Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

5
votes
0answers
1k views

Is there a guide for using GRSecurity and Precisew/ PAX?

I'd like to know if there is a guide of some kind for (successfully) configuring, compiling and installing GRSecurity w/PAX etc. in Precise? I basically am trying to build my own custom release ...
4
votes
0answers
25 views

Signature-based rootkit scanner?

Currently the only rootkit scanners I know of have to be installed on the machine before the rootkit so that they can compare file changes etc (e.g.: chkrootkit and rkhunter), but what I really need ...
4
votes
0answers
277 views

OpenJDK, IcedTea security settings

I am a beginner Linux user. From my knowledge the system uses OpenJDK and IcedTea only when I connect to a SAP IDES server through SAP GUI JAVA adding a string in it to connect to that server. I use ...
4
votes
0answers
130 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
3
votes
0answers
77 views

Is my Ubuntu Desktop under attack?

I am currently facing random freeze of my Ubuntu(16.04) desktop and screen fills up with the garbage pixels. I even cannot start command line using Ctrl-Shift-F1. Every time I have to manually do the ...
3
votes
0answers
145 views

After editing root .bashrc Unable to login even with tty1-6 and drop to prompt command from recovery mod

I have had the worse two weeks started with Ubuntu 12.04 , and updating to 14.04 had problem , just after a good luck of successfully installing brand new ubuntu 14.04 I now got the nightmare again ...
3
votes
0answers
367 views

How can I use a Verbatim Secure'n'Go USB key?

I have purchased a 4Gb USB key from Verbatim. How can I use it under Ubuntu? I do not need the "secure data" feature, and have still not saved anything on it, so formatting at low level would be OK. ...
3
votes
0answers
77 views

How to auto restart services when you get security updates?

That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected ...
2
votes
0answers
38 views

Files created in Ubuntu are given permissions to “Everyone” in Windows by default

I switch between Ubuntu and Windows7 workstations. I created a new text file in Ubuntu with some passwords and logins. Saved the file on an external drive. Now in Windows when I select the file the ...
2
votes
0answers
116 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
2
votes
0answers
389 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
2
votes
0answers
180 views

How to disable mpm-itk for a specific virtualhost?

I've a main site on a server that needs to run a sudo command which I white listed via visudo. That worked fine until I installed apache-mpm-itk and then I started getting the following error: sudo: ...
2
votes
0answers
203 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
2
votes
0answers
235 views

Tiger: `rtm` is listening on socket XXXX

On my Ubuntu serve 12.04 LTS, Tiger is reporting a lot of stuffs like this: OLD: --WARN-- [lin002i] The process `rtm' is listening on socket 60404 (UDP) on every interface. NEW: --WARN-- [lin002i] ...
2
votes
0answers
361 views

Upgrade Apache 2.22 to a version that supports ECDHE

I'm trying to setup my Ubuntu 12.04 server installation to support perfect forward security. It seems that the default Apache 2.2.22 build does not support ECDHE. Any suggestions on a good way to ...
2
votes
0answers
557 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
2
votes
0answers
916 views

Integrity check against package repository?

When there are security updates, I review and install them as soon as possible and think about using automatic updates. From time to time I want to boot from a clean boot CD and check if the system ...
2
votes
0answers
139 views

How can I configure sudo to prompt for password and show the executed command?

The title says it all. How can I configure sudo to prompt for password and show the executed command? Rationale: if something gets aliased in the shell or I end up executing a function sudo instead ...
2
votes
0answers
240 views

Prevent that TrueCrypt gets Administrator rights

If I try to open a TrueCrypt drive, TrueCrypt asks me for my administrator-password (also when I am a normal user). I know, that i can prevent this password-asking by editing the sudoers file = giving ...
2
votes
0answers
1k views

Unable to fork: Cannot allocate memory

frequently getting 'fork: Cannot allocate memory' when running commands over ssh. I have 64Gb of RAM and usually 1~2Gb free. swap is more than 8gb free Ubuntu version:"Ubuntu 12.04.2 LTS" Desktop ...
2
votes
0answers
461 views

How can I check the checksum of an installed deb package against the same package in the repository?

Suppose someone got root access to my machine and replaced some files, e.g. Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable Warning: ...
2
votes
0answers
120 views

How to inject or know if my wireless card is injectable

what ways or methods exist to know if a wireless card is injectable or can be injected (Packet injection). Answers should not include recommending me to use another OS that is not the official Ubuntu ...
2
votes
0answers
62 views

Why do I see a screen showing all text I typed during the session on logging out?

When I log off of Ubuntu 12.10, a screen appears shortly with all the text I typed during the session, including passwords and such. Is this supposed to happen? [update] The screen is fullscreen ...
2
votes
0answers
849 views

Why does network manager automatically choose WEP over WPA & WPA2?

I am on Ubuntu 12.10 and for some reason my wireless connection is using WEP when it is set to use WPA/WPA2 Personal. Also I should mention that I used to be on 12.04 and was experiencing the ...
2
votes
0answers
155 views

Cannot login to user with encrypted directory

I unknowingly deleted the .ecrypts directory while reinstalling Ubuntu 12.04. I created a default user by the same name while installing the new version. However, I couldn't login to the user after ...
1
vote
0answers
26 views

12.04 - Cannot unlock user account although it is an admin account

I am having problems similar to these, but in this post no one managed to solve it. How do I unlock system tools such as users and date and time This issued is bothering me a lot, because it also ...
1
vote
0answers
25 views

How are snap applications being protected?

How are snap applications being protected when we look at different aspects? Runtime protections? Memory protections? Differences to ordinary processes? Differences to VMs? Storage protections? ...
1
vote
0answers
40 views

Security of JBOD vs RAID while there is no backup

I have some large amount of data (~40 TB) consisting of small files. The data is currently stored on JBOD. Because the data is not super important and I cannot afford the needed disks there is no ...
1
vote
0answers
102 views

Skip sign verification at module loading

With secure boot enabled, is there a way to load a custom kernel module not signed, or signed with an auto-generated private key? Trying to load my custom module, insmod exits with the error Required ...
1
vote
0answers
25 views

shutdown or reboot after entering wrong password x times

My laptop is configured with a bios password to unlock the encrypted ssd. Most times I don't shut it down and use just suspend/resume - this of course leaves the ssd accessible. To increase security ...
1
vote
0answers
84 views

Can an Ubuntu system get infected by a Macro Virus for MS Office / LibreOffice / OpenOffice?

We are running Ubuntu on several office machines, which are used to handle administrative tasks on a daily basis, e.g. to receive applications via e-mail. We now had the situation that we received "...
1
vote
0answers
57 views

Is “oneconf-service” meant to be running?

I left my computer for a little while, and when I came back it told me that there was an internal error with oneconf-service, and though it (the process) is gone now, in the processes list in the ...
1
vote
0answers
80 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
1
vote
0answers
68 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
1
vote
0answers
14 views

Securing a port in ubuntu with username and password

I have Elasticsearch running on 9200 port.I want to secure it and I dont want others to access the data stored in the index in ElasticSearch. How do I secure the port and limit its access using ...
1
vote
0answers
21 views

How to only allow a file to be opened or executed by certain application(s)?

Let's say that I've got a security application (or something which I just don't want any old application or user to have access to because it is very important and if the wrong guys had access to it ...
1
vote
0answers
66 views

Security update on Ubuntu 14.04

When ever I run Software Updater, I get the following security update option User space IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator However I cannot select this update and after ...
1
vote
0answers
53 views

Java Security overriding whitelist

I'm running 15.04 on a custom build and Java Security is giving me fits. I need to run apps from a specific site that keep throwing a security error. No problem, I go into the control panel and ...
1
vote
0answers
33 views

WiFi does not connect anymore after libgcrypt

I am a total beginner in Ubuntu. I am using Ubuntu 15.04 and everything was working fine, until I tried to install Spotify. This required the installation of libgcrypt11, which was succesfull. ...
1
vote
0answers
149 views

Scanning with ClamAV returns 10820 errors - Infected Joomla site with Trojan Iframe.MA

My server seems to have been infected with a Trojan. I run a Ubuntu 14.04.3 LTS When I approach one of the sites on my server my windows eset scanner blocks the link. Throwing a "Trojan Iframe....
1
vote
0answers
64 views

NoScript syncing?

I have just noticed that after firing up my browser (after a NoScript update) I am getting strange reports of syncing in association with NoScript: When selecting Copy from the right-click menu on ...
1
vote
0answers
40 views

Is there a deadman's switch feature in Ubuntu?

Is there a function in Ubuntu or that can be added that would create a deadman's switch? In effect, I would like to have a feature that, when I'm working on a specific sensitive file, periodically ...
1
vote
0answers
25 views

Challenge-response local user login

Is it possible in Ubuntu, or in any Debian based distro, to use Digital Signatures with a Challenge-response setting for local user login(I don't mean ssh), instead of a password ? Storing the key on ...
1
vote
0answers
89 views

Strange ping result?

I'm new here. I just would like how this is done? Here's the scenario of events: I was pinging randomly some no-ip adresses(i just imagine an adress and ping it) Every thing is fine, most of ...
1
vote
0answers
33 views

Is it possible to maintain server from account without admin rights?

I am wondering how should I proceed if I want to hire someone to maintain my Ubuntu server. If I give admin rights to his account he may do a lot of damage if he decides to, but if I don't give him ...
1
vote
0answers
37 views

Can i run apache 1 / 2 as root?

I am hoping someone can confirm if apache 1 and / or 2 could be run as root if the user wishes it? There are previous questions around this, where people say "no you don't want to do that" and don't ...
1
vote
0answers
106 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...
1
vote
0answers
90 views

Cannot download security updates in Lubuntu 14.04 LTS

Software Updater offers Security Updates--Ubuntu Base--61.9MB. I click Install now and authenticate. Screen shows "Failed to download package, check your internet connection'. There is no problem with ...
1
vote
0answers
41 views

How do I close Chrome when entering standby or hibernate?

If I leave Chrome open, it keeps me logged into my sites even during standby, so the only defence I have is my Linux password. I would like to have Chrome shut down on standby or hibernate, and then ...
1
vote
0answers
119 views

Initramfs suddenly speaks IPv6 but no SSH login

I have been running a configuration with an encrypted root partition and network unlock via Dropbear in initramfs for some time on my Utopic Xubuntu Mediacenter. Since I am actively using IPv6 to ...