Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

-1
votes
0answers
27 views

Security issues and Privacy [on hold]

How can a linux user safeguard or harden their system against firmware vulnerabilities and how does Gnu/Linux handle such?
1
vote
1answer
51 views

Does Canonical collect data about how I use Ubuntu?

Does Canonical collect any user data about me or my habits during my use of Ubuntu? And if so, how can I stop this data collection?
6
votes
2answers
15k views

Can I install all the hacking tools of KALI on Ubuntu?

I want to know is there any way to install all hacking tools of kali on ubuntu 12.04 ? If yes then pls tell me how ? like sqlmap , nikto , john , aircrack-ng etc . Thanks.
0
votes
0answers
7 views

Setting up firewall for my hosting

I am having an Ubuntu 14 instance installed in Amazon Cloud. In there, I have setup apache2,tomcat7, and phpmyadmin. Any request to port 80 will be forwarded to the tomcat based java application. ...
166
votes
8answers
69k views

Are PPA's safe to add to my system and what are some “red flags” to watch out for?

I see a lot of interesting programs out there that can only be obtained by adding a "PPA" to the system but, if I'm understanding correctly, we should stay within the official "repositories" for ...
8
votes
4answers
17k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
1
vote
2answers
24 views

Is sharing a mounted USB drive on Samba without a password a security risk?

At my low level of expertise, the only way I can share a mounted external drive from Ubuntu 14.04 to Windows computers in my house is to use the Samba GUI to share it, then edit smb.conf to add "force ...
1
vote
1answer
28 views

Ubuntu Server minimal package

What is the best why to install an Ubuntu Server image with the minimum possible of package ( no default, no extrat ) that can only allow ssh connection to it and nothing else.
0
votes
2answers
38 views

Apparmor is not functioning

When I check the status of Apparmor, I get this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
-8
votes
0answers
72 views

How to permanently block adult content on Lubuntu? [duplicate]

How to block adult and nudity content in Lubuntu? I block 18+ adult content on my home PC using K9 web protection when I use Windows XP. I simply download the file .exe. Get license number via ...
0
votes
2answers
48 views

Ubuntu 12.04, PCI, and CVE-2015-5352

PCI compliance will fail when the CVE-2015-5352 vulnerability is present. OpenSSH 6.9 fixes this vulnerability, but Ubuntu 12.04 has not been patched. What is the best way to address this ...
4
votes
3answers
283 views

How to stop firefox from downloading files in public computer to its Home/Download folder?

I work in IT-department and we have a situation. We have public computers installed in city library and they are using Ubuntu 12 kind off kiosk operating system. People are opening and downloading ...
0
votes
0answers
77 views

virus in ubuntu 14.04 adware malware spyware…?

I am using Ubuntu 64 14.04. I have used Ubuntu for many many years, and today I got malware or spyware, although I don't really know what it is. I use chrome Version 44.0.2403.89 (64-bit) the latest ...
0
votes
3answers
603 views

How can I have a Very secure Ubuntu Desktop system [closed]

How can I have a Very secure Ubuntu Desktop system and where is the best place online to learn about hardening Linux, not just Ubuntu?
0
votes
0answers
22 views

Ubuntu Touch: How to view own error reports

in March I reported a bug here on ask ubuntu that the setting not to send error reports to Canonical in the system settings is useless so far as it doesn't safe what you choose: ...
3
votes
2answers
16 views

system log question- auth.log

I'm pretty new here. I was looking at my system logs and noticed this: Jul 21 00:57:47 htpc sshd[13001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ...
-1
votes
0answers
29 views

Not sure if I should report a potential secuirty problem

I have been seeing potential suspicious activities on my computer that I think may be linked to what they call clickjacking. I noticed some suspicious activities from apparmor reporting stuff like ...
0
votes
0answers
23 views

How to get Firefox to only load images from trusted origins

As you can see by the name, I am paranoid, and I realise that I can get something malicious on my machine through looking at an image. I have disabled my browser's cache, but this still only limits ...
1
vote
2answers
41 views

How do I restrict a specified SSH user to connect only from one IP or hostname?

I have a monitoring server that requires the SSH connection details of a non-sudo user account of each box it monitors. Is there a way that I can configure a specific user account such that it can ...
1
vote
0answers
30 views

Is it possible to maintain server from account without admin rights?

I am wondering how should I proceed if I want to hire someone to maintain my Ubuntu server. If I give admin rights to his account he may do a lot of damage if he decides to, but if I don't give him ...
5
votes
1answer
11k views

Driver for Validity Sensors Fingerprint scanner

prakhar@pr3d4tOr:~$ lsusb -s 001:003 -v Bus 001 Device 003: ID 138a:0018 Validity Sensors, Inc. Fingerprint scanner Couldn't open device, some information will be missing Device Descriptor: bLength ...
11
votes
4answers
1k views

If I follow instruction from blog/web, is that always safe? [closed]

I am new with Linux especially Ubuntu. When I don't know how to do something with this OS I search on web and AskUbuntu and always have the answer. But sometimes it's not a great answer nor complete ...
3
votes
1answer
200 views

Could not load host key: /etc/ssh/ssh_host_ed25519_key in /var/log/auth.log

I have an Ubuntu 14.04 instance running on AWS. I was browsing the auth logs (/var/log/auth.log*), and noticed the following line appearing: Could not load host key: /etc/ssh/ssh_host_ed25519_key ...
0
votes
2answers
27 views

Nmap Logs Question

I recently did an Nmap scan of my network with the ZenMap GUI tool on my Ubuntu install and I got a weird scan result; well in my opinion anyways.. Even though I am using Ubuntu 15.04, for my host, I ...
0
votes
1answer
71 views

How to configure UFW for a basic desktop / laptop? [closed]

Reading this answer about enabling UFW, I understand that a computer without firewall can be safe in my local network, but this same safe configuration on a laptop used outside of my local network ...
16
votes
7answers
3k views

What non malicious uses are there for ping's flood (-f) option? [closed]

I have been reading up on common ways in which people attack each other on the internet through things like DDOS attacks etc, and how one would defend oneself from such attacks, and I have come across ...
0
votes
1answer
118 views

How can I circumvent MitM attacks on hostile networks? [closed]

I suspect my local network is not as secure as one might like; I believe its administrator may be trying to intercept and sniff my traffic. Are there any ways to prevent Man-in-the-Middle attacks ...
0
votes
1answer
27 views

Why is su disabled from guest sessions?

From guest you can't sudo or ssh. Why I can't sudo is simple. But why can't I su? What is it that su provides that ssh to the user@localhost wont? The reason for this question being my other ...
0
votes
0answers
30 views

How to prevent ssh on local host?

I came to know that on ubuntu, sudo and su is not available in a guest session because of security concerns. But all I need to do, if I have the login credentials of a user in the sudoers list is too ...
2
votes
2answers
966 views

What is CVE-2015-1793? Does it affect me?

Apparently a new bug has been discovered in OpenSSL, it is being called as Alternative chains certificate forgery (CVE-2015-1793). Canonical already declared the versions of openssl that are not ...
1
vote
1answer
43 views

How to file a bug report against Ubuntu in general?

I am wanting to file a bug report against Ubuntu in general, because I have noticed that the Ubuntu security hashes provided, are only MD5sums, and as for security reasons MD5 is being phased out, it ...
2
votes
1answer
2k views

how to enable iptables tarpit?

I'm using ubuntu server 10.04 and I have to enable tarpit module . I installed the followning packet : aptitude install xtables-addons-common xtables-addons-source module-assistant auto-install ...
10
votes
6answers
4k views

Why can't non-admin users install software?

This is probably something I don't understand since I am used to Windows and am only starting out with Ubuntu. I know that software in linux comes in packages what I don't understand is why can't ...
0
votes
0answers
15 views

dpkg-sig produces no output

Installed dpkg-sig to verify a package - it produces no meaningful output, just "processing" and then no result either way (signed or not signed correctly). Example: $ dpkg-sig -c ...
0
votes
1answer
167 views

How can I make my WiFi hotspot secure?

I just created a wifi hotspot with an adaptor, and it says that it uses WEP security. I may be mistaken, but isn't WEP security not really secure? How can I make it more secure, such as WPA or ...
2
votes
1answer
22 views

What is a (reasonably) secure and automated way to backup my mysql database using (any) free cloud/online services?

I have a mysql database that I use for personal devlopment. I would like to back-it up online using any free (in cost) online storage. (dropbox, google-drive etc...) I am assuming a shell script ...
3
votes
0answers
29 views

Kernel security levels in ubuntu

Is there any ubuntu equivalent of BSD Kernel Security Level? If yes, how can one change the security level?
0
votes
0answers
13 views

xubuntu suddenly asked me for my password to mount an USB flash disk. Is this normal?

It never asked for it before or after and this one time was after the flash disk was inserted in an untrusted computer. I don't remember the message exactly. Is it possible malware got on the flash ...
1
vote
0answers
23 views

Can i run apache 1 / 2 as root?

I am hoping someone can confirm if apache 1 and / or 2 could be run as root if the user wishes it? There are previous questions around this, where people say "no you don't want to do that" and don't ...
2
votes
1answer
59 views

Can malware enter Ubuntu?

I have a desktop computer with Window 7 system and Ubuntu (installed by my boyfriend). Last week when I shopped online on Win7, I accidentally caught Eye Perform ads in Firefox. I Google and found ...
0
votes
0answers
26 views

How would I securely connect to a smartphone?

I have got Ubuntu 14.04 LTS and a smartphone with no brand name of any kind. How do I connect the smartphone to my computer securely? The OS is unspecified. it looks like android. I am worried ...
1
vote
1answer
45 views

launch ipython but not like root

ipython is launched like root (UID); ok, but I need that after ipython cann't run and don't allow, script/code that can gain root privilegies. eg I launch ipython, ok the UID is root. And in my ...
101
votes
19answers
28k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
0
votes
0answers
12 views

How do I add an existing ubuntu user to a new domain?

Our organization is making some changes in their security model and they have created a domain server with which each machine would be linked. For this, they have created a new user on my laptop which ...
9
votes
3answers
467 views

sudo permission doesn't time out durring apt-get upgrade

Consider this: You type $sudo apt-get upgrade and get a list of things that need upgrading with a "Y\n" confirmation. before you can read the list, and type "Y" or "n", the phone rings, or your boss ...
1
vote
1answer
28 views

Locking down an apache server - Prevent '/' page from being visible to all

I first installed Apache as part of a ZoneMinder setup. I then added to the server with an ownCloud setup. All this is only accessible to LAN or to WAN-through-ssh and that part works great. I now ...
18
votes
2answers
5k views

Disable password access through SSH?

I'm setting up a server for backing up my desktop box remotely. I want to prevent remote password access to the server, permitting only users with private keys (AKA my desktop box) to access it. How ...
0
votes
0answers
30 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...
3
votes
3answers
3k views

CHOWN: What does “id -u” represent

I am working to get Mongodb running on a Ubuntu server install. In reviewing the instructions I needed to create a "\data\db" directory in the root drive. At which point I needed to alter the owner ...
0
votes
2answers
211 views

Connect button grayed out in 802.1x authentication dialog

Since I upgraded to 15.04 I can't connect to our office wired network anymore since I can't press connect in the authentication dialog.