Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
104 views

Elevation issue password always wrong?

ubuntu Newbie - I install OS using one account and then later created a second account made administrator with auto login and no password, then I logged in using new account and deleted old account. ...
1
vote
0answers
66 views

How do I securely store passwords? [duplicate]

Possible Duplicate: Password Management Applications? How do I securely store passwords in Ubuntu? Are there any tools available for this?
5
votes
1answer
3k views

blackhole exploit kit - Linux Server Script

It has come to our attention when scanning some of our hosted server websites that they have been infected with Blackhole Exploit Kit (top dollar hacking program - ...
5
votes
1answer
729 views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
0
votes
1answer
224 views

Can we add back track tools to 12.04?

If possible, then how can I add the tools available under Back Track Linux to my Ubuntu 12.04 distribution. I prefer their functionality from the terminal.
21
votes
6answers
17k views

What Can Be Done To Secure Ubuntu Server?

I have a project to secure Ubuntu Server as much as I can. The server is a web hosting server. The server will be running LAMP , Mail , and DNS.
1
vote
2answers
153 views

what packages to uninstall for better security?

I have read a recommendation which was stating that after installing one should remove some packages from the default Ubuntu installation, in order to have a more secure server. What are your ...
16
votes
2answers
8k views

What is the 'ptrace_scope' workaround for Wine programs and are there any risks?

To run certain Windows programs in WINE you need to this workaround: echo 0|sudo tee /proc/sys/kernel/yama/ptrace_scope According to the support websites, this is due to a bug in the Ubuntu kernel ...
1
vote
1answer
162 views

Passively monitoring CPU activity

So everytime I leave my ubuntu desktop alone, it seems that after a while it starts "working on stuff" -- CPU lights lighting, that busy CPU processing sound being pretty loud, etc. But when I move my ...
2
votes
4answers
1k views

Is this fix for Avast Antivirus crashing safe to use?

Well I have installed avast anti virus on Ubuntu 12.04. But after updating, it crashes! So I have made some tweaks like below: Press Ctrl+Alt+T to open the Terminal. When it opens, run the command ...
0
votes
1answer
54 views

Why are many operations or commands in Ubuntu not allowed normally when you can just do the same thing by typing sudo?

What purpose does this server when bypassing is as easy as typing sudo? Forgive the naivety here but I am a rookie and I'm sure there has to be a good reason for this, and I'd like to know that.
2
votes
2answers
3k views

Packet Sniffer found, what next?

After a download yesterday my computer crashed. I updated today and checked for rootkits. I found a packet sniffer eth0: PACKET SNIFFER(/sbin/dhclient[3966]) How can I remove this?
0
votes
1answer
52 views

How to file a bug report for a specific Ubuntu release?

I imagine if I want a package updated in an LTS, such as 12.04, it has be for a very good reason. The actual package I am interested in is picolisp: It has a (probably also affecting security!) bug ...
2
votes
1answer
2k views

Verify integrity of installed Ubuntu packages

I'm looking for a script that is run from a boot-CD doing the following for all files on a drive: find the debian-package a file is from (if possible) download and extract the debian-package ...
0
votes
1answer
233 views

Is there any mechanism that blocks connections by IP address in a default 11.04 installation?

On a default installation of 11.04 desktop (running inside a VM), I'm getting a strange phenomena in which occasionally some people can't ssh into their account in the regular way (they simply get a ...
5
votes
1answer
140 views

How do I create a default fallback profile for any process that doesn't have one in AppArmor?

Is there a way to specify a default profile on any executable that doesn't have a profile already defined? The idea is to avoid any unconstrained processes.
2
votes
1answer
312 views

Handling old kernels with automated upgrades

For security purposes I've been a fan of unattended-upgrades, Using something like this: Unattended-Upgrade::Allowed-Origins { "Ubuntu lucid-security"; }; ...
1
vote
0answers
82 views

Is it safe to install applications from PPAs? [duplicate]

Possible Duplicate: Are “PPA's” safe to add to my system, and what are some “red flags” to watch out for? What is the risk in adding an unknown PPA? I have ...
2
votes
0answers
143 views

Cannot login to user with encrypted directory

I unknowingly deleted the .ecrypts directory while reinstalling Ubuntu 12.04. I created a default user by the same name while installing the new version. However, I couldn't login to the user after ...
4
votes
3answers
4k views

GUI program to shred or wipe files with options to make sure they are unrecoverable?

I have a quick question about file shredding. Is there any application with graphical interface capable of shredding files and folders? I know bleachbit has that feature but there are no options or ...
3
votes
2answers
298 views

Is it safe to browse the Internet with a LiveCD?

In my case with a Kubuntu 12.04 Live USB, I wonder is it safe ? There have been a lot of updates (150+ or something) since it came out. Specifically with the USB, although I chose the "Discard on ...
1
vote
1answer
223 views

Accidentally accepted unknown IP to Desktop Sharing

I was using Desktop Sharing on 12.04 for some days, and there were a lot of connect requests from unknown IPs. One of the connect requests I accidentally agreed to because I mixed up the ...
1
vote
1answer
2k views

fail2ban broken after dist upgrade

My fail2ban install is broken after a dist update. I have no idea why it stopped to work. The logfile is over weeks 0 byte. Even if I can see in my server logs that the client should be blocked. Here ...
4
votes
1answer
1k views

Can ecryptfs-setup-private be made to use a 256 bit AES key (instead of the default 128 bit key length)?

ecryptfs-setup-private will by default use an AES 128 bit key. Can I make it use a 256 bit key (32 bytes key length)? Of course, I could do the whole process manually as described here: ...
2
votes
1answer
165 views

Could rsyslog be purging log files?

Today I found a lot of log files empty, these were: /var/log/auth.log /var/log/syslog /var/log/daemon.log /var/log/kern.log /var/log/mail.log /var/log/user.log /var/log/mail.info /var/log/mail.warn ...
1
vote
1answer
286 views

Is it possible or a good idea to run a more or less secure minecraft server without having pre-experience in Ubuntu?

Hello Dear Ubuntu Questions Community, This is my first on this site and is very important to me! I currently run a Minecraft Server that runs on a server that I have to move aways from, and that in ...
1
vote
1answer
1k views

Security Issues from Torrent Downloading

I am a new Ubuntu user (using it since last 1 month). When I was with windows there were all these Internet Security Suites that protected the PC. With Ubuntu there aren't any. I wanted to know if I ...
0
votes
0answers
38 views

Why does my Ubuntu 12.04 install not pull this security update? [duplicate]

Possible Duplicate: Update Manager Not working Fail to Download Repository Information I have installed Ubuntu 12.04 about a week ago and it is not letting me receive security updates. It ...
4
votes
4answers
5k views

Is it risky to download a script with a http://goo.gl/ link?

Following the advise of an answer in Ask Ubuntu, I downloaded and ran a script with a URL starting by http://goo.gl/ Is it risky to use such file? could it be a virus or something else? If yes, what ...
0
votes
1answer
387 views

Are there any security issues with guest accounts?

I have just reactivated the guest session in Ubuntu, because several people use my laptop on a temporary basis. I wanted to know if there are any security issues with using a guest session, and if ...
3
votes
1answer
190 views

What are Ubuntu One's security measures?

Tell me how Ubuntu One handles security. Is my data encrypted when stored on Ubuntu servers? Who holds the key? Do Ubuntu One employees have access to my data?
1
vote
2answers
564 views

auto start disk formatting when entering wrong password

I'm thinking of way to protect data from stealing. Is there any way to start auto disk formatting when someone enters wrong password on login? Or when enters specific password which would trigger disk ...
12
votes
3answers
2k views

How do I call a dialog for authentication?

I am writing a gui program using wx module in python. In program whenever I am accessing a folder which requires root privilege then it asks password at terminal but I want to display the dialog to ...
4
votes
5answers
2k views

Is open source software vulnerable to viruses?

I understand the ideas behind open source software, but I am more interested in the security aspects. How is open source software not exposed to viruses or any kind of Internet attack? How does it ...
4
votes
5answers
4k views

How can I lock down ubuntu?

I am working on a small project. I have about 20 computers with Ubuntu 10.04 on them, which will be used in a computer lab for elementary, middle, high school and college kids. Some seniors and new ...
0
votes
1answer
306 views

How do you set up an Ubuntu server that is “encrypted at rest”?

We're working on a project in which the customer needs the Ubuntu server on which a web app and database are running to be "encrypted at rest". What's the best way to implement this?
1
vote
1answer
70 views

We have a few web servers, how should we reason regarding upgrades to new versions?

We run a SaaS business today, all servers run Ubuntu Server and usually a LAMP stack on top of that. We are reasearching a little bit how we should upgrades our servers. One option is to stay on LTS ...
1
vote
1answer
236 views

Automatically locking screen without shutting it off

Hey everyone— I have a home theater PC running Ubuntu 11.10, outputting over HDMI (for audio and video). I'm having an issue: I'd like the screen to lock automatically (when video is not playing, of ...
5
votes
3answers
2k views

Can I use linux safely and sell on ebay?

I sell things on ebay here and there and I have always used windows. Is linux safe enough to do my ebay dealings? Is there anything related to linux I need to download to be keep passwords and money ...
2
votes
1answer
791 views

How can I allow a user to stream my videos securely?

I've got a script that records 10 minute videos from a webcam to video1.mp4 video2.mp4 video3.mp4 video4.mp4 Then records over video1 again in rotation. I'd like one user to be able to view these ...
0
votes
1answer
30 views

Is there a tracking site for which community packages might need attention?

The question I'm referring to is this one. While disabling everything but main and restricted is do-able to get for sure up to date packages...I think more people might jump in if there was a ...
31
votes
4answers
1k views

Does Ubuntu generally post timely security updates?

Concrete issue: The Oneiric nginx package is at version 1.0.5-1, released in July 2011 according to the changelog. The recent memory-disclosure vulnerability (advisory page, CVE-2012-1180, ...
4
votes
0answers
113 views

Is there any way to format my hard drive so that data cannot be restored? [duplicate]

Possible Duplicate: How can I securely erase a USB hard drive? How to delete file(s) in secure manner? I have 500 GB HD and I have very important personal data in it. The thing is that if ...
2
votes
2answers
578 views

Is Ubuntu security enough?

I work with sensible data, so I need a reasonable level of security and use Ubuntu as main operative system in a professional activity. I have developed a php platform that performs some sensible ...
9
votes
1answer
21k views

What are ICMP redirects and should they be blocked?

After enabling ufw and the Tiger security auditor, I see warnings saying: The system accepts ICMP redirection messages What are ICMP redirection messages? Should they be disabled for security ...
3
votes
1answer
2k views

Where is the username and password stored

Just for my curiosity ,where is the username and associated password is stored in ubuntu? And how it is verified at the login time?
9
votes
5answers
351 views

Is there an application or method to log of data transfers?

My friend asked me for some files that I let him take from my system. I did not see he doing that. Then I was left with a doubt: what extra files or data did he take from my system? I was thinking is ...
2
votes
6answers
6k views

How do I encrypt/decrypt file within gedit?

In the previous version of Ubuntu (eg: maverick, natty), I used to do a: sudo apt-get install gedit-plugins seahorse to have the ability to encrypt/decrypt file within Gedit after enabling the ...
1
vote
0answers
184 views

How can I tell if ZRTP is enabled in a Twinkle SIP call? [closed]

I recently attended a talk about GNU Telephony. I was informed that Twinkle supports ZRTP for encrypted SIP calls. I went into Edit > User Profile > Security and made sure that ZRTP was enables and ...
3
votes
1answer
232 views

Is there a security risk if a password can be reset easily?

was just reading up on changing password complexity and I stumbled upon this: https://help.ubuntu.com/11.04/ubuntu-help/user-forgottenpassword.html Isn't that a big security risk? Assuming someone ...