Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
3answers
61 views

Run rkhunter regularely on a desktop system

I want to get a warning on my desktop when rkhunter finds something odd on my system. I whitelisted some files and dirs that seem ok in /etc/rkhunter.conf so I get no warnings anymore. Now I want to ...
0
votes
0answers
10 views

nm-applet: No Certificate Authority certificate chosen

I have access to a wireless network that uses Protected EAP (PEAP), and requires a certificate. I don't have the certificate installed, and after I enter my password for the network it complains that ...
0
votes
1answer
35 views

Does ubuntu require antivirus [duplicate]

Does ubuntu require antivirus? If yes then please tell me what's the difference between windows virus and ubuntu virus?
122
votes
3answers
85k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
0
votes
0answers
17 views

Checking of Residues of Windows

Years ago I had Windows OS in my System. But I now I am using Ubuntu only. I have 3 partitions in my Hard Disc Device Boot Start End Blocks Id System /dev/sda1 * ...
1
vote
0answers
13 views

How to disable mpm-itk for a specific virtualhost?

I've a main site on a server that needs to run a sudo command which I white listed via visudo. That worked fine until I installed apache-mpm-itk and then I started getting the following error: sudo: ...
0
votes
1answer
22 views

Modern Ubuntu home media, security, and automation center [on hold]

I'm looking to set up a large computer to act as a home media center, a security system, and possibly home automation. I'd like the following features 64 bit support Modern (based on a recent ...
5
votes
3answers
3k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
4
votes
1answer
39 views

What are the reasons to have strong password at home?

For a typical home PC the security situation is following: No servers running, not even the SSH. Firewall is ufw running in simple mode: all outgoing allowed, all incoming denied. Torrents and DC++ ...
0
votes
1answer
32 views

is my computer infected by suckit? [on hold]

The last time a similar question was asked was when ubuntu 10 was current. so hope asking it again will get a fresh perspective on this question. My system running kubuntu 13.10 beta 2 also shows ...
0
votes
0answers
13 views

ConsoleKit history log file is suddenly huge

I've had a server running (accessible on the web) for a year or so. There's a series of compressed history files in /var/log/ConsoleKit that are a few kilobytes each. However. October's is 1.2 GB, ...
0
votes
0answers
25 views

There doesn't seem to be a decent guide for Stealth could someone either write one or point me to one?

Stealth Integrity Scanner I'm very interested in being able to setup an IDS and this one seemed like it was really cool and worth while and fairly underrated. I've not really found much on what a ...
0
votes
0answers
152 views

How do I address CVE-2014-3566 (POODLE) for lighttpd (1.4.28) on Ubuntu 12.04? [duplicate]

As most of you know, CVE-2014-3566 (AKA POODLE) involves weaknesses in SSLv3 on clients and servers. See https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-2014-3566/ for more ...
0
votes
0answers
34 views

How secure is the Ubuntu OS? [closed]

It has been said that Ubuntu is the most secure Operating System. How is the security of an OS defined? Were there any security loopholes in Ubuntu,exploited by Attacker. What security features does ...
0
votes
0answers
85 views

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption vulnerability) in Lubuntu 14.04 [duplicate]

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption) vulnerability in Lubuntu 14.04 and fix for the issue.
0
votes
0answers
5 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
33
votes
5answers
10k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
17
votes
5answers
5k views

Is there a preinstalled or automatic firewall?

Does Ubuntu come with a preinstalled or automatic firewall? If not, do I need one? I've read some articles about the advantages of linux over other operating systems about security (no need to have ...
0
votes
0answers
7 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables
0
votes
1answer
292 views

Is fingerprint-gui a security hole?

I have a Thinkpad T440 on Ubuntu 14.04. I use fingerprint-gui to allow me to login and use sudo by swiping a fingerprint. The worrying part is that anyone can run the fingerprint-gui program to ...
5
votes
4answers
13k views

How to verify the SSL fingerprint by command line? (wget, curl, …)

Using a command line website downloader, such as wget, curl or any other one... In a script... I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
1
vote
1answer
3k views

Fingerprint reader driver for Validity Sensors Fingerprint scanner

prakhar@pr3d4tOr:~$ lsusb -s 001:003 -v Bus 001 Device 003: ID 138a:0018 Validity Sensors, Inc. Fingerprint scanner Couldn't open device, some information will be missing Device Descriptor: bLength ...
21
votes
8answers
3k views

Where can I look for malware that may have been installed on my machine?

I want to analyze my ubuntu box to detect if it was been hacked. My question is: what are all the place where to look to discover if some malicious software are started ? The following is some kind of ...
0
votes
0answers
16 views

List only “security” related upgrades with apt-get upgrade

I'm interested in a shell command that can behave like apt-get dist-upgrade except only list/consider security related package upgrades. For example, limit it to packages in security.ubuntu.com or in ...
1
vote
1answer
27 views

restore patched bash to apt maintained

Last month I manually patched bash on a server running ubuntu 11.10 for the shellshock bug, as suggested in the comments here: What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I ...
0
votes
1answer
35 views

Ubuntu 14 home/personal use version of Windows Update or apt-get “Must Dos” for Security [closed]

What basic security measures should be taken for Ubuntu's distro for home/personal use. No apache or web server installed.
0
votes
1answer
77 views

Does Ubuntu 14.10 have the security fix for Shellshock bash exploit? [duplicate]

On the internet, I noticed there were Patches for the Shellshock vulnerability which is scaring me a lot. Does Ubuntu 14.10 have this automatically in it?
0
votes
0answers
16 views

Is there any way of preventing an encryptd folder from showing sundry file information?

I have set up an encrypted folder with EncFS and use it successfully through the terminal on ubuntu 14.04. One thing I have noticed though on the hidden encrypted folder while on giving away name or ...
125
votes
5answers
86k views

What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?

Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
0
votes
0answers
19 views

Secure SSH Server from brute-force? [duplicate]

I'm just a newbie in Linux and recently got a VPS (Ubuntu 14.04 LTS Server). How can I secure its ssh server from brute-force attacks?
0
votes
1answer
57 views

Encryption [STANDARD] Ubuntu?

During the installation of Ubuntu I ticked the encrypt system and encrypt home folder boxes. But I have heard that it is foolish to encrypt the home folder when I already have encrypted my system. So ...
1
vote
1answer
7k views

ShellShock - bash already updated?

I'm trying to fix this new ShellShock bug on my PC (running Ubuntu 14.04). From what I've gathered, the simplest way to do this is to just update bash via the terminal (I've tested my system for the ...
0
votes
1answer
26 views

Samba - Windows Network

I was recently checking my network and realized Samba was installed. When I go to "browse network" in the file explorer I see that there is "windows network" and my home folder is located inside. My ...
53
votes
1answer
5k views

Can I make the webcam take a picture when an incorrect password is entered?

I am using a laptop . I was thinking to have a support in my Ubuntu machine. When an incorrect password is entered, a picture is taken later revealing who has been trying to gain access. I have ...
0
votes
0answers
43 views

how to install mod_security apache2.4

I was looking at my logs yesterday, when I saw a bot roaming folders I have in my robots.txt file. I tried to block it with a rule in my UFW firewall, but this did not keep them out. So then I was ...
0
votes
0answers
11 views

Restrict users ports

How could I go about restricting specific users access to ports based on a whitelist based system. I heard it can be done with SELinux (I do have it installed), but I haven't been able to work out ...
3
votes
2answers
780 views

How do I set up USB security key based authentication?

Is it possible to get Ubuntu to lock and unlock itself, if a particular USB stick is attached? For example; I sit down at my laptop; I plug the USB stick in and the system unlocks and presents ...
0
votes
1answer
211 views

shellshock vulnerability and super user

can shellshock vulnerability execute somehow commands with superuser permissions? And if yes, from where/how? It is possible to be executed commands from cgi yes, but is it possible to get executed ...
3
votes
1answer
101 views

ClamAV found infected files on Ubuntu server, what do I do now?

I checked the Ubuntu server using the command clamscan -r. I don't know whether or not the files were cleaned or deleted. This is a screenshot of the results: I'd like to know if these files still ...
1
vote
0answers
55 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
1k views

How do I know if my system is vulnerable to the ShockShell vulnerability? [duplicate]

The recently discovered ShockShell vulnerability affects many Linux and Mac systems, because they are using the vulnerable BASH shell. How do I know if I am vulnerable to this attack and how do I ...
2
votes
2answers
228 views

CVE-2014-6271 over ssh example attack?

I've been reading about the CVE-2014-6271 bug on lots of pages, but I'm still not able to understand how exactly is it possible to exploit it over ssh. From all I've read, I couldn't find an example ...
4
votes
2answers
3k views

CVE-2014-6271 bash patch trouble

I have a Ubuntu [EDIT] 12.04.4 LTS server that is vulnerable to the recent bash remote executable exploit. Ubuntu says they have released a patch here. I have run a sudo apt-get update && ...
2
votes
2answers
113 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
0
votes
0answers
197 views

How do I upgrade from 12.10 on a DigitalOcean droplet?

The recent ShellShock exploit has prompted me to upgrade my Ubuntu 12.10 server, as I cannot upgrade bash on it (I receive 404 errors on apt-get-update (somebody else with a similar issue)). I opened ...
1
vote
0answers
352 views

How to Patch for Shellshock [duplicate]

So, in light of this closed thread, and this article, how can we patch for the shellshock bug/exploit/vulnerability for currently supported Ubuntu versions? 13.10 and 14.04?
9
votes
5answers
38k views

Get root access for copying files to /usr/share/…?

To be short, I want to copy a folder to a location /usr/share/screenlets/.... in Ubuntu 10.04 system. I tried by logging in as root from terminal giving su. I even changed my user account type to ...
0
votes
0answers
16 views

rootkit hunter found suspect files

I recently run rkhunter and found 9 suspect files detected, why curl ,dpkg show warnings as shown in the image below what should i do to remove those warnings?
0
votes
0answers
42 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
1
vote
0answers
40 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...