Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
19 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
5
votes
1answer
4k views

How do enforce company password complexity?

I need to configure a Ubuntu 10.04 server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one ...
-1
votes
0answers
19 views

Ubuntu server content security

I am learning server side administration ... I can across one requirement where I want to setup a local server(preferably Ubuntu server) such that it connects to computer on same network. My ...
3
votes
1answer
15 views

Security risks with fakeroot?

Is there a security risk having fakeroot installed on my system? I can't find much more than was is provided in the manpage.
15
votes
2answers
456 views

How can I further secure my system using 2 factor authentication?

The title pretty much says it. I have been hearing more about 2 factor authentication, one-time passwords, hard-tokens, and other improved security features. With the decreasing security of using just ...
1
vote
1answer
18 views

Ubuntu Mozilla Security, do I need this? General questions

I was searching for info on enabling/disabling javascript in firefox, some pages I need to have it function and without the java they're broke. I came across this and was wondering is this something ...
-1
votes
2answers
25 views

How to edit /etc/default/ntpdate and prevent ntpdate from ever running without uninstalling

Since both ntpd and ntpdate rely on ntp servers, and since the Ubuntu repos have yet to complete an update of ntp to 4.2.8p4 (the version recommended by ntp researchers), I expect this means that both ...
7
votes
2answers
6k views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v ...
6
votes
2answers
115 views

Email on failed login attempt?

I was wondering if it is possible to set it up in such a way that on a failed login Ubuntu will send me an email? And of course if the computer is not connected to the internet when the attempt ...
44
votes
4answers
19k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
0
votes
0answers
10 views

Restricting the Number of IP/TCP Connection Request Per Second Using Ubuntu Sever

I know what type internet connection my machines have and how much CPU/RAM they are using. So Is it possible to restrict the accepting number of IP/TCP connections per second at the OS level, before ...
4
votes
1answer
14k views

Restrict SSH Access to Specific IP for User

My /etc/ssh/sshd_config file has a line like: AllowUsers jim@11.22.33.456 If I want to allow jim to use another IP addresses, how do I specify it? Does it take the form of a comma separated list? ...
4
votes
3answers
4k views

ClamAV: PUA.Win.Exploit.CVE_2012_0110 FOUND (/usr/share/mime/mime.cache)

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
0
votes
0answers
17 views

Run file when USB device inserted

I want to implement a strict policy of nobody being able to insert any USB device into my laptop. If someone inserts a memory stick, keyboard, light etc... into any USB PORT (while the computer is ...
46
votes
3answers
26k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...
1
vote
1answer
31 views

With secure boot disabled, is there long term vulnerability to malicious code (on 14.10 and 15.04/Win multiboot setups)?

In a nutshell: is it really a good safe idea to leave Secure Boot disabled? I have two laptops with LinuxMint,Xuntu, Ubuntu 14&5 Win 10 and Win 8.1 between them. Grub 2 works fine with /,/boot ...
1
vote
0answers
12 views

Securing a port in ubuntu with username and password

I have Elasticsearch running on 9200 port.I want to secure it and I dont want others to access the data stored in the index in ElasticSearch. How do I secure the port and limit its access using ...
73
votes
1answer
169k views

How do I scan for viruses with ClamAV?

I installed ClamAV via Terminal (Ctrl+Alt+T) with: sudo apt-get install clamav but how can I scan for viruses?
0
votes
0answers
10 views

encfs reset settings to standard

I do not correctly identify the customizations when it first installs. Encrypted data is now not displayed. How to reset the settings to standard?
2
votes
2answers
376 views

Should I use use .htaccess to secure Wordpress, or can I use the virtual host config file? [closed]

I`m using apache2 on ubuntu 11. I want to secure my wordpress site with .htaccess rules, but I understand that it is preferable to put the rules in the apache config file (httpd.conf). If I ...
55
votes
6answers
25k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
9
votes
3answers
8k views

Google Authenticator for Desktop (lightdm or gdm plugin)

There has a been a similar question, but that's not exactly what I want. I'd like to know if there is a plugin, or add-on, for lightdm or gdm that allows me to authenticate using my password AND ...
0
votes
4answers
52 views

What is the reasoning behind hiding characters when entering the sudo password?

When entering the sudo password, the • characters are hidden. Apparently the • are omitted for better security. They seem secure enough to me, and I don't see why they're not used. I think I'm ...
-1
votes
2answers
43 views

Is firefox safe to use on Ubuntu/Linux? [closed]

While using Firefox on Ubuntu, I frequently run into warnings from various sites (recent examples: when checking gmail, www.hitrecord.org), that inform me that I am using an outdated/unsupported ...
0
votes
0answers
34 views

UFW ACCEPT Problem

I'm having problem with UFW. If i block like whole /24 network becouse lots of bruteforcing etc. coming from China / Korea or somewhere. They still get to open ports. If i have, lets say port 443 ...
14
votes
3answers
1k views

Unsupported Ubuntus - is it safe to continue with them?

I'll try to be as clear as I can about this, hoping to get clear answers. I have Ubuntu Studio 15.10, which is not an LTS version, and will only be supported till July 2016. Does that mean there ...
0
votes
1answer
52 views

istartsurf on chomium

A few days ago I noticed that I'd got the istartsurf malware in Chromium on my Ubuntu laptop despite being careful of which software I'm installing, but anyway. So I reinstalled Ubuntu on my laptop ...
29
votes
14answers
14k views

Why is there no option to login as root?

Why does Ubuntu not allow the GUI users to login as root at the time of system start up like administrator in Windows? Why they are restricting us to login only through the terminal?
-1
votes
1answer
36 views

Of what help is SE linux to me?

i am new to Linux. I have heard about SE linux ... how does it work with Ubuntu and what can i do with it?
0
votes
0answers
18 views

NTP question on ntpdc -c peers

I just started learning networking. I recently installed ntp on Ubuntu 14.04 running in Virtualbox on OS X. I was just trying to understand how it works. so when I executed ntpdc -c peers command in ...
15
votes
2answers
4k views

New Zero-day exploit reportedly found affecting Linux/Android (CVE-2016-0728)

Russia Today reports (20 January 2016) that there is a new zero-day exploit that has been discovered affecting Linux and all Linux-based OSes for computers and phones. What is the deal; how does it ...
1
vote
1answer
44 views

Remove string “please enter passpharase for disk…”

I traveled to Australia it seems they didn't like my face or I looked suspicious since they made me turn on my laptop and when ubuntu encryption password popped up they asked me for it, nothing to ...
-1
votes
0answers
18 views

Whats the diffrents between chkrootkit and rkhunter? [closed]

I've heard about the famous linux anti-rootkits called chkrootkit and rkhunter I use rkhunter with clamav but do I need to use chkrootkit also or is that a different story?
0
votes
0answers
17 views

Does ubuntu comes with any encryptions programs by default [duplicate]

Is there any preinstalled encryption program in linux that I can use to encypt my data or do I need to install a third party program
1
vote
2answers
30 views

Auto unlock keyring on auto login without leaving password unencrypted

So I keep getting this unlock keyring popup when I login to Ubuntu automatically. There is a fix here: How can I stop being prompted to unlock the 'default' keyring on boot? I have been googling ...
6
votes
2answers
564 views

How do I allow a user to only run the apt-get update command with sudo?

I cannot figure out how to allow a user (in this case test) to only be able to run the apt-get update command with the sudoers file. When ever I try to add the user and then test it out it still does ...
0
votes
0answers
13 views

How to only allow a file to be opened or executed by certain application(s)?

Let's say that I've got a security application (or something which I just don't want any old application or user to have access to because it is very important and if the wrong guys had access to it ...
0
votes
1answer
75 views

A question about the last security update for Ubuntu (“ATTENTION: Due to an unavoidable ABI change…”) [duplicate]

I'm subscribed to the Ubuntu Security Notes, so everytime that I receive an e-mail, a new update is avalable. But in the last update, they wrote something in the end that I coudn't undertand much, so ...
0
votes
1answer
39 views

Automatic kernel security updates no long being installed

A while back my /boot partition filled up on my Ubuntu server 14.04 install. This caused an automatic kernel security update to fail and be in a partially installed state. To fix the problem I removed ...
0
votes
0answers
8 views

cureent Kerberos password specifications

Current kerberos password, there must a certain number of used charecters or length...I keep getting, that doesn't work please try again from my welcome screen, does anyone know the specifications?
14
votes
6answers
28k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
0
votes
1answer
37 views

Secure browsing

I would like to hear from you suggestions, how to improve security during browsing. Let's say that I am going to use Chromium. With this extensions: Web of Thrust (to be noticed, if i visit bad ...
3
votes
2answers
203 views

ClamTK Anti Virus will not run on Ubuntu 15.10

I have a laptop running Ubuntu 15.10. To protect myself, I have tried downloading and installing ClamTK. It does this without giving any error messages but it doesn't open. I tried on a second ...
7
votes
4answers
5k views

Why is X11 a security risk in servers?

I remember reading that servers do not have a GUI because X11 is a security risk. Why?
10
votes
6answers
36k views

How to verify the SSL fingerprint by command line? (wget, curl, …)

Using a command line website downloader, such as wget, curl or any other one... In a script... I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
0
votes
0answers
14 views

Everything in syslog has been removed! Security risk?

I am new to Ubuntu. I've only been using it for a few weeks. I was wondering; does Ubuntu delete the logs after a while? My syslog was full of logged events this morning, but when I checked it now, ...
11
votes
2answers
11k views

What does “pts/” in the output of w mean?

When I run w - to see who is logged on and what they are doing, i see this: USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user tty7 :0 08:14 10:32m ...
1
vote
1answer
64 views

Linux overwriting RAM with zeroes on free()

I was just wondering if it is possible to tell Linux/Ubuntu to overwrite freed memory with zeroes before letting the next application allocate it? If not, why isn't this possible? I know that ...
0
votes
1answer
69 views

Redirection to ad pages in browsers

I have a serious problem when visiting web pages, with anything in any moment, as you can see in the screenshots. photo1 - ubuntu-es | photo 2 - ask ubuntu | i.imgsafe.org/373b693.png | ...
0
votes
1answer
33 views

Ubuntu : Disable access to file-manager, keyboard,mouse(Touch screen available) for guest account

I am looking to configure Ubuntu(Any version, new installation) for presentation in which I would like to do the following things : Automatic guest-login at startup. Completely disable ...