Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
3k views

How to set Grub Password [duplicate]

Red Hat Linux has grub-md5-crypt for setting up a grub password. How to do the same in Ubuntu 13.10 ?
0
votes
1answer
159 views

Is there any anti-theft / robber-spy application on Ubuntu Touch?

theft application on Ubuntu Touch Saucy which could help protect my tablet/phone ? I mean an application running as daemon on back-end and waiting for remote activation. Activated by an GPS event, ...
0
votes
1answer
1k views

Alternative Open Source software to GFI end point security

What are the GUI open source alternatives To GFI end point security for Windows? knowing that I'm using Ubuntu 12.04 64bit Thanks in advance...
0
votes
3answers
5k views

Unable to Disable Automatic Login on 13.10

I have my settings as such, but when I power-on my laptop, it logs me right in, with no prompt. Does anyone else have this problem?
3
votes
3answers
169 views

My computer may have been compromised, what should I do?

A few weeks ago, my machine (lets call it "main") was logged into wirelessly from an unauthorized host, probably using ssh. I did not detect the intrusion until a few days ago, and my machine is ...
1
vote
0answers
48 views

Does the “security” repository provides anything not found in the “updates” repository?

For the limited number of package I looked at (e.g. apache), I found that the package version in the updates repository is always newer than or equal to the version available in the security ...
1
vote
1answer
192 views

Are all “Important security updates”, updates to already installed packages?

I'm running 12.04, and I've never downloaded any drivers for the installation of any peripheral devices. Yet, I noticed a fair few "Important security updates" involving drivers/utilities for HP ...
0
votes
1answer
902 views

SSH: Dynamic DNS vs Port Forwarding

I recently set up SSH on my newly installed ubuntu, and already set up public key authentication and know that it works properly remotely on my local network. Now I decided that I would make it ...
5
votes
2answers
4k views

Building TrueCrypt on Ubuntu 14.04

With the whole NSA thing people tried to re-build identically looking binaries to the ones which truecrypt.org provides, but didn't succeed. So some think they might be compiled with back-doors which ...
6
votes
1answer
576 views

Can apparmor restrict interpreted languages?

For interpreted/vm languages(e.g. python, java, shell scripts) can apparmor be set to only confine a particular script or program? If so, how?
0
votes
1answer
2k views

Help connecting to my schools wireless network

My school´s hates everybody that dosen´t run Windows 7/8. Therefor, they will not give me support in connecting to my School´s wifi, which i need badly. I have a guide for Windows 7 and I hope that ...
1
vote
0answers
51 views

sudo apt-get update stuck at 100% [Waiting for headers]? [duplicate]

Here is the sample Hit http://security.ubuntu.com raring-security/main Translation-en Hit http://security.ubuntu.com raring-security/multiverse Translation-en Hit ...
5
votes
1answer
888 views

Seeking for a better solution to restrict access in GRUB2 menu

I just read that in certain situations you should also protect access to your GRUB2 menu by setting a password and may be refining acces by adding --unrestricted or --users as arguments to menuentries ...
1
vote
3answers
590 views

How to disable Bit Torrent Client

There is a lot of traffic generated by my Transmission Bit Torrent client which I don't use at all. I see that this application comes pre installed in Ubuntu 12.04. So, is there a way through which I ...
0
votes
2answers
56 views

How to stop administrative password change

It is extremely easy in Ubuntu to change the administrator password by using the recovery console and dropping to root. Is there any way to stop a root user from changing the administrative password?
5
votes
1answer
321 views

What can a user do without sudo?

I'm setting up a server and want a user to only have access to his own files. I do a regular adduser command: sudo adduser username And give the user a password. Then I log in to it via ssh and see ...
2
votes
0answers
542 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
0
votes
1answer
66 views

It is safe to include Kate in the sudoers so it can run sudo without password?

I want know if its as security problem when I add Kate in sudoers without pw? I think one must intercept my xserver session to make misuse of it. Or am I wrong?
3
votes
1answer
438 views

Does CVE-2012-0883 apply to Ubuntu?

Does the Apache vulnerability CVE-2012-0883 affect Ubuntu? Have tried searching for it at ubuntu.com but with no hits. I note that Ubuntu releases an Ubuntu Security Notice (USN) when it issues an ...
4
votes
6answers
6k views

Any real-time antivirus for Ubuntu?

Is there any real-time anti virus for Ubuntu? Which antivirus is good and in real-time (I mean that, if I try to open an infected file or go to a bad website, it stops it). I read a post in ...
2
votes
1answer
387 views

Can chmod 777 be a security risk on a personal machine?

Can 777 permissions increase security risk on an average Ubuntu single-user machine? How? What are other downsides of it? Thanks
0
votes
1answer
19 views

File specific privacy

How do I encrypt specific files with minimum fuss and bother? I have followed various instructions with more or less the same result; I end up with a folder named 'private'. I need a folder that I ...
1
vote
2answers
350 views

Unencrypted /boot partition can be infected from windows on dual-boot system?

I have dual-boot with windows 7 and ubuntu. /dev/sda1 ext4 (/boot) /dev/sda2 ntfs (windows partition) /dev/sda5 ext4 (root encrypted) I don't have any concern of adversaries gaining ...
5
votes
1answer
81 views

Is universe checked by the Ubuntu Security team?

I have a generall question regarding the Ubuntu universe repository. Does anybody know if they are checked by Ubuntu Security Team? Will they move or delete packages if any problem is encountered ...
1
vote
3answers
108 views

What are CVE security updates and who issues them?

Just a couple quick questions. Hope a couple wise owls might be able to answer ; ) I used to apply updates through the terminal without any care, since I don't use any ppa's or use any untrusted ...
-1
votes
1answer
49 views

Can I trust 3rd party software?

I've begun to appreciate Ubuntu and the philosophy of open source software, and now I have a doubt about 3rd party software. Is it a bad idea to download them or can I trust every open source ...
0
votes
2answers
256 views

When will Ubuntu include Digital Certificates from Govt of India Root CA PKI CCA India 2007?

Ubuntu for all platforms (laptops+mobiles) must respect and contain Government of India's Root CA and CA Certificates and improve compliance with Indian IT Act 2000 (Cross Certification) and law ...
0
votes
1answer
455 views

How can Shared Memory be dangerous in server environments & how to secure it?

I just understand somewhat about what's the purpose of shared memory which is for faster exchange or use of data among several programs. But having seen a lot of people trying to or talking about ...
1
vote
3answers
209 views

Seeing all installed items on server and protecting server from malware

I've got a VPS running Ubuntu 12.04 - I'm not particularly well versed in server management, but can do basic CL stuff. We've got some third parties (from odesk) working on a web app for us that will ...
0
votes
1answer
365 views

Do some files downloaded from the internet have execute permission by default?

I noticed that some files downloaded from the internet have executing permission (e.g. Tor, Bit-torrent, Sync etc.) by default. Therefore the permission information is stored within the files itself, ...
0
votes
1answer
369 views

basic security ubntu 12.04 LAMP server quesrions [closed]

I have a few questions about security on my ubntu 12.04 LAMP server (newbie) This is what I´ve done so far: Install and configure Firewall - ufw Secure shared memory - fstab SSH - Disable root ...
1
vote
1answer
589 views

Cannot remove script virus in Ubuntu [duplicate]

After I scan via clamav/clamtk, I found 1 possible threat that I cannot remove/quarantine. How to remove virus? Or Is this false positive? ...
10
votes
2answers
504 views

What security context software does Ubuntu use?

Does Ubuntu use SELinux by default and if not, how is security context managed? For example, allowing processes to run as root without security context can be a security risk. The help page about ...
3
votes
1answer
2k views

Does Ubuntu deliberately contaminate its binaries to help NSA? [closed]

A week ago asking this question of Microsoft or such would have got me labelled as paranoid, and asking this question about Ubuntu would have seemed plain stupid, bordering offensive. Then we found ...
4
votes
4answers
1k views

How to ensure Wine does not auto run .exe files?

I want to install Wine only for running a program, but I don't want to open any other Windows file (for security). Is it possible to ensure Wine does not execute .exe files automatically? Thank you.
0
votes
1answer
40 views

Are there any packages that do all the recommended configuration settings for a secured server environment?

I came across questions & articles like these: 1.) What Can Be Done To Secure Ubuntu Server? , 2.) How to prevent your website from getting hacked. which speak of many configuration settings for ...
3
votes
2answers
1k views

Which is a safe way to record Firefox passwords in Gnome Seahorse Keyring?

Searching for answers about ways to record Firefox passwords in Gnome Seahorse Keyring vault, I found severals possibilities: Firefox Gnome Keyring firefox addon from https://github.com/ in this ...
4
votes
1answer
991 views

Why is a group writable directory considered unsafe?

More specifically, why does libslack's daemon consider files that are being executed in a group writable directory to be "unsafe"? If you can give me an explanation of why group writable directories ...
1
vote
1answer
436 views

USB PAM login with SD Card

I am trying to set up a PAM login token. I want to use an SD card instead of a normal USB flash disk. When I run the pamusb-conf to set up a new device, with the SD card inserted, it says that there ...
1
vote
1answer
32 views

Is there any way to get CVE or USN ids that need to be installed?

I'm looking to pull in what CVE or USN ids that apply to a security update before doing them. Is there any way?
1
vote
1answer
555 views

Secure OpenERP Server

I use a Ubuntu 12.10 Desktop as a server 'only' for OpenERP 7.0. This OpenERP server is used by both, the team as well as clients. I've checked out posts that help someone secure a 'web-server' (i.e a ...
0
votes
1answer
277 views

Can the admin of a SSH server monitor internet traffic?

I use SSH Tunnelling + socks4/5 to browse securely, but a certain question came up in my mind, can the administrator of that SSH server monitor my traffic? like see which websites I am visiting, ...
2
votes
1answer
172 views

Dash icon does not work

Below is the contents in the ubuntu-software-center-desktop file. The Dash Home does not show the contents when it is opened up. The Icon is black and does not respond when you place your courser ...
2
votes
1answer
393 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
1
vote
3answers
5k views

How to use rsync via ssh with rsa key passphrases?

How can I use rsync with passphrases? All googled "solutions" i found use passphrase-less keys which seems no real option. i am runnning 2 ubuntu servers 12.04.2 LTS.
1
vote
1answer
10k views

flashplayer security doubts

I am an Ubuntu newbie and I installed Ubuntu Desktop 12.04, 64 bit. As I noticed the Firefox is the actual version, but the Adobe Flashplayer was the 11.2 version which has, I guess, some security ...
0
votes
1answer
41 views

Acces to my PC from hostile Access Point

I connected to a Wifi access point that had cloned my SSID. I did not enter my ubuntu password during the connection, since I did not install anything. I just used Firefox for several minutes. Is ...
2
votes
2answers
70 views

PDF security problem

I'm looking for a program that allows me to export a document to PDF safely, so that other users can open it but can not copy or print its contents. While I used Windows I used PDF printers such as ...
0
votes
1answer
755 views

TKIP Encryption not visible

When I want to connecto to my AP whih uses Security type = WPA2 - Personal Encryption = TKIP There is no field I can enter TKIP encryption, I am asked only for Name, security type and Security key ...
0
votes
1answer
103 views

suspected security breach

for a few days now, i'm seeing automated .log files and folders on my home folder, they are recreated even after they are deleted, couldn't make sure the source of it... file --> ...