Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
6k views

vsftp configuration issue

i have installed vsftpd in my local mechine ubuntu 10.04 also in remote server ubuntu 12.04 i have done same configuration for both of the mechines. but in server when user logs in usging ftp ...
9
votes
1answer
850 views

What is Canonical's LTS support policy for EOL software?

I'm using PHP 5.3 and need to remain on PHP 5.3 for the foreseeable future. Please don't suggest upgrading -- for my setup, it's simply not possible at this stage. I'm currently evaluating which OS ...
0
votes
1answer
958 views

Can I prevent/restrict standard users from installing/uninstalling software?

Can i prevent/restrict standard user from installing/uninstalling software in Ubuntu 12.04 desktop?
22
votes
2answers
546 views

Is the meta-release upgrade (do-release-upgrade) secure?

I am trying to understand the do-release-upgrade process i.e. the way that Ubuntu prompts me to upgrade to the next spring or autumn Ubuntu release. After reading the sources for ...
-1
votes
2answers
131 views

Where is dconf in ubuntu-12.04 desktop-32 bit [duplicate]

I am not able to find dconf in ubuntu-12.04 desktop-32 bit?
1
vote
1answer
263 views

Would security be comprimised if I install a gui (e.g. zPanel) for LAMP?

I am an Ubuntu/Linux noob. There are many questions I have regarding the use of my system as a server. First and foremost is security. I want to install a simple GUI (zPanel appears the most user ...
6
votes
1answer
3k views

Does Ubuntu One effected by NSA according what Edward Snowden published? [closed]

It is very important for me to keep my files in a safe Host. I use ubuntu one because of ease of using in Ubuntu. You think is it safe enough of spying ?
0
votes
0answers
22 views

apt-get complains about untrusted packages [duplicate]

Since installing Kubuntu 13.04, apt-get (and all other packaging tools) complain about untrusted packages. As an example, when I try to install ruby1.9.1-dev: # aptitude install ruby1.9.1-dev The ...
2
votes
1answer
16k views

HOWTO: run Tor and Vidalia on Ubuntu easily, browse and IM anonymously

You may have noticed that the Tor package in the repos doesn't work well with the Vidalia pakcage in the same repos. Funny, huh? So I did a little bit of research to find out how to easily run Tor on ...
0
votes
1answer
51 views

General Distro Security [closed]

This is more of a general question, but can pertain to Ubuntu in general. Are all distros as secure as can be out of the box or can the distro creators create them insecure? What I mean is, if I ...
2
votes
3answers
460 views

Shell Script to block Ip addresses

Is it possible to write a shell script that checks connections in an apache server and blocks suspicious ip addresses with large number of connections automatically and fires a mail for it to the ...
-2
votes
3answers
879 views

Is this a viable legitimate way to circumvent NSA spying on me? [closed]

If I set up my own email server in my basement using Ubuntu along with my own domain, own SMTP server, hosted the emails in my machine, ran a pretty wicked good firewall, would that circumvent spying ...
0
votes
1answer
152 views

What exactly happened? This looks like an attack

I was watching a movie and suddenly I was logged out. When I logged back in, Team Viewer was started immediately, although it's not on startup programs. Quickly I opened the terminal and gave the ...
1
vote
1answer
35 views

Question about 0x08059081

currently doing some homework to improve my skills. I tried to run a file by using gdb, but I encountered 2 errors as shown in the picture below. 0 0x08059081 1 0x080493c6 May I know what is #0 ...
1
vote
2answers
3k views

How do i change the password of root, using webmin in one command line?

I have lost root password of one old server, where i can only have normal user login and via webmin login. Via webmin interface i have one option to execute command, i have been trying the following ...
3
votes
1answer
663 views

How is Software updater installing updates without my password? [duplicate]

I've noticed Software updater in 12.10 installs updates without asking for my password the way it used to. My question is, how is it doing this and what is to prevent a malicious script/program ...
0
votes
3answers
71 views

Is windows still running in the background?

Running 13.04 on a dual boot, Is windows 7 still live and hackable from the outside world? I put 13.04 on a separate 'drive'
20
votes
4answers
60k views

How to disable IPv6 permanently?

How can we disable IPv6 system wide via terminal commands? I've read editing /etc/modprobe.d/aliases and replacing: alias net-pf-10 ipv6 with: alias net-pf-10 off alias ipv6 off Is this safe ...
4
votes
1answer
530 views

unattended-upgrades sends attachment instead of text

I'm trying to setup automatic security updates on Ubuntu Server 12.04 LTS with an email response: sudo apt-get install unattended-upgrades sudo dpkg-reconfigure unattended-upgrades # Answered Yes ...
2
votes
0answers
398 views

Annoying Wireless Authentication Prompt [duplicate]

When my internet connection fails and tries to reconnect (Which happens quite frequently on my crappy Uni Wireless) the following prompt pops up every 20-30 seconds: I consider this to be a major ...
1
vote
1answer
199 views

Admin name appears twice if it asks for admin password. Ubuntu 12.04 LTS

I was trying to apply some given items at this page to secure my Ubuntu 12,04. After applying item number 4; my user name which is the only admin, appears twice if system asks for an admin password as ...
1
vote
2answers
5k views

apt-get update error using automatic proxy configuration

I am using Ubuntu 10.4.04 LTS with in VMware5. I used automatic proxy configuration and I'm able to use internet from firefox. When I wanted to update apt-get update, I am getting following errors. ...
4
votes
1answer
173 views

Is Ubuntu's archive signing key available via HTTPS somewhere?

I'm writing a program that needs to download GPG keys for various distributions to do unattended net installs. To do this securely and in an automated way, I need to download the key via HTTPS, which ...
3
votes
1answer
2k views

I don't want to store passwords in an unencrypted file

I'm using Ubuntu 12.04 LTS on my developer machine and just realized that psql stores passwords in '~/.pgpass'. Furthermore this file is unencrypted. So anyone who has super user rights (i.e. is in ...
0
votes
1answer
47 views

Boot up with USB or external hard drive [duplicate]

Can Ubuntu be used in a computer with no internal hard drive? Using only a USB or external hard drive
2
votes
2answers
4k views

For more security: overwrite empty disk space

I know it might seem a stupid question but I haven't come across any forum or post on the internet about: - What does "overwriting an empty disk space" mean/do? - Why doing that makes it more ...
2
votes
1answer
125 views

Two users with same name but different passwords

Is it possible to create two users with the same name, and let LightDM choose between them at login if one of the passwords is given? For example, to anyone opening my computer, it would seem like ...
1
vote
1answer
83 views

Inexpensive way to get Ubuntu LTS with 100% certainty that it has not been compromised

I need an Ubuntu installation that I can be 100% certain has no root kits etc. Unfortunately, buying the CDs on the Ubuntu store would cost me roughly $25 plus shipping and handling (pretty steep for ...
0
votes
1answer
2k views

Nginx Basic Auth and subfolders

I have a problem with subfolders in a basic auth procted folder. In the protected folder i have a folder named phpmyadmin, which contains phpmyadmin. Im not able to run phpmyadmin, when basic is ...
22
votes
8answers
4k views

Where can I look for malware that may have been installed on my machine?

I want to analyze my ubuntu box to detect if it was been hacked. My question is: what are all the place where to look to discover if some malicious software are started ? The following is some kind of ...
5
votes
4answers
15k views

Where are ALL ubuntu logs/terminal history stored

In what folders are the logs and key histories stored so that I may make a script to purge them. Is there a specific folder for the hibernation partition or a file by which it keeps the RAM data on ...
0
votes
1answer
1k views

Somebody help me with my paranoia

I tend to be on the paranoid side, and for some time there are messages in my log file that tend to get me going close to the edge of sanity. Could someone explain the following in my auth.log file ...
1
vote
2answers
2k views

ufw firewall operation

I have always run the program UFW as my firewall in Ubuntu, and been satisifed with its performance. When I installed Ubuntu 13.04, and enabled ufw, I was not able to access the internet, and all ...
2
votes
1answer
66 views

What are the security support statuses of derivatives?

I have only a quick question. Does Kubuntu, Xubuntu and others has the same level of security like the plain Ubuntu? I mean security for the desktop environment, because I know that for others it has, ...
0
votes
3answers
940 views

Will my system remain safe, if i run ubuntu (through VMware) on windows - for virus purposes?

i want to use both windows & ubuntu, but i mostly work in windows & that i use ubuntu only for virus purposes(virus-free). By doing as mentioned above, will it be effective in removing the ...
0
votes
1answer
508 views

How to recover faulty pam.d configuration?

I am struggle to login after configured kerberos in pam.d. Eventhough , I tried with root user , it also no use. I know, I did something wrong on that but how can I restore the pam.d configuration? ...
34
votes
7answers
24k views

How to sandbox applications?

I want to run small untrusted programs, but restrict them from accessing any files outside of their folder, network access, and everything else that they don't really need. What is the simplest way to ...
2
votes
0answers
797 views

Integrity check against package repository?

When there are security updates, I review and install them as soon as possible and think about using automatic updates. From time to time I want to boot from a clean boot CD and check if the system ...
1
vote
1answer
422 views

Disable security warning

How I disable Unverified Publisher security warning box ? I want setup my Ubuntu to start this program after restart automaticaly.
8
votes
2answers
805 views

How to make my server email me when there are security updates?

There's obviously a way to check to see when an update is a security update. I often get greeted by a motd that says "there are N security updates." What I'd like to do is have my server email me a ...
2
votes
1answer
155 views

What system tool is reporting this error and how to diagnose?

In the last week, every time I turn my Ubuntu (12.04) machine on, and sporadically throughout operation (about every 1hr that I'm actively using it), I get the following popup from the system: When ...
0
votes
1answer
87 views

Get Security Updates Delta, and install them

I am writing a script that is supposed to run every day to check if there are any new security updates for Ubuntu. If there are, it will make a list of those updates, it will download them, and then ...
0
votes
3answers
570 views

WiFi, as it relates to my router

Why does my ubuntu make a WiFi connection ONLY when I disable the security settings of the router? I have a 3-computer network, 2 of which connect just fine (with the router's security settings ...
2
votes
1answer
644 views

How to display AppArmor denied messages as desktop notifications

How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?
0
votes
1answer
613 views

Isolate Malware in VirtualBox and emulate fake responses [closed]

I have some malware I want to study, intercepting its "phone home" connections, sniffing where and how it is trying to connect and then somehow, by pretending I am the host(s) he is connecting to, ...
0
votes
1answer
879 views

Does Gwibber/UOA auto-follow people on twitter without my permission?

Each day I gain new twitter followers whom I don't want to follow. I have to unfollow them manually. I have checked my twitter authorized apps section. Only two of them have permission. ...
2
votes
0answers
136 views

How can I configure sudo to prompt for password and show the executed command?

The title says it all. How can I configure sudo to prompt for password and show the executed command? Rationale: if something gets aliased in the shell or I end up executing a function sudo instead ...
2
votes
1answer
809 views

Should I install non-repository software as root or as my user?

What is the right way of installing programs that are not available in repositories: should my user own the binaries and keep them in ~/bin/, or should root own the binaries and keep them in, say, ...
0
votes
1answer
66 views

Some doubt about root password

I was looking for installing a LAMP in my personal PC but I can't create folders in /var/www so i run this little script in my console: sudo passwd -l root And I don't know if this an issue ...
4
votes
2answers
257 views

Will my data be safe if my laptop is stolen when there is FDE and auto-login?

My SSD supports Full Disk Encryption (FDE). I have enabled FDE and set a password in BIOS. In case my laptop is stolen or lost, I want nobody to be able to get my data. Is it now secure to allow ...