Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.
0
votes
0answers
4 views
rEFInd security standard problem
I tried to install ubuntu with windows 8 in my new notebook, but now ubuntu works, but not windows. Someone told me to use rEFInd to correct the problem, but when I try to install i appears a message ...
0
votes
1answer
23 views
Where are ALL ubuntu logs/terminal history stored
In what folders are the logs and key histories stored so that I may make a script to purge them. Is there a specific folder for the hibernation partition or a file by which it keeps the RAM data on ...
0
votes
0answers
40 views
This website keeps coming up
I keep getting a facebook page come up in my browser. What's going on? I've searched for it on Google and people keep relating it to facebook app development. I work with python, html and BASIC. I ...
0
votes
1answer
37 views
Somebody help me with my paranoia
I tend to be on the paranoid side, and for some time there are messages in my log file that tend to get me going close to the edge of sanity. Could someone explain the following in my auth.log file ...
0
votes
0answers
30 views
ufw firewall operation
I have always run the program UFW as my firewall in Ubuntu, and been satisifed with its performance. When I installed Ubuntu 13.04, and enabled ufw, I was not able to access the internet, and all ...
0
votes
1answer
34 views
What are the security support statuses of derivatives?
I have only a quick question. Does Kubuntu, Xubuntu and others has the same level of security like the plain Ubuntu? I mean security for the desktop environment, because I know that for others it has, ...
-1
votes
3answers
43 views
Will my system remain safe, if i run ubuntu (through VMware) on windows - for virus purposes?
i want to use both windows & ubuntu, but i mostly work in windows & that i use ubuntu only for virus purposes(virus-free). By doing as mentioned above, will it be effective in removing the ...
0
votes
1answer
20 views
How to recover faulty pam.d configuration?
I am struggle to login after configured kerberos in pam.d.
Eventhough , I tried with root user , it also no use. I know, I did something wrong on that but how can I restore the pam.d ...
15
votes
3answers
671 views
How to sandbox applications?
I want to run small untrusted programs, but restrict them from accessing any files outside of their folder, network access, and everything else that they don't really need. What is the simplest way to ...
0
votes
0answers
28 views
Integrity check against package repository?
When there are security updates, I review and install them as soon as possible and think about using automatic updates.
From time to time I want to boot from a clean boot CD and check if the system ...
0
votes
1answer
27 views
Disable security warning
How I disable Unverified Publisher security warning box ? I want setup my Ubuntu to start this program after restart automaticaly.
-2
votes
0answers
38 views
How to generate 4 WEP keys with linux commands? [closed]
I have a sagem router. this router is able to generate 4 WEP keys from a given passphrase.
Example:
Passphrase: "hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha"
key1: ...
4
votes
1answer
44 views
How to make my server email me when there are security updates?
There's obviously a way to check to see when an update is a security update. I often get greeted by a motd that says "there are N security updates."
What I'd like to do is have my server email me a ...
2
votes
1answer
33 views
What system tool is reporting this error and how to diagnose?
In the last week, every time I turn my Ubuntu (12.04) machine on, and sporadically throughout operation (about every 1hr that I'm actively using it), I get the following popup from the system:
When ...
0
votes
1answer
18 views
Get Security Updates Delta, and install them
I am writing a script that is supposed to run every day to check if there are any new security updates for Ubuntu.
If there are, it will make a list of those updates, it will download them, and then ...
0
votes
3answers
68 views
WiFi, as it relates to my router
Why does my ubuntu make a WiFi connection ONLY when I disable the security settings of the router?
I have a 3-computer network, 2 of which connect just fine (with the router's security settings ...
1
vote
1answer
23 views
How to display AppArmor denied messages as desktop notifications
How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?
0
votes
1answer
45 views
Isolate Malware in VirtualBox and emulate fake responses [closed]
I have some malware I want to study, intercepting its "phone home" connections, sniffing where and how it is trying to connect and then somehow, by pretending I am the host(s) he is connecting to, ...
-1
votes
1answer
83 views
Is my ubuntu hacked? [closed]
I briefly opened a few ports a closed them all subsequently. However shortly afterwards i got a Warning that a malicious client could be eavesdropping. I then noticed that the following programs have ...
0
votes
1answer
46 views
Does Gwibber/UOA auto-follow people on twitter without my permission?
Each day I gain new twitter followers whom I don't want to follow. I have to unfollow them manually. I have checked my twitter authorized apps section. Only two of them have permission. ...
2
votes
0answers
26 views
How can I configure sudo to prompt for password and show the executed command?
The title says it all. How can I configure sudo to prompt for password and show the executed command?
Rationale: if something gets aliased in the shell or I end up executing a function sudo instead ...
1
vote
1answer
40 views
Should I install non-repository software as root or as my user?
What is the right way of installing programs that are not available in repositories: should my user own the binaries and keep them in ~/bin/, or should root own the binaries and keep them in, say, ...
0
votes
1answer
51 views
Some doubt about root password
I was looking for installing a LAMP in my personal PC but I can't create folders in /var/www so i run this little script in my console:
sudo passwd -l root
And I don't know if this an issue ...
4
votes
2answers
61 views
Will my data be safe if my laptop is stolen when there is FDE and auto-login?
My SSD supports Full Disk Encryption (FDE). I have enabled FDE and set a password in BIOS.
In case my laptop is stolen or lost, I want nobody to be able to get my data. Is it now secure to allow ...
14
votes
3answers
240 views
What automated intrusion notification/detection setup is good for home desktop use?
I've been using Linux for quite a while now and I always feel the need to have a passive software / script setup which can alert me of any suspicious network activities like scans, failed login ...
1
vote
1answer
56 views
Is it worth uninstalling the GUI to lower the attack surface of my Ubuntu server?
I note that there are similar questions on how to remove the GUI from an Ubuntu install, so I know the technique, I'm just wondering is it worth doing?
To explain, I have a Ubuntu server hosting ...
2
votes
1answer
124 views
how to install KeePassX 2.0 Alpha on ubuntu
On the KeePassX site there is only a Linux version 0.4.3 for download.
how can I install the latest version on Ubuntu?
The problem is, that
Version 0.4 is basically unmaintained.
see:
...
4
votes
2answers
78 views
Is the lock screen secure enough to prevent “Mallory” from accessing the encrypted drive?
I use truecrypt to encrypt one of my drives and I would want to leave the computer running processes that use information of that drive while I'm not home, I've tried suspending it but everything ...
1
vote
1answer
17 views
Turning computer on log?
Is there a way to find out when my computer was turned on even if user was not successful on logging in?
2
votes
0answers
46 views
Prevent that TrueCrypt gets Administrator rights
If I try to open a TrueCrypt drive, TrueCrypt asks me for my administrator-password (also when I am a normal user).
I know, that i can prevent this password-asking by editing the sudoers file = giving ...
6
votes
2answers
137 views
How can I be sure that the updated packages are not compromised?
When trying to install tmux I get an error that Untrusted packages could compromise your system's security, similar to the situation in this thread. I ran aptitude update and the package installed ...
1
vote
0answers
14 views
How to allow non-admin users to use Software Center and update the system? [duplicate]
IÂ want to configure a laptop for someone who is not a technical person.
I want her to be able to:
install software from the Software Center
uninstall software
update the system
install printer ...
0
votes
0answers
82 views
Unable to fork: Cannot allocate memory
frequently getting 'fork: Cannot allocate memory' when running commands over ssh. I have 64Gb of RAM and usually 1~2Gb free.
swap is more than 8gb free
Ubuntu version:"Ubuntu 12.04.2 LTS" Desktop ...
1
vote
1answer
150 views
Setup firewall: ask user to allow new incoming/outgoing traffic?
I'm using Ubuntu 12.10 and as I know there is already a firewall on any ubuntu system. It's ufw and because I like fancy gui stuff I can use gufw, that's very nice.
Now I would like to configure this ...
1
vote
1answer
64 views
Allowing VNC only for specific MAC Address?
I just want to allow only for a specific MAC Address(es) to have VNC to my Ubuntu 12.10. This would be pretty cool, because I think if I use password authentication + MAC Filter = safe.
I saw I could ...
0
votes
0answers
17 views
How to fix Bug in Update-Manager in Ubuntu 12.10? [duplicate]
Please report this bug against the 'update-manager' package and include the following error message:
E:Encountered a section with no Package: header, E:Problem with MergeList ...
0
votes
0answers
26 views
Where to download md5sum.txt for distro with applied security updates
I am looking for a way to find out if specific files are genuine.
md5sum.txt should be on the ISO-CD but I didn't find a location to download it seperately for the current version.
The system is a ...
2
votes
1answer
73 views
Help needed to fix security issues discovered using Nikto on Ubuntu server 12.10
What can be done to mitigate theses security issues found by Nikto on all our Ubuntu servers version 12.10?
OSVDB-2799: /cgi-915/dose.pl?daily&somefile.txt&|ls|: DailyDose 1.1 is vulnerable ...
-1
votes
1answer
191 views
How can I prevent the hacking of my wired and wireless networks by tools like feedingbottle? [closed]
I am network administrator and I am always worried about network security as I know people use different techniques of hacking to penetrate wireless and wired networks. Recently I came to about ...
1
vote
2answers
186 views
Using linux/ubuntu to combat windows flash drive malware?
I had asked this question on ITSecurity @ Stack Exchange also. There may not be may linux distro users in ITSec, but obviously there are many here. So, I think that it might be appropriate to put that ...
0
votes
2answers
113 views
fail2ban or denyhosts to block invalid username login attempts
Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have:
[ssh]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
...
1
vote
1answer
91 views
Need help for locking down linux desktop
Good morning all.
So I work with a disabled guy and he has a computer. This guy asked for assistance, I put windows xp on his computer and I discovered that he loves deleting files (he managed to ...
1
vote
2answers
102 views
I can not password protect logging into my account in Ubuntu 12.10
When I start up Ubuntu 12.10 I see the login screen. I have my account and a guest account as the choices. When I choose my account by clicking on it, I automatically get logged in with out being ...
0
votes
1answer
28 views
Account Login via Online Security
Is there any way I can setup my Ubuntu PCs authentication (login) username / password system via some cloud / online account. So I can only access my PC using that online (or may be cloud) username ...
8
votes
2answers
371 views
What if NO update, security or otherwise is ever installed? [duplicate]
I am in need of expert advice:
Our system admin who is new to Ubuntu in particular and *nix in general is reluctant to install any updates. His view is what if after installing updates the system ...
1
vote
1answer
39 views
What are all possible ways to login into an Ubuntu system?
I am running Ubuntu 12.10 on my laptop and I would like to make a set up such that without a login password, no one would be able to login into my system. Currently it seems that one can, quite ...
2
votes
0answers
84 views
How can I add an SSL client certificate/key globally in Ubuntu?
I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
2
votes
1answer
39 views
Is the key acquired from running gpg --export-secret-key encrypted or cleartext?
How to share one PGP key on multiple machines details how to export your gpg secret key into a file with gpg --export-secret-key -a > secretkey.asc. What the answer does not state is whether the ...
5
votes
4answers
185 views
Autoexec.bat equivalents for Ubuntu?
On Ubuntu there must be several "autoexec.bat" equivalents as I can see files like rc.local which seem to do very little because the comments in the file says it doesn't work by default and I tried ...
0
votes
0answers
36 views
Allow Users to do just shy of everything Root can do
I would like to setup individual instances of Ubuntu 12.04 for a variety of users that I want to be able to install software form the Ubuntu Software Center from GUI but not to see or change a file or ...
