Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

3
votes
1answer
189 views

What are Ubuntu One's security measures?

Tell me how Ubuntu One handles security. Is my data encrypted when stored on Ubuntu servers? Who holds the key? Do Ubuntu One employees have access to my data?
1
vote
2answers
529 views

auto start disk formatting when entering wrong password

I'm thinking of way to protect data from stealing. Is there any way to start auto disk formatting when someone enters wrong password on login? Or when enters specific password which would trigger disk ...
12
votes
3answers
1k views

How do I call a dialog for authentication?

I am writing a gui program using wx module in python. In program whenever I am accessing a folder which requires root privilege then it asks password at terminal but I want to display the dialog to ...
4
votes
5answers
1k views

Is open source software vulnerable to viruses?

I understand the ideas behind open source software, but I am more interested in the security aspects. How is open source software not exposed to viruses or any kind of Internet attack? How does it ...
4
votes
5answers
4k views

How can I lock down ubuntu?

I am working on a small project. I have about 20 computers with Ubuntu 10.04 on them, which will be used in a computer lab for elementary, middle, high school and college kids. Some seniors and new ...
0
votes
1answer
303 views

How do you set up an Ubuntu server that is “encrypted at rest”?

We're working on a project in which the customer needs the Ubuntu server on which a web app and database are running to be "encrypted at rest". What's the best way to implement this?
1
vote
1answer
69 views

We have a few web servers, how should we reason regarding upgrades to new versions?

We run a SaaS business today, all servers run Ubuntu Server and usually a LAMP stack on top of that. We are reasearching a little bit how we should upgrades our servers. One option is to stay on LTS ...
1
vote
1answer
229 views

Automatically locking screen without shutting it off

Hey everyone— I have a home theater PC running Ubuntu 11.10, outputting over HDMI (for audio and video). I'm having an issue: I'd like the screen to lock automatically (when video is not playing, of ...
5
votes
3answers
2k views

Can I use linux safely and sell on ebay?

I sell things on ebay here and there and I have always used windows. Is linux safe enough to do my ebay dealings? Is there anything related to linux I need to download to be keep passwords and money ...
2
votes
1answer
766 views

How can I allow a user to stream my videos securely?

I've got a script that records 10 minute videos from a webcam to video1.mp4 video2.mp4 video3.mp4 video4.mp4 Then records over video1 again in rotation. I'd like one user to be able to view these ...
0
votes
1answer
30 views

Is there a tracking site for which community packages might need attention?

The question I'm referring to is this one. While disabling everything but main and restricted is do-able to get for sure up to date packages...I think more people might jump in if there was a ...
30
votes
4answers
1k views

Does Ubuntu generally post timely security updates?

Concrete issue: The Oneiric nginx package is at version 1.0.5-1, released in July 2011 according to the changelog. The recent memory-disclosure vulnerability (advisory page, CVE-2012-1180, ...
4
votes
0answers
113 views

Is there any way to format my hard drive so that data cannot be restored? [duplicate]

Possible Duplicate: How can I securely erase a USB hard drive? How to delete file(s) in secure manner? I have 500 GB HD and I have very important personal data in it. The thing is that if ...
2
votes
2answers
562 views

Is Ubuntu security enough?

I work with sensible data, so I need a reasonable level of security and use Ubuntu as main operative system in a professional activity. I have developed a php platform that performs some sensible ...
7
votes
1answer
19k views

What are ICMP redirects and should they be blocked?

After enabling ufw and the Tiger security auditor, I see warnings saying: The system accepts ICMP redirection messages What are ICMP redirection messages? Should they be disabled for security ...
3
votes
1answer
2k views

Where is the username and password stored

Just for my curiosity ,where is the username and associated password is stored in ubuntu? And how it is verified at the login time?
9
votes
5answers
347 views

Is there an application or method to log of data transfers?

My friend asked me for some files that I let him take from my system. I did not see he doing that. Then I was left with a doubt: what extra files or data did he take from my system? I was thinking is ...
2
votes
6answers
5k views

How do I encrypt/decrypt file within gedit?

In the previous version of Ubuntu (eg: maverick, natty), I used to do a: sudo apt-get install gedit-plugins seahorse to have the ability to encrypt/decrypt file within Gedit after enabling the ...
1
vote
0answers
182 views

How can I tell if ZRTP is enabled in a Twinkle SIP call? [closed]

I recently attended a talk about GNU Telephony. I was informed that Twinkle supports ZRTP for encrypted SIP calls. I went into Edit > User Profile > Security and made sure that ZRTP was enables and ...
3
votes
1answer
223 views

Is there a security risk if a password can be reset easily?

was just reading up on changing password complexity and I stumbled upon this: https://help.ubuntu.com/11.04/ubuntu-help/user-forgottenpassword.html Isn't that a big security risk? Assuming someone ...
3
votes
1answer
483 views

Does the Picasa 3.9 wine/winetricks/ie6 fix leave any vulnerabilities?

I recently added Picasa 3.9 to my Ubuntu 11.10 machine using the technique from this askUbuntu question: How would I install Picasa 3.9? But I'm wondering: does adding IE 6.0 (or Wine or Winetricks) ...
9
votes
5answers
1k views

How to secure Ubuntu for a non-technical user? (your mom)

My mother will be traveling for a while and I need to provide her with a secure laptop so she can work. A windows laptop is out of the question because: she'll be logging into dodgy hotel wireless ...
5
votes
3answers
488 views

Setting to protect gnome-terminal from key logging

Looks like it is easy to log keystrokes of all processes of the same user. A basic keylogger is 'xinput'. xinput test-xi2 The command generates log of all key-presses. Unfortunately, this includes ...
2
votes
1answer
203 views

Install Ubuntu on full encrypted HD?

I have here a windows on a full encrypted hd. I cannot disable this encrypted hd. Everything should be unchanged, I just want to Install Ubuntu on an extra partition. But here I think the problem is: ...
1
vote
2answers
389 views

what software can i use to access SILC Networks?

i want to access a SILC network and all the infos from the official site are missing (site down?!?) EDIT: it seems the site is back up as of last week. Good thing that i got curious and checked it ...
1
vote
0answers
224 views

Secure APT GPG problem with Release files

I'm experiencing a problem with apt. We're using our own repository and the users apt is configured to check the peer and host of the repository. Furthermore the Release file is verified (with the ...
4
votes
3answers
2k views

Is it possible that Ubuntu gets infected with a botnet?

I would like to know about Ubuntu and virus/botnets, specifically how likely it is that it could get infected.
2
votes
0answers
97 views

Can I trust all packages in the Ubuntu official repository? [duplicate]

Possible Duplicate: Which Ubuntu repositories are totally safe and free from malware? Can I trust all packages in the Ubuntu official repository? What security verifications are done for ...
0
votes
1answer
58 views

Why does a custom PPA offers to update gnome keyring?

I installed this PPA only to add some control panel widget. But it suggests some updates I don't expect from it. Is this safe to install?
2
votes
1answer
171 views

Setting up Samba really that easy?

I set up an ubuntu-server and installed Samba. I set the "interfaces" option in the .conf-file to "lo eth0". My question is according to the security of this system: Am I done with the setup process? ...
2
votes
2answers
4k views

Am I being hacked?

I recently let a hacker (who I met once and don't know too well) connect to my computer through (I guess it was remote access)- I had to fill in my IP on a third party website and click a button and ...
1
vote
1answer
644 views

How do I check the status of apf firewall?

How to check whether apf (Advanced Policy Firewall) is running after the reboot? It doesn’t have any status, so how can we know?
3
votes
1answer
686 views

How to list all setuid binaries in the Ubuntu repository?

Is there any way I can list all setuid binaries inside the Ubuntu respository? Or does such a list exist somewhere on the web? I have looked at the apt-get options and could not come up with a ...
0
votes
1answer
555 views

Why is my new user being asked for a sudo password?

I'm running Ubuntu 11.10. I'm trying to setup a user that's essentially a clone of the permissions of the ubuntu user. This works but I'm not able to sudo with this new user without supplying a ...
1
vote
1answer
208 views

Deb Installation And Man In The Middle Attack

Is the deb installation process protected against Man In The Middle Attacks that would alter the install script? It seems if not, then it would be possible for a Man In The Middle Attack to place ...
6
votes
2answers
794 views

syncing a GNOME-keyring across devices w/Ubuntu One

I wrote an app that creates and uses its own keyring. I'd like to have that keyring with secrets attributes and all sync via U1 so that the same passwords are available on all the Linux devices. ...
1
vote
1answer
312 views

Remote camera security

For Ubuntu 11.04 I need an application that will monitor and record 4 CCTV cameras w/sound. Need playback of the recorded activity with timestamp. It should be able to control zoom and camera angle ...
4
votes
1answer
950 views

How secure is gnome-online-accounts?

As with anything that wants my passwords I want to know about the how safe it is to use the gnome-online-accounts [g-o-a] feature (and how it can be exploited). I'm only interested in the Google part ...
4
votes
1answer
1k views

Is it a security risk if the /tmp folder is not owned by root?

Is it a possible hole of security having /tmp/ folder under user owner instead of root? I have set it temporally under my user by mistake, after that its impossible to bring it back to root user: ...
1
vote
3answers
347 views

Running Programs As Root While Online

I'm remastering an Ubuntu based distro, meant to be used live only and primarily as a browser so a users hard-drive can be virus free while online. This live browsing adds security for Linux users, ...
38
votes
6answers
50k views

Is there a way to password protect individual folders?

Let's say that I have a folder, within my Documents folder, that has files I want no one to access without a password. Is there a way to lock down that folder so that it's password protected / ...
0
votes
1answer
278 views

Many process named “su-to-root” appeared on my system monitor, is my computer owned?

Two process named gksu and two process named su-to-root appeared on my system monitor, is my computer owned? How can I be sure, and if this true, how can I rip out the intruder without full system ...
5
votes
1answer
3k views

How to harden a ubuntu desktop?

We are planning to install 80 ubuntu desktops in a college. The management told us to harden the ubuntu desktop as much as possible, like the user should not able to customize system settings for ...
2
votes
2answers
216 views

How to empty my Ubuntu-One folder

I want to stop using Ubuntu-One. How do I delete whatever is stored in the cloud?
0
votes
1answer
126 views

Will there be a security fix for php in 10.04 LTS?

Is there already a security fix available for the latest critical PHP vulnerability in 10.04 LTS? If not when will it be available? ...
3
votes
1answer
339 views

Is LAMP strictly for development purposes? [closed]

So basically, is LAMP strictly for development purposes or is it fine for production websites as well? I ask this because I have recently switched to Ubuntu from Windows and if LAMP is anything like ...
15
votes
2answers
21k views

How can I allow SSH password authentication from only certain IP addresses?

I'd like to allow SSH password authentication from only a certain subnet. I see the option to disallow it globally in /etc/ssh/sshd_config: # Change to no to disable tunnelled clear text passwords ...
2
votes
1answer
458 views

How To Secure (Ubuntu Server ) Linked Through DDNS

i have ubuntu server i use to access it through DDNS & Ubuntu Server is running as guest os Services running on Ubuntu Server apache ssh dns samba i m also looking for tools which ...
0
votes
1answer
615 views

OpenSSH 5.9p1 on Ubuntu 11.10

I want to build a deb package with the latest version of openssh from source. Then I want to install it on my machine. I am running: Linux Ubuntu-1110-oneiric-64-minimal 3.0.0-12-server #20-Ubuntu ...
8
votes
1answer
87 views

How do I report a sensitive security issue?

In Ubuntu 10.04 (and perhaps later) there appears to be a serious vulnerability to a brute force dictionary attack on any Apache server that is using MySQL to validate user logins. This issue means ...