Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

6
votes
3answers
795 views

Filesystem that gives an encrypted view of a directory—the inverse of EncFS

Currently I'm using EncFS to encrypt my directory "confidential" to ".encconfidential" and sync that encrypted directory using an online service (e.g. Dropbox, UbuntuOne etc). However my entire disk ...
8
votes
2answers
6k views

Google Authenticator for Desktop (lightdm or gdm plugin)

There has a been a similar question, but that's not exactly what I want. I'd like to know if there is a plugin, or add-on, for lightdm or gdm that allows me to authenticate using my password AND ...
28
votes
2answers
2k views

Should security updates always be installed?

We are a small shop, with no real sysadmin. So developers (Java EE) also try to maintain Ubuntu server 12.04. When I login a terminal and I see messages like: 6 packages can be updated. 6 updates ...
2
votes
3answers
314 views

GUI Tool to deny Standard users from Using CD-ROM and USBs?

As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access. I could do it by removing the user from the 'cdrom' and 'plugdev' ...
18
votes
4answers
21k views

Which free VPN providers support Ubuntu?

Can't find any free VPN provider for Ubuntu. I tried looking into old questions but they seem to be outdated.
1
vote
1answer
2k views

After Installation Whole Disk Encryption? 12.04

I know some fragments of this question have been asked in previous posts and I have reviewed them - however I have a more thorough question... I did not choose to do whole disk encryption when I used ...
2
votes
1answer
92 views

How do I turn on a login page for Bugzilla?

I have Bugzilla 4.2.1 running on my Ubuntu 11.10, It working as it should and everything is fine. Now when somebody accesses the URL www.myapplication.com/bugs without logging in, it allows the user ...
1
vote
1answer
1k views

Securing Ubuntu in Every Possible Way

I want to secure my Ubuntu PC from any threats (network/online to local/offline protection). What all can I do?
1
vote
1answer
428 views

Can command line arguments be masked or hidden instead of appearing in the process list?

I have written a command line application in C++ that is used to access an online user account via a SOAP API. In order to avoid having any login details written to file anywhere on my machine for ...
6
votes
1answer
3k views

How do I encrypt a dual boot system?

I have a dual-boot laptop with four partitions - Windows, swap, Ubuntu (OS) andUbuntu /home. I need to do full disk encryption on it. Ubuntu is running 12.04, Windows is Windows 7 Home Premium.
1
vote
0answers
96 views

Why can I mount and read an encrypted home from another linux installation, without asking for a password? [closed]

Not only is home directory encryption veery noticeably affecting performance on my laptop (early C2D), but I also just discovered, that I can mount and read files on that "encrypted" home when booting ...
4
votes
1answer
687 views

Is /home encryption useful on a server?

I've got a question about the use of encryption: I set up a Ubuntu 12.04 server to use it as a router, file server for backups and webserver. Of course, it is probably not the best idea to put ...
2
votes
1answer
656 views

Are world-writable folders safe?

Is it safe to chmod a directory 777, or is it a security risk? One of my scripts requires that in order to run in multi-user situations, and I'm wondering if it's okay.
49
votes
3answers
27k views

Difference between PGP and GPG

What are the main differences between PGP (Pretty Good Privacy) and GPG (GNU Privacy Guard) in relationship with security in Ubuntu and Launchpad?
2
votes
2answers
123 views

Recover from losing personal PGP

The computer I was using which is the one I used to sign the Ubuntu code of conduct got a hardware problem and I lost it. If I want to continue my work on launchpad, how can I proceed to recover, ...
7
votes
1answer
357 views

I want to use Ubuntu as a firewall and wireless AP, with some external traffic passing through openVPN, and the rest just through a firewall

I would like to do some configuration through Zentyal or a similar setup, but I am also willing to use config files. I am connecting to a commercial VPN using a username and password. I want that ...
-1
votes
2answers
422 views

Secure your private gpg and ssh keys from other people accessing ssh

There is a person A and person B, other of them has each other ssh public key, so that means they can access each others shell. now they can access each others private ssh and gpg private keys. and ...
3
votes
2answers
1k views

By default does RDesktop use any encryption?

When you use RDesktop to remote into another computer, is it traveling over the internet unencrypted? How secure is RDesktop, or should another application be used? Thanks
0
votes
1answer
86 views

How did all the passwords get in my login keyring?

In my Passwords and Keys application (Seahorse) I have a "login" keyring. Within that are a many keys. How did they get there? What application put them there? I use Chrome with Lastpass extension, ...
3
votes
3answers
431 views

SSH key plus password

I see there are continuous attempts to login into my computer via ssh using usernames, like joan florin root from 60.169.22.118, -how can I forbid ssh access and only allow it to users with specific ...
8
votes
1answer
1k views

Why are the proposed BADSIG (on apt-get update) fixes secure?

I'm running apt-get update, and I see errors like W: GPG error: http://us.archive.ubuntu.com precise Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic ...
8
votes
2answers
1k views

Unknown Folder on System root /.rpmdb

Can somebody explain what the /.rpmdb folder in the root directory is for? Which application creates it and is using it?
2
votes
1answer
432 views

Does Linux support capturing tcp packets without being super user?

Is it possible to capture packets without superuser? This is what I see in the wikipedia article: In some Unix-like operating systems, a user must have superuser privileges to use tcpdump ...
3
votes
1answer
184 views

Is file permission secured when it transferred from Ubuntu to Windows?

I am having 9GB text file which is encrypted . This file contains some confidential data . Which is on my system(Ubuntu) and my external HDD (ntfs) . This file get daily updated and then encrypted . ...
9
votes
2answers
5k views

What to do regarding BackDoor.Wirenet.1

What precautions should one take in prevention of attack by trojan BackDoor.Wirenet.1? Blocking all communications with 212.7.208.65 should be sufficient? If so, how to do it?
9
votes
3answers
3k views

Does java security flaw affects ubuntu also?

There are rumors about an actual java security problem. The BSI advises people to deactivate java plugins version 7 and prior in all kind of OS, even in linux. Does this mean, I should deactivate ...
4
votes
3answers
8k views

Remove or disable java due to the security issue

According to the news there's java security hole that is still not fixed. How can Ubuntu users protect their PC? I've got gnome-shell installed and as far as I understand it depends on java. Which ...
1
vote
1answer
2k views

Store the passphrase of encrypted disk in /etc/crypttab encrypted

I'm wondering, if I can store the passphrase of an encrypted disk in /etc/crypttab encrypted - and only possible to decrypt that by that OS, where I created. Is it possible? (because, I want auto ...
5
votes
2answers
819 views

Precautions during SSH [duplicate]

Possible Duplicate: How can I audit users and access attempts to SSH on my server? I recently had to give away my Ubuntu 12.10 root password to one of my friends so that he could SSH into ...
3
votes
1answer
3k views

apt lists in /var/lib/apt/lists overwritten with html page for Starbucks wifi terms

I sat down at Starbucks this afternoon to do some work (Ubuntu 12.04 Desktop x64), and got the red-circle-with-white-line error icon in the systray notifying of a package error. Also, apt, aptitude, ...
5
votes
1answer
761 views

How to check the Security of system?

Is there any antivirus or any sort of scanner available for Linux so that one can insure the security of system and is it so that Ubuntu is hack-proof? If not than what are the basic steps which a ...
1
vote
1answer
428 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from ...
3
votes
3answers
2k views

Trojan in Ubuntu? DigiNotar

On Wednesday, I installed an old copy of Ubuntu 10.04LTS onto a pristine desktop PC that I built w/ brand new hardware--DSL modem, too--except for the CPU. Then, I downloaded Ubuntu 12.04 from ...
0
votes
2answers
832 views

Anti phishing software?

Is there an anti phishing software in ubuntu which may even rate websites while searching and surfing ,something like avg secure search in windows or the software u get with bitdefender which puts a ...
1
vote
1answer
202 views

Enabled root password and have System Policy and sudo problem

I enabled the root password a while back. But not three days ago. I'm using Ubuntu 12.04 with latest updates. My laptop is Vostro 3500 For about three day ago, I saw the symptoms. And those are, ...
4
votes
0answers
816 views

Is there a guide for using GRSecurity and Precisew/ PAX?

I'd like to know if there is a guide of some kind for (successfully) configuring, compiling and installing GRSecurity w/PAX etc. in Precise? I basically am trying to build my own custom release ...
3
votes
1answer
1k views

why samba share files are not able to access by some user for some time?

I'm running samba on Ubuntu Server 10.04 LTS, I've some folders on samba share and created some user to access it, but suddenly some of the user are not able to access it for a certain time only. For ...
60
votes
2answers
78k views

How do I keep track of failed SSH log-in attempts?

I'd like to see if somebody has been trying to log-in by brute-force into my Ubuntu 12.04 server over SSH. How can I see if such activities have been taking place?
0
votes
3answers
233 views

Can someone please compare the safety issues between Ubuntu and windows OS? [duplicate]

Possible Duplicate: Why is Ubuntu more secure than Windows or Mac OS X? I am a new user. I installed this on and older PC using XP. Can someone please compare the safety issues between ...
5
votes
2answers
1k views

Is Chromium in Ubuntu's repository safe to use since it's so out of date?

Is Ubuntu Chromium still safe to use since its so out of date?
4
votes
3answers
6k views

“Successful su for user by root” - suspicious entries in my /var/log/auth.log?

This post on reddit made me go through my logs. That's when I discovered the following entries which appeared on two non-subsequent days. "user" is my user account. Aug 4 22:50:37 UbuntuSystem sudo: ...
0
votes
1answer
140 views

How to secure terminal logout?

While reading about bashrc, I ran into the following fundamental problem of terminal-only machines: If I run malicious software with a restricted account, it could edit my ".bashrc" file and set an ...
3
votes
1answer
6k views

How to install pentesting tools?

I am learning pentesting. I don't want to install BackTrack as my main OS. Instead, I'd like to install the relevant tools on my Ubuntu 12.04 system. My understanding is that it is possible to install ...
0
votes
1answer
472 views

Ubuntu 12.04 (Lubuntu), Manage Networks, Panel Icon, Incoming Traffic. Why?

Manage Networks, Panel Icon, it shows constant incoming traffic, not outgoing, just incoming packets, but I am not surfing internet, or doing any updates, I am basically not using internet, so why I ...
1
vote
1answer
2k views

Ubuntu 12.04 www.grc.com ports, all CLOSED, but one port 646 LDP Hidden color green?

I did scan of my computer ports using deafult Ubuntu 12.04 installation, at www.grc.com, all of them are in color gray CLOSED, except for one: Port 646 LDP (Port Authority Database) its HIDDEN state ...
0
votes
1answer
59 views

Can I encrypt the OS for boot only?

I have a LAMP system running (of an SD card on small computer) that monitors some arbitrary data. I return the data as JSON from the page so that it can be used in whatever reason its fit for. I ...
2
votes
1answer
185 views

Security enhancements, prevent mounting /dev/sdb1 [closed]

Overview I am running Ubuntu 12.04 - 64bit - Gnome3 as my preferred Operating System at work. However after recently taking time off, I return to my desk finding my machine was broken in to (I am ...
3
votes
2answers
8k views

How do I check if someone accessed my computer?

I need to check the list of files accessed in my computer (ex: yesterday on particular time). Is it possible? Or I need to check whether anybody accessed my computer (when I left it unlocked) or ...
3
votes
1answer
221 views

Where can I get free apparmor profiles?

Apparmor profiles: Security tight paranoic hardened very secure hard to hack, %100 bullet proof (last one a joke lol) Maybe a link.
2
votes
2answers
11k views

How to use sudo command in the default guest account?

How can I use sudo command from terminal in the default Ubuntu 12.04 guest account, in order to connect to vpn client and service. (OpenVPN+TrustConnect+Comodo) I know it has been disable by ...