Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
4answers
1k views

cryptsetup - LUKS vs. Truecrypt [on hold]

this question may already been made but I'd like to know how secure LUKS / cryptsetup is compared to TrueCrypt. What is the advantage and what is the disadvantage?
-1
votes
0answers
22 views

Algorithm detection from user IDs and passwords [on hold]

An example. Given a conspicuous list of usernames and passwords, how can I find out the algorithm which generated those passwords?
0
votes
1answer
20 views

Every installation on desktop asks for passwords that I never set in the first place

Everytime I boot up and try to log in using ubuntu, it asks for a username and password: which I have never set in the first place. So I log in under guest account. But when I try to change ANYTHING ...
8
votes
1answer
172 views

How to block specific apps from opening in specific accounts

How to block certain applications from opening on certain accounts (eg: Stop account John from opening Firefox or Gimp). It is assumed this is for the GUI and not the terminal and would only apply to ...
0
votes
1answer
314 views

vmware player bridged does not work when on vpn

The problem I am having now is I vpn off from my job to a vpn provider. I then load my kali linux vm and connect to the vpn my security labs. I can run scans, enumerations etc. The problem is when I ...
0
votes
1answer
738 views

Somebody help me with my paranoia

I tend to be on the paranoid side, and for some time there are messages in my log file that tend to get me going close to the edge of sanity. Could someone explain the following in my auth.log file ...
0
votes
1answer
15 views

Can I make Apache more secure by removing read access from the others group?

It says in the Apache documentation security tips to set your server root directory and sub-directories to be owned by root, with a group of root and to not be writeable by non-root users. However it ...
0
votes
0answers
7 views

Ipsec connection fails between two hosts

I have two system Host1 IP address - 10.1.0.1 Host2 IP address - 10.1.0.2 Then configured IPsec in both machines as below Host 1 config (/etc/ipsec-tools.conf) Host 1 /etc/ipsec-tools.conf Flush ...
2
votes
1answer
224 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
5
votes
2answers
82 views

What are the reasons to have strong password at home?

For a typical home PC the security situation is following: No servers running, not even the SSH. Firewall is ufw running in simple mode: all outgoing allowed, all incoming denied. Torrents and DC++ ...
0
votes
1answer
18 views

Can program crashes during development affect my system's security?

I have been using Ubuntu for some time, and I loved it! I'm feeling way more safe now. But, I'm a Computer Science Student, and I have to code a lot. And I have been creating various codes, and it ...
0
votes
0answers
6 views

IPsec XFRM bridge

I am new to IPsec, am trying to learn about XFRM bridge acutely. But am not getting enough information around the internet. Can someone help me by providing informational data and links regarding XFRM ...
19
votes
1answer
65k views

How do I scan for viruses with ClamAV?

I installed ClamAV via Terminal (Ctrl+Alt+T) with: sudo apt-get install clamav but how can I scan for viruses?
1
vote
1answer
26 views

Display PPA from which package will be downloaded during upgrade

I have many PPAs installed on my Trusty system. However, I feel that they might try to sneak packages into my system other than those which I include them in the first place. Technically, after adding ...
25
votes
5answers
5k views

What's wrong with using sudo?

In a comment here I've been told that unnecessarily using sudo should be avoided. While it wasn't needed in that particular case, I don't see any harm in using it. I think that when executing trivial ...
10
votes
2answers
729 views

How do rootkits get installed on to a ubuntu server?

I've seen a few posts on checking for rootkits but haven't been able to find any information on how they get onto a linux system. In particular if you exploit a bug in a php web site (yes I'm talking ...
0
votes
3answers
95 views

Run rkhunter regularely on a desktop system

I want to get a warning on my desktop when rkhunter finds something odd on my system. I whitelisted some files and dirs that seem ok in /etc/rkhunter.conf so I get no warnings anymore. Now I want to ...
1
vote
1answer
31 views

Security of Ubuntu downloads

When I try to download Ubuntu Desktop and try to save, it shows different URLs. What is the difference between these different URLs. Which is the safest one? ( eg. releases.ubuntu.com ; ...
0
votes
1answer
8 views

Account Restrctions

i have tried this : ALL=/usr/bin, !/usr/bin/passwd, !/usr/bin/su but not success. is it possible user with sudoers permission cant able to change any password except his own user account ?
1
vote
1answer
24 views

Uninstalling Desktop sharing programs

Sine I want the most security as possible, I'm removing some programs that could give the access to remote desktop. In this case, I removed the Remmina Desktop Client (I think, if it comes with ...
0
votes
0answers
20 views

A question about logs (security)

I was taking a look on this page, about knowing if I'm being hacked, but I got a question. It says that: If large chunks of time (more than 5 minutes) are unaccounted for in a log file while the ...
0
votes
0answers
17 views

How to force SMB2 protocol in samba?

For security reasons, I'd like to disable the SMB1 protocol in samba. Is it possible? I'm running Ubuntu 14.04 LTS.
0
votes
0answers
16 views

Lock down Ubuntu Grub

I need to encrypt Grub boot loader with a password. Just for the sake of a friend not logging in sand trolling me. I have seen other instructions, but I just need Grub secured by a password, not an ...
0
votes
0answers
49 views

Problem using 'ecryptfs-unwrap-passphrase'

I have 2 laptops running Ubuntu 14.04. 1> The Toshiba supplies the mount passphrase when I run 'ecryptfs-unwrap-passphrase' 2> When I run 'ecryptfs-unwrap-passphrase' the HP does not supply ...
0
votes
1answer
15 views

Why am I getting this annoying log messages.CRON[17405]: (root) CMD every minute

I have configured rsyslog.conf file to store log messages to mysql but I am getting some annoying log message in my MySql table. which looks like this. Nov 3 14:48:01 username CRON[17405]: (root) ...
2
votes
3answers
108 views

How to verify Swap area functioning?

After increasing the Swap area and RAM size, the /dev/sda2 has become the Swap area and there is change in the UUID of swap. When the Ubuntu icon appears first after booting, a long line shows some ...
-2
votes
1answer
92 views

Found viruses on my machine by clamTK. Need help catching hackers

I ran clamTK on my 14.04 laptop and found 3 PUA's including one for phishing. I found them in /home/Draeko/.cache/mozilla/firefox/jsobiwpi.default/Cache/9/08/64101d01 .../Cache/4/2C/BS149d01 ...
0
votes
1answer
55 views

A question about the last security update for Ubuntu [duplicate]

I'm subscribed to the Ubuntu Security Notes, so everytime that I receive an e-mail, a new update is avalable. But in the last update, they wrote something in the end that I coudn't undertand much, so ...
0
votes
0answers
16 views

Is it safe to disable apparmor profile?

In this anwser I've been told I can get rid of annoying error messages by disableing AppArmor profile for telepathy-mission-control-5. However, I suspect the profile is enabled by default for a ...
0
votes
0answers
310 views

how to disable usb storage in ubuntu 13.10?

I want to block my all my USB mas storage and allow only devices like keyboard and mouse . I'm able to do so by following the KB. But the issue is that when I connect devices like mobile phones & ...
0
votes
1answer
40 views

Is there a way to encrypt the entire hard drive after you have already installed Ubuntu 14.04?

How would you go about encrypting your entire system drive after you already have installed Ubuntu? I have Ubuntu version 14.04 LTS and I am using a laptop so I would like to have my data encrypted.
0
votes
1answer
23 views

A question about installing security updates

I'm always following a website to know when security updates for Ubuntu are available. But, today, I saw this update (http://www.ubuntu.com/usn/usn-2388-1/), but the website told me to update the ...
0
votes
1answer
11 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
0
votes
0answers
31 views

What is missing in my webserver ufw firewall configuration?

sudo ufw enable sudo ufw logging on sudo ufw allow proto tcp from any to any port 9999 sudo ufw allow proto udp from any to any port 9999 sudo ufw allow 80 sudo ufw app apache sudo ufw app OpenSSH ...
1
vote
1answer
43 views

How do I block all traffic except firefox?

Lets say for example I want to block all traffic except incoming from nginx, outgoing for firefox and allow out and incoming to some torrent client. Would that be possible? I took a look at apparmor ...
0
votes
0answers
58 views

nm-applet: No Certificate Authority certificate chosen

I have access to a wireless network that uses Protected EAP (PEAP), and requires a certificate. I don't have the certificate installed, and after I enter my password for the network it complains that ...
0
votes
1answer
115 views

Does ubuntu require antivirus [duplicate]

Does ubuntu require antivirus? If yes then please tell me what's the difference between windows virus and ubuntu virus?
130
votes
3answers
129k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
0
votes
0answers
26 views

Checking of Residues of Windows

Years ago I had Windows OS in my System. But I now I am using Ubuntu only. I have 3 partitions in my Hard Disc Device Boot Start End Blocks Id System /dev/sda1 * ...
1
vote
0answers
35 views

How to disable mpm-itk for a specific virtualhost?

I've a main site on a server that needs to run a sudo command which I white listed via visudo. That worked fine until I installed apache-mpm-itk and then I started getting the following error: sudo: ...
0
votes
1answer
44 views

Modern Ubuntu home media, security, and automation center [closed]

I'm looking to set up a large computer to act as a home media center, a security system, and possibly home automation. I'd like the following features 64 bit support Modern (based on a recent ...
7
votes
3answers
7k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
0
votes
0answers
31 views

ConsoleKit history log file is suddenly huge

I've had a server running (accessible on the web) for a year or so. There's a series of compressed history files in /var/log/ConsoleKit that are a few kilobytes each. However. October's is 1.2 GB, ...
0
votes
0answers
25 views

There doesn't seem to be a decent guide for Stealth could someone either write one or point me to one?

Stealth Integrity Scanner I'm very interested in being able to setup an IDS and this one seemed like it was really cool and worth while and fairly underrated. I've not really found much on what a ...
0
votes
0answers
154 views

How do I address CVE-2014-3566 (POODLE) for lighttpd (1.4.28) on Ubuntu 12.04? [duplicate]

As most of you know, CVE-2014-3566 (AKA POODLE) involves weaknesses in SSLv3 on clients and servers. See https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-2014-3566/ for more ...
0
votes
0answers
85 views

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption vulnerability) in Lubuntu 14.04 [duplicate]

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption) vulnerability in Lubuntu 14.04 and fix for the issue.
0
votes
0answers
5 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
33
votes
5answers
11k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
18
votes
5answers
5k views

Is there a preinstalled or automatic firewall?

Does Ubuntu come with a preinstalled or automatic firewall? If not, do I need one? I've read some articles about the advantages of linux over other operating systems about security (no need to have ...
0
votes
0answers
13 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables