Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

3
votes
4answers
15k views

Why does `sudo passwd root` reset my root password? Is this a security risk?

Both in my ubuntu desktop host and virtual machine. I have't login as root for about a month, during which I upgraded the kernel. I found my root password doesn't work anymore. However, by using sudo ...
2
votes
0answers
61 views

Why do I see a screen showing all text I typed during the session on logging out?

When I log off of Ubuntu 12.10, a screen appears shortly with all the text I typed during the session, including passwords and such. Is this supposed to happen? [update] The screen is fullscreen ...
0
votes
2answers
7k views

Unlocking the disk (sda5_crypt) Enter Passphrase

I had installed ubuntu 12.10 with security key for enscrypting system hard disk which requires you to enter the passphrase before the login screen every time you boot your system... i wanted to get ...
2
votes
1answer
524 views

Cronjob for security updates?

I'm having trouble creating a cronjob for automatic security updates on my ubuntu server 12.04. I separated the security sources into a different file, and then did this from within a cronjob: ...
0
votes
0answers
102 views

How do I install security updates in Ubuntu [duplicate]

I get the following message during a login. How do I install security updates in Ubuntu. Why am I getting the reboot error. 132 packages can be updated. 68 updates are security updates. Get cloud ...
3
votes
1answer
248 views

Was my computer hacked by Minecraft/Craftbukkit Initscript?

I was playing around in Terminal, I 'mis-clicked' (havent yet configured trackpad, very jumpy cursor) while trying to run nano. What happened next kind of threw me for a loop. Here is what printed ...
2
votes
1answer
998 views

How can I install the Network Security Toolkit (NST) in Ubuntu?

How can I install NST in Ubuntu? I have searched but found nothing.
4
votes
2answers
299 views

How do I check whether a PPA package has been tampered with?

I want to use a recent package from a PPA. How do I make sure that the PPA maintainer hasn't added any malicious code in the version provided there?
1
vote
2answers
107 views

Is there any security alarm?

I have friend that leaves an awful amount of time his laptop unattended. Its is not me, it would be stupid tip for thieves to ask this publicly if it was me :p. I was thinking of an alarm that could ...
8
votes
4answers
770 views

How do I audit an executable to make sure it is not malicious?

I was wondering if there is a tool or a technique to run an executable in an isolated environment, maybe in a virtual machine. While the program is running, I want to be able to audit the ...
0
votes
3answers
289 views

Getting a LAMP server secured and locked down for development

I'm turning my VPS into a development server which will hold development copies of all my websites, controlled by git. Of course, I installed the LAMP server so I can test them. I've already ...
6
votes
1answer
244 views

How can Firefox install WebApps without root privileges?

When visiting a supported site Firefox shows a pop-up message asking if you want to install a WebApp (for instance facebook, pandora, etc). If you accept, the corresponding package is installed (for ...
19
votes
3answers
6k views

Is this command to remove old kernels safe to use?

While browsing the internet for Ubuntu articles, I came across this command: sudo dpkg -l 'linux-*' | sed '/^ii/!d;/'"$(uname -r | sed "s/\(.*\)-\([^0-9]\+\)/\1/")"'/d;s/^[^ ]* [^ ]* \([^ ...
1
vote
0answers
20 views

How to make Ubuntu let me manage the Virus Security? [duplicate]

Possible Duplicate: Do I need to have ‘antivirus software’ installed? Ubuntu 12.04. (Sorry if this is a duplicate) On my previous version of Windows (I've deleted that) I was able to ...
3
votes
1answer
3k views

How to enforce company password complexity in 10.04?

I need to configure a Ubuntu 10.04 server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one ...
0
votes
3answers
1k views

What is pxgsettings?

Today I opened System monitor to kill an app and found three enigmatic entries labelled pxgsettings and four sh entries. See image below: Does anyone have a clue what these are? EDIT Today (2 days ...
1
vote
1answer
79 views

Isn't open-source a two-edge sword? [duplicate]

Possible Duplicate: Wouldn’t writing an open source program make it available for anyone to freely hack and exploit, thus making it less secure? I know that ubuntu is an open source OS, ...
2
votes
1answer
277 views

Will Adobe Reader 9.5.3 be offered in partner repository?

Will there be an Ubuntu package in the Canonical Partner repository for the security update Adobe Reader 9.5.3? ...
1
vote
1answer
1k views

Are we affected by the JAVA vulnerability? Are all “applets” affected? [duplicate]

Possible Duplicate: is OpenJDK Vulnerable to 0-Day Exploit? I read today that the Department of Homeland Security has warned against Java-run systems and requested users to ...
2
votes
0answers
757 views

Why does network manager automatically choose WEP over WPA & WPA2?

I am on Ubuntu 12.10 and for some reason my wireless connection is using WEP when it is set to use WPA/WPA2 Personal. Also I should mention that I used to be on 12.04 and was experiencing the ...
2
votes
2answers
495 views

Lock down all programs besides web browser

I am building some kiosks, running ubuntu, that will host an intranet site. What is the best way to allow access only to an Internet browser, and no other applications?
1
vote
1answer
126 views

Ubuntu “1 time password on login” solution [duplicate]

Possible Duplicate: Why is it bad to run as root? I recently fully switched from Windows into Ubuntu. And of course I loved Ubuntu. But the most annoying thing is, system requires password ...
3
votes
2answers
132 views

Security practice regarding users [closed]

Please understand that I've migrated to a Ubuntu Desktop from Win7 some months ago and while I have been reading about sudoers and Linux in general my understanding is still limited. This is how I ...
7
votes
1answer
2k views

How can you delete only GPS metadata from a jpeg file?

I (think I) can delete all GPS information from jpeg file's metadata by exiftool -gps:all= -xmp:all= filename.jpg but that deletes all XMP metadata. Is there a way to delete only GPS information ...
66
votes
3answers
12k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
14
votes
2answers
2k views

How can I tell that apparmor is working?

Some questions I want answered in the answer: How do I know if apparmor is running? How can I tell if it's working well?
6
votes
3answers
227 views

How do I know my system updates are trustworthy?

I routinely update my system whenever it notifies me of software updates. This is one of those things that I just trust to work without knowing the details, but I have become curious recently: How do ...
1
vote
1answer
695 views

Ubuntu 12.10 Encryption Details

Good Morning! Short version of the question below. Please help me understand the encryption features in Ubuntu 12.10. Installing Ubuntu, I opted both for the full disk encryption option as well as ...
1
vote
2answers
541 views

Networking security issue with suspicious traffic. How to track it down?

I have specific problem a bit advanced for me. On my router log I have seen following lines: Internal Prot. External NAT Time-out 192.168.0.167:56396 TCP ...
9
votes
1answer
2k views

Is there a ubuntu supported X.org alternative (i.e. with security in mind)?

question (what I am looking for?) I am looking for alternatives to X.org, which is the most often used X-Server in linux' graphic systems today (which means also in Ubuntu). Do you know some ...
0
votes
1answer
120 views

Java 1.7 bugs affect ubuntu too?

I remember hearing bad things about java 1.7 on windows and OS-X, but are the same security holes present in Ubuntu?
5
votes
2answers
673 views

Why is there a shell given to user for PostgreSQL?

cat /etc/passwd |grep postgre postgres:x:115:127:PostgreSQL administrator,,,:/var/lib/postgresql:/bin/bash apt-cache show postgresql Package: postgresql Priority: optional Section: database ...
14
votes
2answers
591 views

How do I require Two Factor Authentication to log in?

Running 12.04. I am trying to separate my wrapped-passphrase for my encrypted home folder to require a USB drive be present to login. I followed the instructions here and added the drive to my ...
7
votes
2answers
410 views

How does AppArmor deal with non-profiled Programs?

I setup and configured AppArmor in Ubuntu and I would like to know how AppArmor deals with Packages and Applications which have no AppArmor Profile? After installing the package with sudo apt-get ...
6
votes
1answer
656 views

How to set up an rsync backup to Ubuntu securely?

I have been following various other tutorials and blog posts on setting up a Ubuntu machine as a backup "server" (I'll call it a server, but it's just running Ubuntu desktop) that I push new files to ...
2
votes
2answers
276 views

I don't know my passphrase

I have just installed Ubuntu and I am not sure what my password is. I don't really know that much about computers.
2
votes
1answer
1k views

Should I install SELinux to make my Ubuntu Web server more secure?

This wiki page on using SELinux with Ubuntu informs of the following: The Ubuntu-specific "selinux" and "selinux-policy-ubuntu" packages documented here have not received much attention since ...
10
votes
2answers
2k views

Is there Exec Shield buffer overflow protection for Ubuntu?

Is there Exec Shield buffer overflow protection for Ubuntu? I tried to enable Exec Shield on Ubuntu 12.04 with the following command sudo sysctl -w kernel.exec-shield=1 but it said error: ...
1
vote
1answer
567 views

http strict transport security on apache

I could not find one topic on HSTS here on askubuntu.com yet so here it comes: I want to setup HSTS so that my webserver will force the browsers to use HTTPS. Does anyone know how to set this up for ...
4
votes
2answers
638 views

What's the difference between root account and simulated roots?

So if I disable my root account with sudo passwd -dl root I still have access to sudo {su,bash} or sudo -{s,i} conceptually how are the elavated rights different from the root account? I know the ...
0
votes
1answer
237 views

Can I have ipsec-tools working for non standard ports?

I was trying to set up a manually-keyed connection via ipsec-tools between two ubuntu 12.04 servers, following this simple tutorial, but one of that two servers, has just a range of ports 3000 .. 3100 ...
4
votes
1answer
313 views

Install GNOME extensions through website: security vulnerability?

I found a GNOME extension through a Google search (using Chromium), and was very surprised that I could simply toggle the On/Off switch to have the website install a full GNOME extension on my ...
1
vote
0answers
60 views

Security aspects of home dir encryption [duplicate]

Possible Duplicate: Is there a security risk if a password can be reset easily? Changing the login password will automatically make an encrypted home directory re-accessible, as PAM takes ...
0
votes
1answer
53 views

Will simple encryption be coming to 12.04

Will the simple encryption check box (on Ubuntu 12.10 live cd) be coming to the Ubuntu 12.04.x release?
1
vote
1answer
226 views

How to enable home directory encryption for a particular user?

I prefer to have a dedicated "administrator" user for technical purposes and that was one I've set up during installation. I've also refused to encrypt the home folder of the user. Now, as I've added ...
0
votes
0answers
38 views

Very confusing administrations and password security [duplicate]

Possible Duplicate: How do I reset a lost administrative password? I have recently suffered an annoying problem which is really bugging me at the moment. When I start Ubuntu, I can login ...
7
votes
1answer
399 views

How disable mysql command in sudoers file?

How can I disable /usr/bin/mysql command in sudoers file? I've tried to use it this way: %tailonly ALL=!/usr/bin/mysql But when I access user 'tailonly' of group 'tailonly', this command is still ...
3
votes
1answer
631 views

Require password to login to Nexus 7

The default behavior in the Nexus 7 Image is to log straight in to the default user's desktop, bypassing the lightdm greeter. This seems like an acceptable behavior for testing the core but it's ...
3
votes
1answer
431 views

gnome-online-account remembers my google password?

I just added my google account to gnome-online-account, assuming it'd use OAuth. I should mention I use two factor authentication. I wrote in my google password + my verification key (but chose not ...
1
vote
1answer
4k views

Sync KeePassX with KeePass2

Simply put: In Ubuntu I am using KeePassX and in Windows KeePass2. In am not able to export/import passwords from one to another. I would prefer to use the same database, but I don't really know ...