Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
2answers
20 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
0
votes
0answers
9 views

Best way to secure a virtualised ubuntu running apache 2

I do front end web development for clients and have a local webserver that acts as my production/staging ground I have a Windows 7 machine that has Ubuntu installed within a virtual box, Ubuntu is ...
1
vote
0answers
5 views

Challenge-response local user login

Is it possible in Ubuntu, or in any Debian based distro, to use Digital Signatures with a Challenge-response setting for local user login(I don't mean ssh), instead of a password ? Storing the key on ...
0
votes
0answers
196 views

ubuntu 14.04 firefox starting without sudo gives security library failure on SSL sites

I have a problem with ubuntu desktop 14.04. When executing firefox without sudo, then all the https sites (even http://google.com) gives me Error code: sec_error_library_failure But when ...
0
votes
1answer
27 views

What is this file *(1147.desktop)? [on hold]

A link ("Link to INBOX>1147") appeared on my desktop (lower right corner, partially hidden) Its properties are unknown, as are its permissions. It evidently points to a text file on my desktop no, in ...
22
votes
8answers
4k views

Where can I look for malware that may have been installed on my machine?

I want to analyze my ubuntu box to detect if it was been hacked. My question is: what are all the place where to look to discover if some malicious software are started ? The following is some kind of ...
0
votes
0answers
7 views

It it safe to keep a PamUSB enabled usb drive always connected?

I'm wondering if it's safe to the usb drive always connected, some program could sudo without my permission. It there a way to receive some notifications about pamusb's authentications? Thanks in ...
0
votes
0answers
18 views

Possible security issue? (syslog connect messages)

I was just looking through my syslog and noticed theese lines repeating over and over almost endlessly: Aug 25 16:52:56 xxx-xxx-xxx-xxx postfix/smtpd[9572]: connect from ...
0
votes
1answer
20 views

compiz screen lock can be bypassed by `metacity --replace`, how to protect against it?

While compiz is running, open a terminal and type: sleep 10;metacity --replace now lock your screen and wait, you will see compiz end and metacity comes in, in an unlocked state. What I expected was ...
0
votes
0answers
31 views

logrotate broken after security breech

I downloaded a PDF which evidently had Linux malware, which executed when I ran the PDF through firefox, or atril, Im not sure which. I figured it out shortly after running clamav, and I believe ...
3
votes
1answer
458 views

Prevent Skype resolvers getting your IP on Ubuntu

I am running Skype version 4.3.0.37 on Ubuntu 14.10, and I know that on the Windows version there is an option to only allow direct connections to your machine through Skype for Skype contacts, which ...
3
votes
2answers
2k views

PUA.Win.Exploit.CVE_2012_0110 FOUND

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
3
votes
0answers
84 views

Find Kali Security tester tools after installation

I'm a 'beginner' with Ubuntu. I tried it already a few times. I also tried Kali, etc already. I think Ubuntu is very useful, and has many possiblities. But I missed one thing from Kali. The Security ...
0
votes
4answers
48 views

Is “Ubuntu Server 14.04.3 LTS + LAMP” production-ready? [closed]

Installing a fresh copy of Ubuntu Server 14.04.3 LTS and then: $ sudo apt-get update $ sudo apt-get upgrade $ sudo apt-get install lamp-server^ Is this configuration production-ready in terms of ...
0
votes
1answer
37 views

files where break-in attempts are logged

Ubuntu Server with Apache hosting multiple websites and mail-servers. Besides /var/log/auth.log, are there other places where break-in attempts are logged? Context: I used to have a lot of break-in ...
6
votes
2answers
21k views

Can I install Kali tools on Ubuntu?

I want to know if there is any way to install Kali tools like sqlmap, nikto, john, aircrack-ng, ... on Ubuntu 12.04? If yes, then how should I proceed?
5
votes
2answers
429 views

how to find out the address pool for DDOS Attack IP addresses

Of recent I have been experiencing DDOS attacks against my mail server with a series of IP addresses. I have been blocking these IP addresses one by one using the firewall. The process was and is ...
0
votes
1answer
210 views

Websites running on server showing virus warnings

I am running Plesk 9.5 on Ubuntu 8.04 LTS and have about 15 websites infected with some malicious code appended to the end of java files. I have installed Clamav and it has managed to pickup the ...
31
votes
6answers
19k views

How to sandbox applications?

I want to run small untrusted programs, but restrict them from accessing any files outside of their folder, network access, and everything else that they don't really need. What is the simplest way to ...
0
votes
2answers
31 views

Problem with Login password [duplicate]

when ever I'm logging in, I have set a login password for my account but it is logging in automatically with out asking me for a password. Please tell me what I can do to get rid of this problem.
0
votes
0answers
9 views

What programs the USN covers? (besides Ubuntu)

I'm using Ubuntu 14.04 LTS, and I'm always taking some looks into the USN (Ubuntu Security Notices), and when there's something new, I make sure to install the patch as fast as possible. But today, I ...
0
votes
0answers
22 views

Webcam light ON suspiciously

Today after I just finished my skype chat with my parents, I noticed that my webcam light was on. I closed skype and then classes all browsing or internet related applications but it was still on. I ...
-3
votes
1answer
390 views

need to check if my ubuntu 14.10 has been hacked [closed]

I have a Ubuntu 14.10 machine and I would like to check if my security is OK. I doubt that some one accessed my machine from internet and remotely controlled it. so what are the suitable tools I need ...
-2
votes
1answer
61 views

Is ubuntu really more secure than windows [closed]

For years i am considering ubuntu(or any linux distro) far secure than windows But when i read this most most vulnerable operating systems I couldn't belive it thant's why isearched again and i got ...
0
votes
1answer
47 views

Boot up with USB or external hard drive [duplicate]

Can Ubuntu be used in a computer with no internal hard drive? Using only a USB or external hard drive
1
vote
3answers
230 views

Ubuntu 12.04, PCI, and CVE-2015-5352

PCI compliance will fail when the CVE-2015-5352 vulnerability is present. OpenSSH 6.9 fixes this vulnerability, but none of the supported versions of Ubuntu (12.04, 14.04, 15.04 and 15.10) have been ...
0
votes
2answers
34 views

Is there a way to make your computer automatically lock the screen?

Just wanted a way to have my computer lock if I walk away from it it and forget to lock it manually.
5
votes
1answer
42 views

Kernel security levels in ubuntu

Is there any ubuntu equivalent of BSD Kernel Security Level? If yes, how can one change the security level?
0
votes
0answers
21 views

How to prevent people from using 'ro recovery nomodeset' [duplicate]

I really need a way to protect my grub menu from being attack by students who know to go to grub menu press 'e' and then change splash to ro recovery nomodeset. How do I protect that page from ...
0
votes
0answers
8 views
-2
votes
1answer
53 views

Norton Products (on Ubuntu/Linux) [duplicate]

Do I need to use an anti-virus software with Ubuntu such as Norton?
0
votes
2answers
49 views

How can I prevent Firefox from accessing files outside of its .config directory?

A vulnerability in Firefox was disclosed today that allows an attacker to execute JavaScript in a "local file context", giving them access to the file system. In the wild, this was used to scan the ...
0
votes
0answers
17 views

LUKS encryption + USB dongle keyfile = if not plugged, disallow passphrase prompt?

My laptop is LUKS-encrypted. I put boot & keyfile on a USB dongle: if the dongle is not plugged at boot, you cannot enter linux. But when I dont plug the USB dongle (which contain the keyfile), ...
0
votes
0answers
26 views

Configuring strong firewall rules

How to configure strong firewall settings via ufw? All inbound settings set to deny and only specific outbound ports to be allowed. Will the following be good enough? ...
0
votes
1answer
29 views

How to block the use of apps from other users

How would I go about not allowing none-administrative users from using applications that I don't them to? I'm new to configuration files so please give me step-by-step instructions so that I don't ...
1
vote
2answers
33 views

SSH session alway active, what is it? Should I close it?

I've been trying to setup a server-> client local network with x2go. I have it working, sort of... but I don't know much about networking, SSH, etc -- so it's been a steep learning curve. I'm ...
0
votes
0answers
17 views

How do I lock specific apps from users?

I want to be able to lock down apps from my 'student' user and don't know, like I said in earlier post please give step by step instructions to do this. Thank you.
0
votes
1answer
28 views

heavy write to disk activity as soon as I turn on computer

Can someone tell me if something nefarious is going on? I recently had to wipe my drive (losing all my data) and do a reinstall. So, I've been using the new 15.04 for 3 weeks without incident. But I ...
0
votes
0answers
21 views

LUKS encryption, switch from passphrase to keyfile

Using LUKS encryption, I set it during the Ubuntu installation. I entered a passphrase. But now I want to use a keyfile and I dont manage to find the right process to. How can I make the switch ...
4
votes
1answer
45 views

Which unattended-upgrades system takes precedence and how?

I've just run into an answer that has made me question how the unattended upgrade system works. There seem to be at least two systems on my computer: unattended-upgrades with ...
2
votes
1answer
53 views

Security: Automatic updates - automatic or not?

I am using kubuntu 14.04.2 I have updates set to download and update automatically for where there are security updates - yet the security update for Adobe Flash was not automatically installed when ...
1
vote
1answer
36 views

How to get Firefox to only load images from trusted origins

As you can see by the name, I am paranoid, and I realise that I can get something malicious on my machine through looking at an image. I have disabled my browser's cache, but this still only limits ...
2
votes
1answer
66 views

Ubuntu 14.04 LTS Security?

[Ubuntu 14.04 on 2014 Retina MacBook Pro 15" using rEFInd] (ThomasW's Why is everybody so concerned about etc/passwd? link addresses my initial comments about accessibility to passwd and other files, ...
12
votes
4answers
1k views

If I follow instruction from blog/web, is that always safe? [closed]

I am new with Linux especially Ubuntu. When I don't know how to do something with this OS I search on web and AskUbuntu and always have the answer. But sometimes it's not a great answer nor complete ...
0
votes
2answers
22 views

Recovery ubuntu encrypted home

If someone gets physical access to my pc, mounts my ubuntu and changes my user password (e.g. in the shadow file). Will he be able to log into my account and decrypt my (encrypted) /home partition? ...
3
votes
1answer
71 views

LUKS encryption, header on a dongle USBdrive?

I am going to install Linux the LUKS/LVM way, in order to have an encrypted disk. In addition, I would like to put the header and passphrase in a USB Key. Thus, instead of entering the passphrase, I ...
30
votes
2answers
3k views

Why is everybody so concerned about etc/passwd?

Here is the content of my vagrant machine of this particular file: root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin ...
2
votes
2answers
4k views

How to use rsync via ssh with rsa key passphrases?

How can I use rsync with passphrases? All googled "solutions" i found use passphrase-less keys which seems no real option. i am runnning 2 ubuntu servers 12.04.2 LTS.
1
vote
0answers
29 views

Strange ping result?

I'm new here. I just would like how this is done? Here's the scenario of events: I was pinging randomly some no-ip adresses(i just imagine an adress and ping it) Every thing is fine, most of ...
27
votes
4answers
23k views

How can I detect a keylogger on my system?

How could I know if there's a keylogger in my system, or at least if one is active right now?