Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
19 views

Possibility that ubuntu machine infected by FTP malware

I know that this question might be duplicated but here is what happened. Our web server got attack by injecting the spam links into server script file (Web server running ...
-1
votes
0answers
57 views

Still dealing with a hacker. Now dealing with clear XSS clickjacking in chromium [on hold]

I don't need people that don't believe me. I've been dealing with a hacker for a very long time. A hacker who has a hate blog dedicated to me. I've submitted complaints to IC3 but no one's ever gotten ...
0
votes
1answer
22 views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
0
votes
1answer
32 views

Ubuntu 13.10 end of support

13.10 ends support today, I want to do a clean install of 14.04.1,but it arrives next week,is it highly risk to wait fot 14.04.1 one week with 13.10 no supported? Thanks.
1
vote
0answers
12 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
21 views

Moving away from ROOT user

I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really. However I found out that since the day they got their VPS everything, ...
24
votes
1answer
1k views

how to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?
22
votes
6answers
2k views

How can I confirm that the binaries in my Ubuntu are from the source code it should be from?

Like 99% of users, I install Ubuntu from ready-made binaries. How can I verify myself that those binaries are in fact from the original source code from Ubuntu? It would be good to verify that ...
1
vote
0answers
18 views

install ubuntu on a hardware AES encrypted flash drive

I couldn't find the answer to my question after hours of search. I hope someone can help me out. I would like to install ubuntu on a flash drive. I followed to standard instructions for installing ...
1
vote
0answers
26 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
0
votes
1answer
34 views

Restrict user access to /proc and /sys

I have one big problem: setfacl does not seem to work for /proc and /sys, but I would like to restrict one specific users rights and I do not find it acceptable for that user to read stuff like ...
0
votes
0answers
14 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
0
votes
0answers
57 views

My grandmother's computer has malware [on hold]

So, my grandmother can barely use the Internet. I placed a link to Netflix right on her desktop. That's all she ever does on the thing (no ads on Netflix). My siblings (always not caring what they ...
2
votes
1answer
50 views

Sudo is also user login password - why? how to change?

When installing Ubuntu I can create a user with an encrypted folder, what I always do. Now after the installation the login password for this user is also the sudo password. Is that how it should be? ...
0
votes
0answers
11 views

Are Ubuntu upgrades signed or encrypted?

When you download updates from the standard Software Updater (which I'm assuming is just a graphical front-end for apt), are these updates signed or encrypted between the server and the user, or are ...
0
votes
0answers
16 views

Want to know how how secure my system is with current settings

My system is at kernel 3.15.2 Mainline. I have Enabled the firewall with all ports closed. I have very strong passwords set for BIOS, Drive Encryption, and login SSH is Disabled. I have installed ...
-1
votes
0answers
166 views

Strange behavior on ubuntu

I have been having a recurring problem with my PC, I eventually installed Ubuntu hoping it would solve my issues but it does not seem to. I believe I was the victim of a PNP attack to my router if ...
0
votes
2answers
37 views

How to store network-manager settings in home

I'm using Ubuntu 14.04 with the network-manager. It stores all Information about wireless networks, VPNs, ... in /etc/NetworkManager/system-connections and I was just wondering why... I thought the ...
0
votes
0answers
15 views

are ubuntu software center mirrors safe? [duplicate]

Could the admin of a mirror server/ isp attach a trojan into or fake a package? It's all my question. This sentence is just spam. You don't need to read. Why it is difficult to post a question here. ...
0
votes
0answers
54 views

Is fingerprint-gui a security hole?

I have a Thinkpad T440 on Ubuntu 14.04. I use fingerprint-gui to allow me to login and use sudo by swiping a fingerprint. The worrying part is that anyone can run the fingerprint-gui program to ...
1
vote
1answer
51 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from the Arch wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully ...
0
votes
0answers
27 views

Why do I have to keep entering my password when using sudo? [duplicate]

When I use ec2, whenever I enter sudo I never have to enter a password. I have my own VM server now and I created a user using this command when I was a root: usermod -a -G sudo deploy So now when ...
0
votes
1answer
17 views

Ubuntu virtual machine guest-only internet

Disconnecting internet is a great security advise but i want to check my emails. is that possible to use Ubuntu as host without internet connection while in a guest OS in Virtualbox is able to browse ...
1
vote
3answers
203 views

cryptsetup - LUKS vs. Truecrypt

this question may already been made but I'd like to know how secure LUKS / cryptsetup is compared to TrueCrypt. What is the advantage and what is the disadvantage?
1
vote
1answer
48 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
0
votes
1answer
21 views

Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?

My title pretty much says it all: Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?
0
votes
1answer
37 views

Ubuntu 14 - unable to use sudo echo to overwrite files [duplicate]

For ubuntu 12.04 bash scripts, I used to be able to run commands like the example below to overwrite files: sudo echo 'line1 line2 line3' > /etc/some/config/file.conf Ever since Ubuntu 14.04, ...
-1
votes
0answers
19 views

Zimbra DelegateAuthRequest

Since a time, i suspect some of zimbra admin users use backend to spy other users accounts with the "see mail" button. In zimbra log, when some admin user log in to a common user, looks like this: ...
1
vote
1answer
162 views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
0
votes
0answers
38 views

Is Enabling UPnP in Transmission Worth the Security Risk?

I'm wondering if enabling UPnP so that Transmission can select a random port on start worth the security risk. I am not asking if having a listening port is worth the risk but instead is it worth the ...
0
votes
1answer
25 views

changed permitrootlogin to no, but I can still login as root

I just created a new server (VM) and I setup SSH, I can login fine. I created another user account, added it to the admin group and sudo works fine. Now I want tried to disable the root login, so I ...
0
votes
1answer
49 views

Unknown Micropohne can hear unknown person (weird)

I tried to capture a video using webcam and VLC. On Menu I select "open capture device". VLC then presents my webcam and 4 audio devices named hw:0,0, hw:0,2, hw:1,0 and hw:10. Because I don't know ...
1
vote
0answers
28 views

Why isn't Bastille in Ubuntu 14.04 [duplicate]

Bastille is missing from the Ubutnu 14.04 universe repository. The main question - what should I do to replace the security provided by Bastille? There must be a reason it was removed so how do I ...
0
votes
0answers
34 views

I am unable to generate a gpg key through the keyring program

Whenever I try to generate a gpg key through the system's GPG program, it asks for my name, email, and password then everything except for the GPG program's main window disappears. Upon using gpg ...
-2
votes
3answers
91 views

Penetration and Security of ubuntu operating system and it's working

I was reading about ubuntu and linux systems that they are immune to malware and virus attacks due to their well managed and good architecture. So the question is how much secure a ubuntu system is ...
-1
votes
1answer
44 views

How do I remove GPG private keys from memory? [closed]

When I do the following: gpg --decrypt somefile.pgp I see a graphical dialog come up asking me for the passphrase for my private GPG key. After that, subsequent runs don't require a passphrase, as ...
-1
votes
1answer
14 views

rpm -q --verify --nouser --nogroup --nomode --nomtime PACKAGENAME

What is equivalent to following line in Ubuntu / Debian world ? Note: I have original .deb files and i want to check which files differs from original zimbra-*.deb for Z in $(rpm -qa | grep ...
0
votes
1answer
21 views

Why is each security update file size so large?

The 'Software Updater' just asked me to download a security update which has a filesize of 62MB. And these updates are quite frequent. My questions are: Why are they this big, if, by the frequency ...
0
votes
0answers
21 views

How to create a fake packet that can be used in Ettercap filters

I am working on Ettercap filters and came across inject(file) function provided by it. This function simply injects the contents of file specified in the current packet. We can also drop the entire ...
4
votes
3answers
3k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
0
votes
2answers
41 views

Is it safe to alias rm to safe-rm?

We are happy to use safe-rm as a replacement to rm, but is it considered safe to alias it? e.g. alias rm='safe-rm'
-1
votes
1answer
21 views

Problem to current security

I have install ubuntu in my lap . But after restarting my lap there is a message that " ubuntu has blocked by current securty policy" what can i do?
0
votes
1answer
35 views

How to temporarily block network access to root user?

Just want to temporarily block network access sometimes, even to the root user. How can I do this?
0
votes
0answers
43 views

how to disable usb storage in ubuntu 13.10?

I want to block my all my USB mas storage and allow only devices like keyboard and mouse . I'm able to do so by following the KB. But the issue is that when I connect devices like mobile phones & ...
0
votes
0answers
29 views

Does the network proxy run after the VPN connection, no leakage whatsoever?

I'm inside a Ubuntu 12.04 Virtualbox guest (Bridged Adapter) and by finding 'Network' in the GUI, I can access three things, a VPN which I've configured to be an OpenVPN to a VPN, a 'Wired' connection ...
1
vote
0answers
35 views

does ubuntu 14.04 use ascii-armor and how to turn it on/off?

does ubuntu 14.04 use ascii-armor and how to turn it on/off? the purpose is to test some exploit and knowing that would help, I'm still in the learning process. I'm already aware of the stack ...
1
vote
2answers
29 views

Enable to connect to remote server using ssh but i can connect one remote server

When I am connecting to remote server using ip address, I can connect to 192.168.12.141, but I cannot connect to any another remote server. Example: 192.168.12.12, 13, 18 etc... How can I get ...
0
votes
1answer
59 views

Help writing server script to ban IP's from a list

I have a VPS that I use as an openvpn and web server. For some reason, my apache log files are filled with thousands of these hack attempts: "POST /xmlrpc.php HTTP/1.0" 404 395 These attack attempts ...
1
vote
1answer
40 views

What is the different between an Normal and Admin account?

What is the different between an Normal user account and the Admin account in Ubuntu? You must always enter your password if you want do something. Can you give a Normal account "limitations" to do ...
3
votes
1answer
30 views

How can I delete private information in a bug report?

If I report a bug to launchpad using ubuntu-bug it usually adds a bunch of files about my system to the bug, it also adds a automatic generated bug summary to my bug report text. Both the summary and ...