Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
2answers
44 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
0
votes
0answers
13 views

How to block application from accessing the internet using AppArmor?

I need a recipe, I don't want spend time by reading documentation. It is desirable to establish a ban on OUTPUT and INPUT. (my distro is Ubuntu)
0
votes
4answers
46 views

can someone remotely access your ubuntu user account on your computer if they steal your ubuntu username and password

I would like to know if it is possible for someone who steals your ubuntu username and password to remotely access your ubuntu user account on your computer and even see what you are doing when you ...
49
votes
6answers
19k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
22
votes
3answers
12k views

How to block internet access for wine applications?

How can one prevent specific or any wine applications from accessing the internet? When using certain applications under Windows, they were trying to access the internet from time to time without ...
-12
votes
2answers
411 views

I think my PC is being hacked. What should I do? [on hold]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
0
votes
2answers
17 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
11
votes
3answers
5k views

How to prevent system applications (like the Software Center) from asking for password?

I'd like Software Center, Update Manager and some other system management applications to work without asking for password (like sudo does if configured with NOPASSWD) but only asking for a ...
1
vote
2answers
22 views

mitigation of grub attacks

I want to disable the sing user mode attack performed at the grub level by passing kernel parameters. I know a solution that is putting the grub password & bios password.but I want to know ...
1
vote
1answer
36 views

Why system accounts given login shell on Ubuntu 12.04.5 Desktop

I did a fresh install of Ubuntu 12.04.5 64-bit Desktop from ubuntu-12.04.5-desktop-amd64.iso and was shocked to find the login shell of numerous system accounts was set to /bin/sh instead of ...
-1
votes
1answer
39 views

what is the best way to upgrade security patches on ubuntu 14.04

I am trying to upgrade security patches on production boxes. Need to know how can i plan this activity. I also need to make sure that in case something is wrong then how do i roll the updates.
1
vote
1answer
47 views

Am I part of a botnet?

I have Ubuntu 14.10. How do I check if my Ubuntu is part of a botnet? These are the addresses I found with netstat: tcp ESTAB 0 0 192.168.5.122:33195 213.199.179.157:40016 ...
3
votes
1answer
2k views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
0
votes
1answer
15 views

Is there a resource which lists Ubuntu Security Notices?

Every week, I check the Ubuntu Security Notices page, to see what's going on in the world of vulnerabilities. Is there anywhere the information from these posts is kept in a more reviewable format? ...
1
vote
1answer
27 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
1
vote
1answer
14 views

Which Ubuntu Source file implements the management of the nx bit?

As I understand it, Ubuntu has a feature to set the nx bit to prevent stack smashing attacks. What source code file implements this, and during normal operations what process/data structure handles ...
0
votes
0answers
15 views

12.04 auditd will not record user login and logoff to audit.log

Auditd only logs events of types CWD, PATH and SYSCALL. It never seems to detect events of type USER_LOGIN for example. I have enabled rules to catch these login/logout events but they do not seem ...
1
vote
2answers
33 views

Which is actual difference between package update and security updates?

This is probably a real noob question... I would like to understand what the "updates" alerts I get when logging onto my Lubuntu box actually mean. When I read: 35 packages can be updated. 22 ...
0
votes
0answers
10 views

What protocol does the system-wide proxy use?

I'm writing a SOCKS5 proxy (hoping to integrate native encryption options (4096 bit GPG encrypted exchange for the 256 bit AES communications cypher) because I'm bored and need something to do). When ...
1
vote
1answer
76 views

Prevent Skype resolvers getting your IP on Ubuntu

I am running Skype version 4.3.0.37 on Ubuntu 14.10, and I know that on the Windows version there is an option to only allow direct connections to your machine through Skype for Skype contacts, which ...
1
vote
2answers
32 views

how to prevent sudo from executing a non root file?

I want to prevent sudo from executing files not owned by root. so, to allow sudo run such file, I want the file to be: chown root:root filename chmod go-w filename Is it possible to limit sudo ...
17
votes
4answers
20k views

Which free VPN providers support Ubuntu?

Can't find any free VPN provider for Ubuntu. I tried looking into old questions but they seem to be outdated.
1
vote
2answers
58 views

permanent terminal with root

Is it bad to have at all times (one) terminal logged in as root? If so, why? (I leave the window with root terminal usually opened because it's much more comfortable than writing sudo before ...
87
votes
18answers
23k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
0
votes
1answer
26 views

linux detect interface promiscuous mode in my network

how can detect and get the name or mac adress or ip adress of any device in my network that the mode of its interface is promiscous script python. I need help, thanks.
3
votes
3answers
266 views

Why do I have new and strange networks (_not wifi_) in my network manager? 14.04

Ok, so I updated my system to 14.04 last week (running on a Dell XPS13 ultrabook- but I'm not a developer, not particularly technically minded). Some strange things happened with network manager. ...
0
votes
1answer
39 views

make my machine invisible for ping [duplicate]

I search solution to pevent my machine form the attack arp poisoning. I believe to make my device invisible for this haker If they want to ping my machine they have any reply. I don't khnow how I ...
0
votes
0answers
14 views

Is it true that all of updates are pgp signed?

Is it true that all of updates (auto-updates) are pgp-signed so hackers cant replace them by some type of attacks? Also does a pgp-signed downloaded soft from Muon Software Center and Ubuntu Software ...
7
votes
4answers
16k views

What rules to use for UFW?

I've decided to enable the UFW that comes with Ubuntu just to make my system even more secure (especially after watching a video of a person whose computer actually got infected!), and I've enabled ...
-6
votes
0answers
47 views

how I can scan the entire ip the 172.16.2 . * without using loops

I want to know how I can scan all the possible ip for 172.16.2 . * without writing a ball 0-256 . is there a way to write like 192.186.2 . * / 24 to scan all possible byte last field. I need help ...
1
vote
0answers
38 views

Initramfs suddenly speaks IPv6 but no SSH login

I have been running a configuration with an encrypted root partition and network unlock via Dropbear in initramfs for some time on my Utopic Xubuntu Mediacenter. Since I am actively using IPv6 to ...
0
votes
1answer
51 views

why does not IPv6 (RFC 4941) privacy work?

I've followed instructions on https://docs.menandmice.com/pages/viewpage.action?pageId=6361024 It simply does not work, I have no Ipv6 starting with 2001::: , only the same as before. ...
-1
votes
2answers
36 views

Help with an assignment please [closed]

I have 2 questions I'm having trouble finding info for. Q1 what are names of 2 main editions for ubuntu? Q2 name 4 security features for ubuntu.
2
votes
1answer
693 views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
29
votes
1answer
93k views

How do I scan for viruses with ClamAV?

I installed ClamAV via Terminal (Ctrl+Alt+T) with: sudo apt-get install clamav but how can I scan for viruses?
1
vote
1answer
1k views

Why there is no password to root under Recovery Mode?

I am trying to understand this situation... Today I got a problem with de sudoers file since I modified and got problem whit this modification. So the only way to solve the problem was to modify the ...
0
votes
0answers
234 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
0
votes
0answers
10 views

webapps control and transparency review

there is a lack of information about this, most people just want to disable, for example what Amazon WebApp is doing ? does add referrals cookies ? does it sends any data like mouse pointer ...
1
vote
2answers
346 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
1
vote
1answer
181 views

How to run an application on a sandbox? [duplicate]

I'm interested in running Skype on a sandbox. I don't want to use a virtual-machine however, since it's overkill just for a program. I don't need Skype's video or voice capabilities to work, chat ...
16
votes
7answers
3k views

What non malicious uses are there for ping's flood (-f) option? [closed]

I have been reading up on common ways in which people attack each other on the internet through things like DDOS attacks etc, and how one would defend oneself from such attacks, and I have come across ...
0
votes
1answer
71 views

Macbuntu noobslab security

Is this site safe? Being sort of a security nut, im Wondering if it is safe to install Macbuntu theme, and icon pack from noobslab.com.I have would not be installing any of the other things (lightdm, ...
0
votes
0answers
9 views

Best way to execute script from another linux user on the same system

I've set a script to be running on subdomain.domain.com mostly for security by isolation reasons. I need to include some output of it at domain.com. The thing is it uses ajax and hence cross-domain ...
1
vote
2answers
51 views

Is there a place to check for security of repositories?

I wanted to add some themes from sudo add-apt-repository ppa:noobslab/themes. How do I ensure these are safe repos? They are listed in many blogs and answers, however is there an official place I ...
137
votes
4answers
160k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
117
votes
6answers
84k views

How can I install just security updates from the command line?

sudo apt-get upgrade installs all updates, not just security updates. I know that I can use Update Manager to select only important security updates, but is there a way to do this from the command ...
0
votes
1answer
38 views

Cannot install Kernel Security updates in 14.10

I cannot install some security updates to Ubuntu 14.10 (Utopic Unicorn) 64bit, which are kernel updates. Those are the updates. I cannot install them. In settings, I have everything ticked. ...
2
votes
1answer
147 views

How can I be sure that I'm using NTP version 4.2.8p1 or equivalent?

I've recently read about the vulnerabilities within ntp, here which can be closed by installing ntp version 4.2.8p1. However, I've used apt-get to install the latest version of ntp, on an Ubuntu ...
1
vote
0answers
78 views

Is there a VPN Monitor/Kill Switch application for Ubuntu?

Hi I am looking for a VPN Monitor/Kill Switch application that will ensure my VPN connection is always connected. Should my secured connection drop, the application will drop the applications that ...
1
vote
0answers
14 views

Ubuntu server File copy detect

I have a customer who has experienced data file theft (copied filed) is there software or a way to detect this copying of multiple files Or do i have to write something?