Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
13 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
22 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
0
votes
0answers
13 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
1
vote
2answers
25 views

Is this a security risk/concern?

According to: http://wiki.secondlife.com/wiki/Linux_Viewer#Installing_and_Running The Second Life Linux client entirely runs out of the directory you have unpacked it into - no installation step ...
0
votes
0answers
18 views

Nessus SNMP security warning

I ran a Nessus scan on my Ubuntu 14.04 machine. I received the following: High: SNMP Agent Default Community Name (public) Description: It is possible to obtain the default community name of the ...
0
votes
0answers
12 views

problems gaining root access and installing software due to authentication. [duplicate]

I have a laptop that had ubuntu installed, however though many ownerships, the pass word is lost, anyway of removing this absolute shite of an install block. every time I try to do something it asks ...
0
votes
1answer
35 views

If Android is Linux then why can they get malware? [closed]

OK so I know that GNU/Linux is not immune towards malware and that it is because it implements a multi-user environment where users are granted specific privileges. Is it GNU/Ubuntu/Arch/Android and ...
0
votes
1answer
49 views

Connect to my College's WPA from Ubuntu 14.04 LTS

I have Ubuntu 14.04 LTS, and am running it on a Sony Vaio VGN-CR12OE. It is the only operating system. I am trying to connect to my college's WPA WiFi. My settings for this WiFi connection are as ...
0
votes
2answers
66 views

What do LISTEN and ports mean in netstat? [closed]

I have been monitoring my system lately and I have found some strange things are running on my system. Can anyone please explain what they are and why same program use several processes? Output of ...
1
vote
2answers
45 views

Do logins by the gdm (or lightdm) user in auth.log mean my system is breached?

Please look at this auth.log (from Ubuntu 14.04) I have provided and tell me who this gdm user is and why there are all these unauthenticated logins? I am freaked out; please help! Here's the ...
1
vote
1answer
21 views

How do you detect file changes

Since Linux is vulnerable to a number of similar vulnerabilities as windows. I'm trying to find a daemon that catalogs and alerts me/user of any and all file changes as well as file additions. Is ...
2
votes
1answer
37 views

How to prevent data from being written into a directory?

Or: How to make a directory write protected, for all users until unlocked again?
1
vote
2answers
32 views

What lines should be commented out in my sources.list file?

I have just updated from Ubuntu 12.04 to 14.04 last weekend. I haven't downloaded any extra programs as of yet. I checked my sources.list file and it has the following lines in it: deb ...
0
votes
0answers
11 views

Locking all setting

Is there a way to lock all the system setting on ubuntu so people cant change them without permission? example removing printers. I am taking care of a schools computer room and teachers/students are ...
0
votes
0answers
27 views

How can I lock Seahorse GnuPG Keys?

since not long ago I've started to use seahorse to manage my encryption keys, and at the moment I'm finding myself a bit baffled about what it appears quite a security hole of the system... In fact, ...
0
votes
0answers
9 views

Prevent Network Injection

I read this article: http://gizmodo.com/pro-hackers-could-be-spying-on-you-through-youtube-1622367382 I'm running Ubuntu 14.04. How can I prevent network injection of my internet browsing traffic? ...
1
vote
2answers
56 views

What should I do to avoid my roommate from changing my password through using system recovery mode .?

He did this last time when I left my laptop at room. Opened the system recovery mode from advanced Ubuntu options and changed the password using 'passwd usrname ' command.Is there anything I can do ...
-1
votes
0answers
9 views

Faillog empty - should i be worried?

On my machine of 4 years old, I have probably mistyped my password a zillion times. Yet, nothing shows up in the faillog. Doing faillog -a gives me a bunch of: username 0 0 01/01/70 ...
0
votes
1answer
36 views

Are there really security risk when running Wine? [duplicate]

I remember reading somewhere that since Wine's job is to pretty much emulate Windows so that you can run Windows programs, it puts a risk on your Linux machine since Windows Viruses can also run ...
0
votes
1answer
34 views

I have some questions about Firewall [closed]

So I am pretty new to Linux (With the exception of Android), and being use to the old ways of Windows pretty much all I had to do for Firewall was turn it on and forget about it. However with Ubuntu ...
1
vote
2answers
21 views

Don't remember PGP passphrase until end of session [duplicate]

To use my PGP key I always have to enter my passphrase. But as it happens, I have to unlock the key only once for every session. The desired behaviour would be, that I have to unlock the key each time ...
0
votes
2answers
37 views

wget security.ubuntu.com not working on ubuntu

We are able to use wget for other URLs, such as google.com, but wget security.ubuntu.com not working and giving output: Resolving security.ubuntu.com (security.ubuntu.com)... 91.189.92.200, ...
-1
votes
1answer
17 views

How to accept only essential security updates?

sometimes i am getting problem in software updates. So i would like to get only essential security updates and also need to make it as default. Please let me know is there any way to sort out that?
1
vote
1answer
19 views

Terminal message “Access control disabled”

Every time I open up the terminal the message access control disabled, clients can connect from any host pops up in the first line. Then the terminal behaves as usual, no errors at all. But this ...
1
vote
1answer
48 views

Confused about the security of ubuntu (Linux)

Assume I have a laptop with ubuntu installed and two users abc and root. Both users are password protected. It is possible to reset root password using live CD or USB using chroot which would mean ...
0
votes
0answers
18 views

There doesn't seem to be a decent guide for Stealth could someone either write one or point me to one?

Stealth Integrity Scanner I'm very interested in being able to setup an IDS and this one seemed like it was really cool and worth while and fairly underrated. I've not really found much on what a ...
1
vote
0answers
69 views

SSH connection failing since I changed server port number

Yesterday I changed the default ports on the server from 22 to 1993 then restarted but now I can't connect at all. I used ssh -i keyname.pem ubuntu@remotehost to connect then sudo vi ...
1
vote
1answer
40 views

Is it possible to setup a root like user for global read only access?

I'm hoping to give a security scanner a user that can read everything but not change or execute anything. Is this possible and if so how?
1
vote
0answers
12 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
0
votes
0answers
23 views

How do you set up a systemwide read only user for a security scanner

I'm hoping to play with STEALTH https://apps.ubuntu.com/cat/applications/precise/stealth/ It suggests the creation of a read only access user that the integrity scanner can use to access its target ...
0
votes
1answer
21 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
1
vote
1answer
19 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
0
votes
0answers
27 views

Is this a bug or normal (mis) behavior?

When I sudo-rebooted from the top-right menu, after Unity closed I was taken to an open tty, where I saw my login password in plaintext where I had typed it in earlier. In Ubuntu-bug, a specific ...
-1
votes
0answers
33 views

Security questions using ubuntu

I am a new user and I will be installing Ubuntu on my laptop later on today. Apart from installing some add ons to Firefox do I need antivirus software and a firewall. If yes then what would you ...
2
votes
0answers
24 views

What is the difference between security.ubuntu.com and archive.ubuntu.com? [duplicate]

The various releases have a -security channel in archive.ubuntu.com. How does that channel differ from the security.ubuntu.com? If I have to set up a local mirror, how does security.ubuntu.com come ...
14
votes
6answers
4k views

Does spyware exist for ubuntu?

Someone I know said he had put spyware on my computer. Is he talking crap? I've been using Ubuntu 12.04 for nearly 3 years now and I've never seen any type of spyware, remote keyloggers or RATS ...
0
votes
0answers
56 views

Help recovering from a hack and a malware warning

On Thursday (2014/7/24) morning I discovered that one of my Ubuntu systems was hacked. I believe it may have been the malware NetWire. I was able to see some traffic from the internet directed at ...
0
votes
1answer
47 views

How can I make my WiFi hotspot secure?

I just created a wifi hotspot with an adaptor, and it says that it uses WEP security. I may be mistaken, but isn't WEP security not really secure? How can I make it more secure, such as WPA or ...
2
votes
1answer
78 views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
-1
votes
2answers
36 views

Security updates for old-releases

I know that I should upgrade to a newer supported Ubuntu version if possible, but: if you have no possibility to upgrade (for reasons not important here) you have to use the old-releases archive from ...
0
votes
1answer
27 views

Possibility that ubuntu machine infected by FTP malware

I know that this question might be duplicated but here is what happened. Our web server got attack by injecting the spam links into server script file (Web server running ...
0
votes
1answer
44 views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
0
votes
1answer
35 views

Ubuntu 13.10 end of support

13.10 ends support today, I want to do a clean install of 14.04.1,but it arrives next week,is it highly risk to wait fot 14.04.1 one week with 13.10 no supported? Thanks.
1
vote
0answers
28 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
22 views

Moving away from ROOT user

I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really. However I found out that since the day they got their VPS everything, ...
26
votes
1answer
1k views

How to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?
23
votes
6answers
2k views

How can I confirm that the binaries in my Ubuntu are from the source code it should be from?

Like 99% of users, I install Ubuntu from ready-made binaries. How can I verify myself that those binaries are in fact from the original source code from Ubuntu? It would be good to verify that ...
1
vote
0answers
29 views

install ubuntu on a hardware AES encrypted flash drive

I couldn't find the answer to my question after hours of search. I hope someone can help me out. I would like to install ubuntu on a flash drive. I followed to standard instructions for installing ...
1
vote
0answers
31 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
0
votes
1answer
43 views

Restrict user access to /proc and /sys

I have one big problem: setfacl does not seem to work for /proc and /sys, but I would like to restrict one specific users rights and I do not find it acceptable for that user to read stuff like ...