Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
2answers
231 views

How can I disable the Terminal Emulator for certain users?

How to prevent specific users from using the terminal emulator?! I make a trick by writing a script in .bashrc which request a user to enter a password to be able to use the terminal emulator. But ...
0
votes
0answers
8 views

Wireless network connection won't stay secured

I set my wireless connections with WPA & WPA2 Personal Security & a password. Every time I shut down & come back later those settings are gone & my network connection is unsecured ...
1
vote
2answers
41 views

What is this and how can this happen? Is this a security issue or can it be a virus?

From the last 3-4 days, my laptop has started becoming much laggy when I'm working on Android Studio or if it is just running in the background. So, today again I was working in Android Studio. My ...
0
votes
1answer
18 views

Ubuntu Phone prevent text messages from lock screen

On my Aquaris Ubuntu Phone, text messages quickly pop up on the lock screen. As I consider this a serious security issue, is it possible to hide any messages from the lock screen? Thanks for any ...
0
votes
1answer
12 views

How to exclude a specific folder from search in Synapse?

I added excluded folder to Security & Privacy settings and I followed this instructions but all of them seem to be working only when using Unity Dash search. Inside System and Home Dir. I could ...
3
votes
1answer
7k views

Can I install all the hacking tools of KALI on Ubuntu?

I want to know is there any way to install all hacking tools of kali on ubuntu 12.04 ? If yes then pls tell me how ? like sqlmap , nikto , john , aircrack-ng etc . Thanks.
2
votes
2answers
30 views

When would my application need to run with privileges?

One way of making sure an application is less prone to attack is to make sure it runs with the least privileges required (user mode preferred). I've only usually programmed for Windows using the .NET ...
0
votes
1answer
212 views

can windows virus affect Linux machine through wine? [duplicate]

When we use wine on Linux PC windows Virus can affect folders of wine? I think may be not; But I still Confuse about that. What is accurate answer? Wine is emulator of windows then some question ...
0
votes
1answer
835 views

Alternative Open Source software to GFI end point security

What are the GUI open source alternatives To GFI end point security for Windows? knowing that I'm using Ubuntu 12.04 64bit Thanks in advance...
21
votes
3answers
2k views

What is the “Free software only” option when installing Ubuntu?

When installing Ubuntu, you get a Free software only option. Does that Free software only option mean Free as in beer or Free as in freedom? When I say free as in freedom, I mean FSF type of ...
0
votes
2answers
45 views

how to stop administrative password change

It is extremely easy in ubuntu to change the administrator password by using the recovery console and dropping to root. Is there any way to stop a root user from changing the administrative password?
1
vote
1answer
2k views

How to setup Squid Proxy Server on ubuntu 12.04 LTS?

I had tried using the Ubuntu wiki guidelines to set it up on test server, and it worked. Though I would appreciate if anyone can provide me with few other links as this time I am going to install it ...
0
votes
1answer
23 views

Unresolvable problem [duplicate]

An unresolvable problem occurred while initialising the package information. Please report this bug for the 'update-manager' package and try to include the following error message: 'E:Malformed line ...
0
votes
1answer
65 views

Connect button grayed out in 802.1x authentication dialog

Since I upgraded to 15.04 I can't connect to our office wired network anymore since I can't press connect in the authentication dialog.
1
vote
0answers
31 views

Could not load host key: /etc/ssh/ssh_host_ed25519_key in /var/log/auth.log

I have an Ubuntu 14.04 instance running on AWS. I was browsing the auth logs (/var/log/auth.log*), and noticed the following line appearing: Could not load host key: /etc/ssh/ssh_host_ed25519_key ...
0
votes
0answers
28 views

Security concerns while dual booting Windows 8 and Ubuntu [closed]

In light of recent intrusive additions to ESEA's client I have completely reformatted my computer and re-installed Windows alongside Ubuntu. Here's my setup: 1 SSD fully dedicated to Windows 8.1 1 ...
0
votes
0answers
53 views

How to encrypt dual-booted Xubuntu?

I'm running a dual-booted Windows and Xubuntu system. I need full partition encryption, but only on the Xubuntu side. Is it possible to set it up without loosing any data? Which method is the safest ...
3
votes
1answer
39 views

How to show all files created on a specific date

On 16/05/2015 at 17:18 I visited a malicious website. And I suspect a drive-by-download, so I want to check my machine to see since that time in order of creation which files have been created or ...
0
votes
1answer
32 views

ssh key is missing and I've been logged out of all my sites [closed]

What conclusion would you draw if you've been logged out of all sites on Firefox and your VPS has been removed from your known_hosts file in .ssh on a personal computer?
5
votes
1answer
10k views

Fingerprint reader driver for Validity Sensors Fingerprint scanner

prakhar@pr3d4tOr:~$ lsusb -s 001:003 -v Bus 001 Device 003: ID 138a:0018 Validity Sensors, Inc. Fingerprint scanner Couldn't open device, some information will be missing Device Descriptor: bLength ...
51
votes
10answers
45k views

How to harden an SSH server?

What measures can/should I take to make sure that security around my SSH server is absolutely impermeable? This will be community wiki from the start, so lets see what people do to secure their ...
0
votes
0answers
21 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
2
votes
3answers
352 views

Shell Script to block Ip addresses

Is it possible to write a shell script that checks connections in an apache server and blocks suspicious ip addresses with large number of connections automatically and fires a mail for it to the ...
2
votes
0answers
17 views

How to enable unhide in rkhunter

I have installed rkhunter with: sudo apt-get install rkhunter And even though I have enabled all test, when I run: sudo rkhunter --check --sk If I check in the log file, I see this about the ...
0
votes
0answers
28 views

Upgrade hardware enablement stack but retain kernel

Ubuntu 14.04.01 According to official documentation, upgrading the hardware enablement stack in Ubuntu to utopic-lts upgrades the kernel and xorg. I only want to upgrade xorg to correct a display ...
1
vote
1answer
1k views

lightdm failed to start session; user folder requesting Gnome

We're migrating some old 10.10 users on Gnome to 14.04 using Unity. When they log on, however, the lightdm greeter complains "Failed to start session." /var/log/lightdm/lightdm.log notes: ...
2
votes
1answer
21 views

Installing Tripwire

I just installed a fresh version of Ubuntu 15 and while I installed it I did not connect to the Internet. I have read you should install tripwire first thing after a fresh install and before you even ...
2
votes
1answer
42 views

Mumblehard Malware on my Server?

this morning, I watched a monthly webinar about IT-Security. One of the actual topics was the malware "mumblehard". This malware makes your server to a part of a botnet and sends spam via email. The ...
1
vote
0answers
21 views

Cannot download security updates in Lubuntu 14.04 LTS

Software Updater offers Security Updates--Ubuntu Base--61.9MB. I click Install now and authenticate. Screen shows "Failed to download package, check your internet connection'. There is no problem with ...
-1
votes
0answers
40 views

This Connection is Untrusted

I am trying to open various websites in Google Chrome, but it says they are all untrusted. To fix this I was adding that particular site on the exception list but when I added it says- "Certificate ...
3
votes
1answer
2k views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
2
votes
2answers
72 views

Is it possible to restrict a program from reading anything outside what they need?

I understand that running programs as a non-root user is done in order to restrict the programs from writing system files, which prevents malware from compromising the system security. But in most ...
31
votes
5answers
16k views

How to sandbox applications?

I want to run small untrusted programs, but restrict them from accessing any files outside of their folder, network access, and everything else that they don't really need. What is the simplest way to ...
3
votes
2answers
139 views

How to make firefox ask for master password only when trying to show passwords

I have set up a master password on firefox and the browser asks for it at unexpected time. Not every time in the start (so it isn't useful to "lock" the browser. Someone may auto-login to a website ...
4
votes
3answers
14k views

How can I open Java's Control Panel?

How can I open Java's Control Panel to change the security settings?
3
votes
0answers
76 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
2
votes
1answer
893 views

PUA.Win.Exploit.CVE_2012_0110 FOUND

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: ...
0
votes
0answers
42 views

/var/cache/apt/apt-file/gb.archive.ubuntu.com_ubuntu_dists_vivid-backports_Contents-amd64.gz: PUA.File.Exploit.CVE_2012_1461 FOUND

I recently scanned my machine with ClamAV (using the latest virus definitions) with this command: sudo clamscan -r --detect-pua --infected --bell / And this was one of the outputted results: ...
0
votes
0answers
68 views

Is this a security threat (failed SSH login as root)

I was checking the /var/log/auth.log and I found it's full of these two paragraphs May 6 07:42:12 mypc2 sshd[4489]: Failed password for root from 221.229.166.29 port 36998 ssh2 May 6 07:42:18 ...
3
votes
1answer
44 views

Is running packages from Ubuntu universe more risky than running the same packages on Debian? [closed]

I am running Ubuntu LTS Server. Are there any concerns with security patching of universe packages? I mean am I in risk of running vulnerable system if having universe packages when compared to the ...
0
votes
1answer
313 views

Restrict user access to /proc and /sys

I have one big problem: setfacl does not seem to work for /proc and /sys, but I would like to restrict one specific users rights and I do not find it acceptable for that user to read stuff like ...
1
vote
1answer
207 views

.android Folder and adbkey Files

Today I discovered a folder in my home directory with the name ".android". Inside the folder are just two files, "adbkey" and "adbkey.pub". I have searched around and have found out that adbkey.pub ...
1
vote
1answer
41 views

Set password security with pam.d (urgent homework)

I am trying to change the password security check. I would like to set rules for the password when adding a new user. Here is the content of my /etc/pam.d/common-password file: password ...
0
votes
0answers
7 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...
93
votes
19answers
25k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
1
vote
0answers
15 views

How do I close Chrome when entering standby or hibernate?

If I leave Chrome open, it keeps me logged into my sites even during standby, so the only defence I have is my Linux password. I would like to have Chrome shut down on standby or hibernate, and then ...
3
votes
0answers
60 views

KeePass2 and KeePassX, which is more secure? [closed]

I use KeePass2 on Windows and KeePassX on Linux. I understand the arguments between the two on database compatibility and cross-platform performance. What I'm curious about is whether either one is ...
0
votes
5answers
4k views

fail2ban or denyhosts to block invalid username login attempts

Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have: [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
5
votes
3answers
877 views

Why is this bypassing the SUDO password?

I have a bash script I am using to automate a SVN checkout. The contents of the file were: #!/bin/bash cd /var/www-cake sudo svn checkout file:///usr/local/svn/bash_repo/repo/ Then when I double ...
1
vote
3answers
332 views

How can I have a Very secure Ubuntu Desktop system [closed]

How can I have a Very secure Ubuntu Desktop system and where is the best place online to learn about hardening Linux, not just Ubuntu?