in plaintext where I had typed it in earlier. In Ubuntu-bug, a specific ...
2
votes
0answers
24 views

What is the difference between security.ubuntu.com and archive.ubuntu.com? [duplicate]

The various releases have a -security channel in archive.ubuntu.com. How does that channel differ from the security.ubuntu.com? If I have to set up a local mirror, how does security.ubuntu.com come ...