Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
1answer
2k views

Ubuntu 12.04 www.grc.com ports, all CLOSED, but one port 646 LDP Hidden color green?

I did scan of my computer ports using deafult Ubuntu 12.04 installation, at www.grc.com, all of them are in color gray CLOSED, except for one: Port 646 LDP (Port Authority Database) its HIDDEN state ...
0
votes
1answer
56 views

Can I encrypt the OS for boot only?

I have a LAMP system running (of an SD card on small computer) that monitors some arbitrary data. I return the data as JSON from the page so that it can be used in whatever reason its fit for. I ...
2
votes
1answer
183 views

Security enhancements, prevent mounting /dev/sdb1 [closed]

Overview I am running Ubuntu 12.04 - 64bit - Gnome3 as my preferred Operating System at work. However after recently taking time off, I return to my desk finding my machine was broken in to (I am ...
3
votes
2answers
8k views

How do I check if someone accessed my computer?

I need to check the list of files accessed in my computer (ex: yesterday on particular time). Is it possible? Or I need to check whether anybody accessed my computer (when I left it unlocked) or ...
3
votes
1answer
221 views

Where can I get free apparmor profiles?

Apparmor profiles: Security tight paranoic hardened very secure hard to hack, %100 bullet proof (last one a joke lol) Maybe a link.
2
votes
2answers
8k views

How to use sudo command in the default guest account?

How can I use sudo command from terminal in the default Ubuntu 12.04 guest account, in order to connect to vpn client and service. (OpenVPN+TrustConnect+Comodo) I know it has been disable by ...
6
votes
4answers
4k views

Is installing wine in Ubuntu safe? [duplicate]

Possible Duplicate: Risks/Disadvantages associated with Wine According to many articles like this one, it says that windows is more vulnerable to virus. I recently installed wine on my ...
1
vote
1answer
3k views

Xubuntu Ad-hoc network with WPA

My laptop is connected to the internet by ethernet cable, and in Ubuntu I was able to setup a wireless network that my phone could connect to (I think it was Network Settings, Wireless, then there was ...
4
votes
0answers
407 views

Asking for a SSTP connecting configuration file for using SSTP command line [closed]

Using sstp with Network Manager and DNScrypt stopped working on Ubuntu 12.04 DNSCrypt and Network manager and using Unblockvpn's SSTP - http://sourceforge.net/projects/sstp-client/ Connects the ...
0
votes
1answer
1k views

xtables-addon installation failed

I have a server with ubuntu 12.04 and when I try to install xtables-addon with this command module-assistant auto-install xtables-addons-source I get this error Bad luck, the kernel headers for the ...
2
votes
1answer
177 views

How do I make a proxy server? [duplicate]

Possible Duplicate: Where are the system-wide proxy server settings? How do I make a proxy server that allows other computers to access my internet connection through the proxy, but will ...
1
vote
3answers
316 views

Who created files in “/proc” with my username?

I just learned about file security, user & group, etc. And I appreciate a lot about the elegance of the filesystem of linux. My username is lyg, and I found there are some files with owner lyg in ...
2
votes
1answer
336 views

Security measures regarding specifically online shopping and banking

I've read the community wiki and some questions made here in Askubuntu about security measures on Ubuntu, but I would like to focus and narrow this topic to the security of online money transactions, ...
5
votes
1answer
233 views

What security policies exist in place for packages and scripts?

I did have used Microsoft Windows since Windows 98 to Windows 7. I have found lots of security vulnerabilities by myself about how viruses, worms, spyware etc. compromises the system. Microsoft ...
3
votes
1answer
7k views

How to do quarantine or delete with ClamAV?

I scanned the home directory using ClamAV which found 13 threats. The list was also displayed, but when I tried to delete or quarantine files, it did not proceed. Any ideas?
4
votes
3answers
4k views

Is there a way to lock my browser with a password?

It would be OK if it was only with my login password, but I would like to lock both midori and Firefox so that they cannot be used without entering a password. I'm running 12.04.
5
votes
2answers
860 views

NVIDIA Linux Driver Hack Gives You Root Access?

Launchpad bug link: https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers-updates/+bug/1032344 Apparently there is a security vulnerability with the current Nvidia Drivers that gives the ...
2
votes
1answer
222 views

How do I create one user without key authentication?

I've completed the following steps: I have configured Ubuntu server with Key authentication and it is working fine. I have disabled password authentication for key authentication to work. The server ...
24
votes
4answers
19k views

How can I detect a keylogger on my system?

How could I know if there's a keylogger in my system, or at least if one is active right now?
2
votes
1answer
86 views

Is there an API for accessing historical Ubuntu Security Notices?

I'm working on an automated security audit system which analyses custom Ubuntu installations to check for packages affected by security vulnerabilities. Since these machines are not connected to the ...
0
votes
0answers
118 views

How do I disable guest session on Ubuntu 12.04LTS? [duplicate]

Possible Duplicate: How do I disable the guest session? I don't really want anyone else being able to use my computer. How do I disable the guest session option that you get when being ...
0
votes
2answers
80 views

Security - Is there a tool for Gmail that integrate in Desktop and does not ask my password (Oauth?)

I am a new user of Linux and I love it so far. I am also a great fan of Google products and I was searching for a Gmail app that could tell me when I have unread emails. Unfortunately, all these ...
2
votes
1answer
2k views

how to enable iptables tarpit?

I'm using ubuntu server 10.04 and I have to enable tarpit module . I installed the followning packet : aptitude install xtables-addons-common xtables-addons-source module-assistant auto-install ...
1
vote
1answer
239 views

Having an Issue in restricting length of password

I am trying to place a restriction on my ssh box to require a password of a min. length of 16 character and a max. of 30. I was following the Password policy section, in the official user ...
0
votes
1answer
2k views

fail2ban is not sending mail when it bans an ip!

I have configured fail2ban to send me a mail when it bans an IP, but it is not working. I get a message when the jails start and stop but nothing else . I am using ssmtp to send mail via Google Mail. ...
2
votes
3answers
12k views

Cannot create file/directory in home directory

I have a headless Ubuntu 12.10 server. I'm logged in as administrator via SSH. I cannot create a directory in my home directory: administrator@Leo:~$ cd ~ administrator@Leo:~$ mkdir Test mkdir: ...
4
votes
2answers
793 views

What additional security measures should I apply for Ubuntu?

So on my Windows 7 install, I've got multiple free malware/virus scanners and a firewall up. But I've heard that Ubuntu (or Linux in general) is much more secure by default. So what additional ...
1
vote
2answers
270 views

How to backup encrypted home in encrypted form only?

I want to backup the encrypted home of a user who might be logged in at backup time. Which directories should I backup if I want to ensure that absolutely no plaintext data can be leaked? Are the ...
7
votes
3answers
952 views

Ubuntu installed alongside an infected Windows system

My antivirus scan has found something on Windows 7. No information yet what it is. However I was thinking of installing Ubuntu alongside Windows. Could that be dangerous in terms of Ubuntu catching ...
1
vote
1answer
961 views

Minimal LAMP iptables setup

What rules are needed for an Ubuntu LAMP server only having minimum necessary ports open.
0
votes
1answer
735 views

Completely eliminating all password prompt [duplicate]

Possible Duplicate: How to disable all password prompts? I've looked all over Google for a way to disable those annoying password prompts. So far the only one that's worked is editing the ...
48
votes
2answers
5k views

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
45
votes
6answers
18k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
0
votes
2answers
198 views

Easiest authentication for LAN networks?

There are a lot clients inside a LAN. The server is trusted, the clients are not. It has to be ensured that other clients can not spoof another clients or the servers LAN IP address. I want to ...
0
votes
1answer
76 views

What do the 68 group symbols in KeePassX stand for in detail?

KeePassX 0.4.3 > Menu > Groups > Add New Group > (Group Preferences) > '>' lists 68 group symbols. What do these 68 group symbols stand for in detail? The KeePassX handbook does not explain that. I ...
10
votes
2answers
9k views

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes? ...
2
votes
1answer
256 views

Can I specify tighter security group controls in EC2?

I see juju creates a new security group when we do a bootstrap, but this security group is so open that it allows all the machine inside the group to access all the ports. Is it possible to create a ...
6
votes
4answers
18k views

How to verify the SSL fingerprint by command line? (wget, curl, …)

Using a command line website downloader, such as wget, curl or any other one... In a script... I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
2
votes
2answers
760 views

How do I create a kiosk-mode where only one application runs, no games, etc.?

I want to create a Point-of-Sale (PoS) system with Ubuntu. (i.e. cash register). The system should start with the PoS application, and shutdown when the PoS app is closed. It must be locked down, and ...
2
votes
2answers
242 views

Is there supposed to be a Windows Network folder in the file manager?

I pulled my hard drive out of my computer and started with a bootable usb version of Ubuntu, which I am using that at this point. At first boot, I see that there is a Windows folder when browsing ...
1
vote
1answer
86 views

Configuring permissions with Bastille

I was using Bastille to improve the security of my OS. To set this software properly, it ask you several questions related to security rules and you respond it (Y-N). I'm stuck at this question that I ...
13
votes
1answer
700 views

In which country(s) is our Ubuntu One data stored?

In view of the UK government's new internet snooping proposals can anyone answer this question about the physical location of our data?
3
votes
2answers
452 views

If I enable ufw, and disable ssh. Is my base install Ubuntu 12.04 safe from the outside world?

I installed Ubuntu 12.04 I then installed Gufw, enabled it and Set every known application setting to "Deny". I never installed sshdaemon so I think its off. My machine still responds to pings... ...
1
vote
1answer
1k views

How do you make Bastille work and secure Ubuntu 12.04? It doesnt work for me `sudo bastille -x`

I was able to install bastille from the normal repositories and then run the GUI. After going through the options and clicking OK to apply, it showed these errors. Do you know why Bastille wont work ...
3
votes
2answers
176 views

Where will my full name be used?

During installation, the installer told me my name would be used for things like the default 'from' in emails. So now I'm wondering: Where else will my name be used? What benefits do I get from ...
8
votes
2answers
348 views

How do I get security updates for restricted/partner packages?

I want to perform just security updates on Ubuntu 12.04 LTS, keeping the rest of the system unchanged. I need to do this from the command line, no the GUI update manager. I have implemented the ...
0
votes
1answer
104 views

Elevation issue password always wrong?

ubuntu Newbie - I install OS using one account and then later created a second account made administrator with auto login and no password, then I logged in using new account and deleted old account. ...
1
vote
0answers
66 views

How do I securely store passwords? [duplicate]

Possible Duplicate: Password Management Applications? How do I securely store passwords in Ubuntu? Are there any tools available for this?
5
votes
1answer
3k views

blackhole exploit kit - Linux Server Script

It has come to our attention when scanning some of our hosted server websites that they have been infected with Blackhole Exploit Kit (top dollar hacking program - ...
5
votes
1answer
793 views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...