Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

3
votes
0answers
47 views

How to auto restart services when you get security updates?

That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected ...
3
votes
0answers
102 views

Is having Lubuntu 12.04 a security risk?

I have a computer with Lubuntu 12.04 installed. Since unlike Ubuntu 12.04 Lubuntu is not LTS, I will not get Lubuntu updates. However, I am still getting updates (I guess these are the general Ubuntu ...
3
votes
0answers
348 views

Mirror using apt-mirror and exclud certain sections/categories

I'm currently using apt-mirror to create a local mirror of the debian repositories. As the mirrored repositories will be used only by machines destined to be headless servers and as an effort to ...
3
votes
0answers
578 views

Is there a guide for using GRSecurity and Precisew/ PAX?

I'd like to know if there is a guide of some kind for (successfully) configuring, compiling and installing GRSecurity w/PAX etc. in Precise? I basically am trying to build my own custom release ...
2
votes
0answers
187 views

Upgrade Apache 2.22 to a version that supports ECDHE

I'm trying to setup my Ubuntu 12.04 server installation to support perfect forward security. It seems that the default Apache 2.2.22 build does not support ECDHE. Any suggestions on a good way to ...
2
votes
0answers
41 views

Is universe checked by the Ubuntu Security team?

I have a generall question regarding the Ubuntu universe repository. Does anybody know if they are checked by Ubuntu Security Team? Will they move or delete packages if any problem is encountered ...
2
votes
0answers
342 views

Integrity check against package repository?

When there are security updates, I review and install them as soon as possible and think about using automatic updates. From time to time I want to boot from a clean boot CD and check if the system ...
2
votes
0answers
95 views

How can I configure sudo to prompt for password and show the executed command?

The title says it all. How can I configure sudo to prompt for password and show the executed command? Rationale: if something gets aliased in the shell or I end up executing a function sudo instead ...
2
votes
0answers
114 views

Prevent that TrueCrypt gets Administrator rights

If I try to open a TrueCrypt drive, TrueCrypt asks me for my administrator-password (also when I am a normal user). I know, that i can prevent this password-asking by editing the sudoers file = giving ...
2
votes
0answers
680 views

Unable to fork: Cannot allocate memory

frequently getting 'fork: Cannot allocate memory' when running commands over ssh. I have 64Gb of RAM and usually 1~2Gb free. swap is more than 8gb free Ubuntu version:"Ubuntu 12.04.2 LTS" Desktop ...
2
votes
0answers
261 views

How can I add an SSL client certificate/key globally in Ubuntu?

I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
2
votes
0answers
195 views

How can I check the checksum of an installed deb package against the same package in the repository?

Suppose someone got root access to my machine and replaced some files, e.g. Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable Warning: ...
2
votes
0answers
89 views

How to inject or know if my wireless card is injectable

what ways or methods exist to know if a wireless card is injectable or can be injected (Packet injection). Answers should not include recommending me to use another OS that is not the official Ubuntu ...
2
votes
0answers
56 views

Why do I see a screen showing all text I typed during the session on logging out?

When I log off of Ubuntu 12.10, a screen appears shortly with all the text I typed during the session, including passwords and such. Is this supposed to happen? [update] The screen is fullscreen ...
2
votes
0answers
519 views

Why does network manager automatically choose WEP over WPA & WPA2?

I am on Ubuntu 12.10 and for some reason my wireless connection is using WEP when it is set to use WPA/WPA2 Personal. Also I should mention that I used to be on 12.04 and was experiencing the ...
2
votes
0answers
139 views

Cannot login to user with encrypted directory

I unknowingly deleted the .ecrypts directory while reinstalling Ubuntu 12.04. I created a default user by the same name while installing the new version. However, I couldn't login to the user after ...
1
vote
0answers
11 views

What auditing information is available for Universe repository software packages?

I understand that the "Masters of the Universe" (MOTUs) are responsible for packaging and reviewing/checking software that goes into the Universe repository, but there seems to be no formal process ...
1
vote
0answers
26 views

Hide “Places” or “Username” in File Chooser Dialog

Background Making a video-capture of a website demo; part of the demo requires uploading files. Problem The username is displayed in the video, which is a security concern. Question How do you ...
1
vote
0answers
36 views

How to disable Pointer Obfuscation on 12.04

I am working on a security project for school and need to overflow a buffer, I therefore need to overwrite the eip, but for some reason I can't. The A's that I overwrite the buffer with are spread all ...
1
vote
0answers
30 views

Does the “security” repository provides anything not found in the “updates” repository?

For the limited number of package I looked at (e.g. apache), I found that the package version in the updates repository is always newer than or equal to the version available in the security ...
1
vote
0answers
192 views

SSL certificates issue with Ubuntu 12.04 as guest OS in a Windows7 virtual box behind strict firewall

I have set up an ubuntu guest for Rails development in a Windows7-hosted virtual box. The windows workstation is a behind an extremely strict firewall with often fluctuating rules. The ubuntu host ...
1
vote
0answers
259 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
1
vote
0answers
74 views

How to unlock multiple encrypted partitions on boot?

I have two encrypted partitions sharing the same passphrase. I would rather not enter the password twice plus the login password. How can I unlock both partitions at once? Maybe even only enter one ...
1
vote
0answers
45 views

Can a weak Ubuntu user password be a risk for ONLINE security?

Can anyone gain an unauthorized remote access to my Ubuntu machine? Does having a strong user password really helps prevent this? Or firewall just doesn't let anyone in by default, regardless of the ...
1
vote
0answers
96 views

Good security setup in a LAMP environment

I have created a script to automate setting up my LAMP environment as well as installing some other software I find very helpful in coding. The script can be found here I only have one user "root" ...
1
vote
0answers
260 views

Secure OpenERP Server

I use a Ubuntu 12.10 Desktop as a server 'only' for OpenERP 7.0. This OpenERP server is used by both, the team as well as clients. I've checked out posts that help someone secure a 'web-server' (i.e a ...
1
vote
0answers
172 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
1
vote
0answers
292 views

fail2ban block retry count always changes

As title mentions clearly, fail2ban block retry count always changes. I set all retry counts to 3; but sometimes it blocks me after 6 or 7 retries. How can set its behavior a constant value? I added ...
1
vote
0answers
103 views

Securing Amazon EC2 Ubuntu server

I'm about to launch a product I'm working on into alpha phase but before that I'd like to ask a bit about securing my Ubuntu server 64bit which is hosted at Amazon AWS EC2. The problem is my software ...
1
vote
0answers
83 views

Running a VPN server off Ubuntu Desktop?

I am unfamiliar with Ubuntu and Linux in general. I bought 3 old Dell PowerEdge 2650 servers off eBay for £20. I didn't really know what I was going to do with them, but for the price, they seemed ...
1
vote
0answers
98 views

How do I edit the commands that start a service in Ubuntu 12?

So I am trying out GBrowse, as we will use this later on. But then, I'm getting this ------------------------------------------------------------------------------------------------ 256000 features ...
1
vote
0answers
162 views

SSL connection fails to authenticate certificates for some pages?

This time, i am going to solve some irritating things with my networking on school, using ubuntu 12.10. I am perfectly able to connect to the proxy authenticated network the school uses. But my ...
1
vote
0answers
48 views

Is it possible to have different PAM requirements per network card?

I have a little Ubuntu box with two NICs ("front": internet, "back": wifi). What I would like is to set up standard/high levels of PAM goodness on the external NIC card, while on the internal (Wifi ...
1
vote
0answers
59 views

Potential security problem of passwords and key

Is this a potential security problem for ubuntu? I can access the "passwords and key" function without key in password.
1
vote
0answers
212 views

Secure APT GPG problem with Release files

I'm experiencing a problem with apt. We're using our own repository and the users apt is configured to check the peer and host of the repository. Furthermore the Release file is verified (with the ...
0
votes
0answers
12 views

Create x11vnc password file with both admin and viewonly password on 12.0.4LTS

Using Ubuntu 12.0.4 LTS and need to enable x11vnc access with admin and viewonly access based on which vnc password is supplied. The x11vnc server gets started out of /etc/lightdm/start via: ...
0
votes
0answers
7 views

Juju security model issues

What plans are there to extend the security model in Juju? We see two significant issues with the current model - no internal firewalling within an environment, and the inability to expose ports to ...
0
votes
0answers
25 views

SELlinux security domains

I am studying SELinux, but I can't find any clear definition for security domains. What is a security domain and what is its difference with security context?
0
votes
0answers
70 views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v ...
0
votes
0answers
13 views

New user only RWX one directory

So, I read this: Is it possible to create users that can only use one directory? I would like to make it where my newly created user "kevin" (to keep in theme with the referenced post) cannot RWX in ...
0
votes
0answers
15 views

full disk asymmetric encryption

Wondering if there's a protocol and open source program for full-disk, asymmetric encryption. Something like, encrypting the keys into the start of the disk (using AES/something stronger) and then ...
0
votes
0answers
16 views

Read CPU serial, boot kernel only on match

I have been advised to come to you here. I'd like to bind a kernel to a specific CPU's serial number on a Raspberry Pi. The serial number is available at runtime to userland through /proc/cpuinfo and ...
0
votes
0answers
16 views

In sysctl.conf settings, what is the difference between 'all' & 'default'?

In context of sysctl.conf settings, what is the difference between (all vs. default) like net.ipv4.conf.all.accept_source_route & net.ipv4.conf.default.accept_source_route in sysctl settings ? ...
0
votes
0answers
50 views

Analyze firewall logs to track intrusion

I have just started this topic where the firewall on my router detects intrusions e.g. Mar 11 14:15:11 kernel warning kernel: [fwlog] Intrusion -> SRC=85.102.133.241 DST=109.78.126.234 ...
0
votes
0answers
10 views

Camera Monitor keeps triggering

Just installed Firefox into WINE and now webcam-monitor keeps saying something is accessing my webcam. What's going on?
0
votes
0answers
7 views

Matching vulnerabilities with upstream versions

How am I supposed to match vulnerabilities with services fingerprint with ubuntu (and debian) upstream's version? Is there a public database to match these versions with original versions? ...
0
votes
0answers
9 views

What prevents a user process from writing at random positions in memory and damage the OS or other processes?

Why can't the following code damage memory? int x; while(1) { x = rand();//assuming that the address space has the size of an int *x = 0; } I know that each process has a virtual address ...
0
votes
0answers
17 views

How can I limit Symform's privileges?

Symform's services expect to be run as root. For example, when I override what user runs them, they fail with errors such as: mv: cannot move '/tmp/symformtasks.98145' to '/etc/cron.d/symform-node': ...
0
votes
0answers
57 views

Should I install Apache & PHP separately OR uninstall MySQL from a LAMP stack?

I'm developing a site for my customers to view their account transaction history, with the ability to make payments through a hosted pay-page. Our legacy system requires keeping our database ...
0
votes
0answers
10 views

How to save kftpgrabber site in kwallet

I'm researching for a more secure FTP client which is more securelely stores site details like passwords, than Filezilla and found kftpgrabber fits with my need. However for get the most out from ...