Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
19 views

Is there a way to tell which application last accessed your camera?

Is there an application which will tell me which programs have last accessed my camera?
0
votes
1answer
19 views

How to password-protect an individual folder

I have to password-protect two folders: folder A is on my computer's hard drive, and folder B is on an external hard drive. Regarding folder A: I have tried encrypting folder A using Cryptkeeper but, ...
-1
votes
0answers
18 views

Ubuntu Server Redundancy and Security [closed]

I've recently set up an ubuntu 14.04 Server for one of our computer repair shops. It is used as a Samba, FTP server and will also host a VM eventually. The server is used to store customer data and i ...
0
votes
0answers
18 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
9 views

Why is Ubuntu only using SHA1 for WDE?

I'm wondering. In times where Hardware gets faster every week and all the NSA thingies about Snowden and such, why is Ubuntu still using Sha1 when encrypting the system over the GUI (the installer) I ...
0
votes
2answers
51 views

Is it safe to download and open files? [closed]

I understand that a virus and malware can exists in Linux. However, I have read a lot about how Linux is not vulnerable to viruses because of a variety of reasons. So does that mean that I can ...
0
votes
0answers
12 views

Asus K52Jr webcam notification LED always lit

I have been using Ubuntu 14.10 on my Asus K52Jr notebook for some time now, and this always bothered me. The webcam's LED is always lit (on Windows it only lights up if it's in use), and I'm concerned ...
0
votes
0answers
27 views

java security prompt even with exception list

I'm trying to run an applet of a website, and a prompt pops up with "Application blocked by security Java" but I have this website on the exception list! I'm running ubuntu 14.04 and Java Version 8 ...
0
votes
1answer
38 views

How to add user from apache user group in linux

The question is simple. How we can add user without root privileges (because www-data is very important for security)? For example adding user with root user: sudo adduser user group Without root ...
-2
votes
0answers
24 views

Hosted server has been hacked [closed]

I have a ubuntu server which hosts several sites. This was setup by a previous IT guy. But one of the sites have been hacked. I needed help on how to get make it more secure and prevent any future ...
1
vote
1answer
27 views

ip forwarding enabled at every boot

Recently I noticed that cat /proc/sys/net/ipv4/ip_forward returns 1, something that is not recommended and I generally do not enable things I do not need that increase my attack vector. I thought, ...
1
vote
2answers
36 views

Can Port Forwarding to a Windows VM cause Security problems? [closed]

I have question. My physical host is Ubuntu 14.04. I installed Virtualbox with a Windows Server 2012 VM with IIS. I set port forwarding from my Ubuntu host to my vm. If my virtual Windows Server ...
2
votes
0answers
63 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
0
votes
0answers
59 views

Migration from Truecrypt to LUKS

I am looking for an alternative for True-crypt which can be used both at the disk level and with portable media. Having installed Ubuntu 14.04 ticking 'with disc encryption' enabled, it works very ...
1
vote
1answer
112 views

How to run an application on a sandbox? [duplicate]

I'm interested in running Skype on a sandbox. I don't want to use a virtual-machine however, since it's overkill just for a program. I don't need Skype's video or voice capabilities to work, chat ...
1
vote
1answer
29 views

New to Ubuntu-updates, security, on Acer Aspire One ZG5

All, I'm completely new to Ubuntu but am looking forward to working with it. I have an Acer Aspire One ZG5 (150?) from about 2008. From what I can gather, I should install 12.10 (this appears to be ...
0
votes
1answer
24 views

How to perform detail packet capture on Ubuntu firewall?

I've routed internet traffic of my other systems on this ubuntu linux system where I have configured packet forwarding. but still I am unable to get internet on other systems. Hence I want to ...
2
votes
1answer
31 views

Will creating a directory inside a system directory with 777 permission cause security vulnerability?

Can creating directories with 777 permission inside system directories cause any security weakness? For example, say I open a directory called Custom inside /usr/share/backgrounds/ and give it 777 ...
0
votes
1answer
50 views

Ubuntu 14.04 and 14.10 Can't login to some secure website logins

I can generally google to find solutions to problems I have with Ubuntu, but this one has me stumped. I have been using Ubuntu 14.04 for several months, on this computer. I use Chrome as my primary ...
2
votes
3answers
408 views

How can I tell if a CVE has been fixed in Ubuntu's repositories?

Today a couple of buffer overflows in NTP were announced 1, 2. It looks like updating my system to fix these issues is in order. How can I find out if they have been fixed in the Ubuntu ...
1
vote
1answer
35 views

Looking for network surveillance tool

I sometimes use / test software that cannot be found in the apt tree. The software comes from all over the internet. When executing the software I create an extra user for this particular software and ...
3
votes
2answers
109 views

Where to store a Keepass password file?

Where would you recommend me to store a Keepass file? Usually I have my personal documents in my Dropbox account. Would it be safe to use Dropbox for this file?
7
votes
2answers
232 views

/var/log suspicious entries

For fun I tailed /var/log/auth.log (tail auth.log) and there were many of the following: sshd[16225]: Received disconnect from 203.100.83.32: 11: Bye Bye [preauth] The ip appears to be from ...
0
votes
1answer
67 views

How can you test for a DNS leak for an OpenVPN provider?

I'm currently using VPNBook with OpenVPN. I just recently learned about DNS leaking. Is there a way to scan for it?
0
votes
1answer
22 views

How do I unlock system tools such as users and date and time

I'm using Ubuntu Server 14.04 with Gnome and suddenly I can't unlock system settings such as Users and time & date: the unlock icon is grayed out even though I'm an administrator and terminal ...
0
votes
1answer
87 views

Package with bad signature got instlaled on second try: how?

I executed my daily sudo apt-get update && sudo apt-get upgrade command, and got a bad signature error when hitting google chrome: Fetched 2178 kB in 2s (981 kB/s) Reading package lists... ...
0
votes
1answer
256 views

Can I install all the hacking tools of KALI on Ubuntu12.04 LTS?

I want to know is there any way to install all hacking tools of kali on ubuntu 12.04 ? If yes then pls tell me how ? like sqlmap , nikto , john , aircrack-ng etc . Thanks.
0
votes
1answer
33 views

Do I stick with 12.04 lts or upgrade to 12.10 or higher?

I recently bought a laptop with ubuntu 12.04 LTS. I have only used windows so far, so I admit I'm a noob at ubuntu. Since I only need it for reading, writing papers, entertainment and communication, ...
1
vote
2answers
38 views

A Software Center review claims Ruby has a virus. Is it accurate?

I'm working on a Javascript webapp and trying to figure out how to add documentation. It seems like the only option is to install something that lives on a server. I thought maybe I'd try JSDuck. It ...
0
votes
0answers
11 views

ima-evm in 14.04 server?

I was looking for an Ubuntu-packaged ima-evm-utils for Trusty server (amd64), but no luck. (It is available in 14.10.) While I can build this from source, it would be better to have a supported ...
1
vote
0answers
22 views

How to config PORT KNOCKING on CSF ubuntu server and access it by linux?

I'm trying to run port knocking work on a CSF on a small VPS, i setup this: 1 - the result of csf first test ok 2 - TCP_IN = "53,80" TCP_OUT = "53,80,113,443" UDP_IN = "53" UDP_OUT = "53,113,123" ...
0
votes
0answers
34 views

How can I use public-key encryption for luks?

I have been running luks with the following commands: $ sudo dd if=/dev/urandom of=/keyfile bs=1024 count=4 $ sudo cryptsetup luksFormat /dev/XXX keyfile $ sudo cryptsetup luksDump /dev/XXX And it ...
0
votes
1answer
44 views

Wrong timestamp in syslog

I was taking a look on my syslog, and I found this: Nov 30 22:30:01 nori-hidamari NetworkManager[963]: <info> (wlan0): canceled DHCP transaction, DHCP client pid 2580 Nov 30 22:30:01 ...
0
votes
0answers
39 views

Is bash safe yet on 10.04?

Running shellshock test from https://shellshocker.net/ on updated 10.04.4 LTS 32.bit says it is still vulnerable to CVE-2014-7186 and CVE-2014-7187 CVE-2014-6271 (original shellshock): not vulnerable ...
0
votes
2answers
37 views

Can anybody read my password protected hard drive files using my hard drive as secondary hard drive?

So i have a laptop with ubuntu as OS. now can anyone having physical access to my hardrive ,see my data just by simply using it as secondary hard drive in another laptop or machine?
0
votes
0answers
15 views

How to set up apt-get ssh transport with chroot

I want to set up a private APT repository that is only accessible by a shared public key, via the ssh transport. The only problem is, this also gives ssh access to the machine. I would therefore like ...
1
vote
0answers
27 views

Application Whitelisting

How does an Ubuntu administrator implement application whitelisting? For example, if I create a LAMP server and I only want SSH, Apache, MySQL and PHP to be able to execute. How can I prevent any ...
0
votes
1answer
35 views

Every installation on desktop asks for passwords that I never set in the first place

Everytime I boot up and try to log in using ubuntu, it asks for a username and password: which I have never set in the first place. So I log in under guest account. But when I try to change ANYTHING ...
0
votes
1answer
22 views

Can I make Apache more secure by removing read access from the others group?

It says in the Apache documentation security tips to set your server root directory and sub-directories to be owned by root, with a group of root and to not be writeable by non-root users. However it ...
0
votes
0answers
30 views

Ipsec connection fails between two hosts

I have two systems: Host1 (IP address - 10.1.0.1) and (Host2 IP address - 10.1.0.2) I configured IPsec on both machines as below: Host 1 config (/etc/ipsec-tools.conf) #Host 1 /etc/ipsec-tools.conf ...
0
votes
1answer
20 views

Can program crashes during development affect my system's security?

I have been using Ubuntu for some time, and I loved it! I'm feeling way more safe now. But, I'm a Computer Science Student, and I have to code a lot. And I have been creating various codes, and it ...
0
votes
0answers
11 views

IPsec XFRM bridge

I am new to IPsec, am trying to learn about XFRM bridge acutely. But am not getting enough information around the internet. Can someone help me by providing informational data and links regarding XFRM ...
1
vote
1answer
36 views

Display PPA from which package will be downloaded during upgrade

I have many PPAs installed on my Trusty system. However, I feel that they might try to sneak packages into my system other than those which I include them in the first place. Technically, after adding ...
12
votes
1answer
225 views

How to block specific apps from opening in specific accounts

How to block certain applications from opening on certain accounts (eg: Stop account John from opening Firefox or Gimp). It is assumed this is for the GUI and not the terminal and would only apply to ...
10
votes
2answers
786 views

How do rootkits get installed on to a ubuntu server?

I've seen a few posts on checking for rootkits but haven't been able to find any information on how they get onto a linux system. In particular if you exploit a bug in a php web site (yes I'm talking ...
0
votes
1answer
9 views

Account Restrctions

i have tried this : ALL=/usr/bin, !/usr/bin/passwd, !/usr/bin/su but not success. is it possible user with sudoers permission cant able to change any password except his own user account ?
1
vote
1answer
32 views

Security of Ubuntu downloads

When I try to download Ubuntu Desktop and try to save, it shows different URLs. What is the difference between these different URLs. Which is the safest one? ( eg. releases.ubuntu.com ; ...
1
vote
1answer
30 views

Uninstalling Desktop sharing programs

Sine I want the most security as possible, I'm removing some programs that could give the access to remote desktop. In this case, I removed the Remmina Desktop Client (I think, if it comes with ...
0
votes
0answers
22 views

A question about logs (security)

I was taking a look on this page, about knowing if I'm being hacked, but I got a question. It says that: If large chunks of time (more than 5 minutes) are unaccounted for in a log file while the ...
1
vote
1answer
97 views

How to force SMB2 protocol in samba?

For security reasons, I'd like to disable the SMB1 protocol in samba. Is it possible? I'm running Ubuntu 14.04 LTS.