Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
1answer
1k views

Are we affected by the JAVA vulnerability? Are all “applets” affected? [duplicate]

Possible Duplicate: is OpenJDK Vulnerable to 0-Day Exploit? I read today that the Department of Homeland Security has warned against Java-run systems and requested users to ...
2
votes
0answers
747 views

Why does network manager automatically choose WEP over WPA & WPA2?

I am on Ubuntu 12.10 and for some reason my wireless connection is using WEP when it is set to use WPA/WPA2 Personal. Also I should mention that I used to be on 12.04 and was experiencing the ...
2
votes
2answers
483 views

Lock down all programs besides web browser

I am building some kiosks, running ubuntu, that will host an intranet site. What is the best way to allow access only to an Internet browser, and no other applications?
1
vote
1answer
125 views

Ubuntu “1 time password on login” solution [duplicate]

Possible Duplicate: Why is it bad to run as root? I recently fully switched from Windows into Ubuntu. And of course I loved Ubuntu. But the most annoying thing is, system requires password ...
3
votes
2answers
129 views

Security practice regarding users [closed]

Please understand that I've migrated to a Ubuntu Desktop from Win7 some months ago and while I have been reading about sudoers and Linux in general my understanding is still limited. This is how I ...
7
votes
1answer
2k views

How can you delete only GPS metadata from a jpeg file?

I (think I) can delete all GPS information from jpeg file's metadata by exiftool -gps:all= -xmp:all= filename.jpg but that deletes all XMP metadata. Is there a way to delete only GPS information ...
65
votes
3answers
11k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
14
votes
2answers
2k views

How can I tell that apparmor is working?

Some questions I want answered in the answer: How do I know if apparmor is running? How can I tell if it's working well?
6
votes
3answers
217 views

How do I know my system updates are trustworthy?

I routinely update my system whenever it notifies me of software updates. This is one of those things that I just trust to work without knowing the details, but I have become curious recently: How do ...
1
vote
1answer
692 views

Ubuntu 12.10 Encryption Details

Good Morning! Short version of the question below. Please help me understand the encryption features in Ubuntu 12.10. Installing Ubuntu, I opted both for the full disk encryption option as well as ...
1
vote
2answers
525 views

Networking security issue with suspicious traffic. How to track it down?

I have specific problem a bit advanced for me. On my router log I have seen following lines: Internal Prot. External NAT Time-out 192.168.0.167:56396 TCP ...
9
votes
1answer
2k views

Is there a ubuntu supported X.org alternative (i.e. with security in mind)?

question (what I am looking for?) I am looking for alternatives to X.org, which is the most often used X-Server in linux' graphic systems today (which means also in Ubuntu). Do you know some ...
0
votes
1answer
120 views

Java 1.7 bugs affect ubuntu too?

I remember hearing bad things about java 1.7 on windows and OS-X, but are the same security holes present in Ubuntu?
5
votes
2answers
655 views

Why is there a shell given to user for PostgreSQL?

cat /etc/passwd |grep postgre postgres:x:115:127:PostgreSQL administrator,,,:/var/lib/postgresql:/bin/bash apt-cache show postgresql Package: postgresql Priority: optional Section: database ...
14
votes
2answers
590 views

How do I require Two Factor Authentication to log in?

Running 12.04. I am trying to separate my wrapped-passphrase for my encrypted home folder to require a USB drive be present to login. I followed the instructions here and added the drive to my ...
7
votes
2answers
404 views

How does AppArmor deal with non-profiled Programs?

I setup and configured AppArmor in Ubuntu and I would like to know how AppArmor deals with Packages and Applications which have no AppArmor Profile? After installing the package with sudo apt-get ...
6
votes
1answer
648 views

How to set up an rsync backup to Ubuntu securely?

I have been following various other tutorials and blog posts on setting up a Ubuntu machine as a backup "server" (I'll call it a server, but it's just running Ubuntu desktop) that I push new files to ...
2
votes
2answers
261 views

I don't know my passphrase

I have just installed Ubuntu and I am not sure what my password is. I don't really know that much about computers.
2
votes
1answer
1k views

Should I install SELinux to make my Ubuntu Web server more secure?

This wiki page on using SELinux with Ubuntu informs of the following: The Ubuntu-specific "selinux" and "selinux-policy-ubuntu" packages documented here have not received much attention since ...
10
votes
2answers
2k views

Is there Exec Shield buffer overflow protection for Ubuntu?

Is there Exec Shield buffer overflow protection for Ubuntu? I tried to enable Exec Shield on Ubuntu 12.04 with the following command sudo sysctl -w kernel.exec-shield=1 but it said error: ...
1
vote
1answer
554 views

http strict transport security on apache

I could not find one topic on HSTS here on askubuntu.com yet so here it comes: I want to setup HSTS so that my webserver will force the browsers to use HTTPS. Does anyone know how to set this up for ...
4
votes
2answers
631 views

What's the difference between root account and simulated roots?

So if I disable my root account with sudo passwd -dl root I still have access to sudo {su,bash} or sudo -{s,i} conceptually how are the elavated rights different from the root account? I know the ...
0
votes
1answer
234 views

Can I have ipsec-tools working for non standard ports?

I was trying to set up a manually-keyed connection via ipsec-tools between two ubuntu 12.04 servers, following this simple tutorial, but one of that two servers, has just a range of ports 3000 .. 3100 ...
4
votes
1answer
311 views

Install GNOME extensions through website: security vulnerability?

I found a GNOME extension through a Google search (using Chromium), and was very surprised that I could simply toggle the On/Off switch to have the website install a full GNOME extension on my ...
1
vote
0answers
60 views

Security aspects of home dir encryption [duplicate]

Possible Duplicate: Is there a security risk if a password can be reset easily? Changing the login password will automatically make an encrypted home directory re-accessible, as PAM takes ...
0
votes
1answer
53 views

Will simple encryption be coming to 12.04

Will the simple encryption check box (on Ubuntu 12.10 live cd) be coming to the Ubuntu 12.04.x release?
1
vote
1answer
225 views

How to enable home directory encryption for a particular user?

I prefer to have a dedicated "administrator" user for technical purposes and that was one I've set up during installation. I've also refused to encrypt the home folder of the user. Now, as I've added ...
0
votes
0answers
38 views

Very confusing administrations and password security [duplicate]

Possible Duplicate: How do I reset a lost administrative password? I have recently suffered an annoying problem which is really bugging me at the moment. When I start Ubuntu, I can login ...
7
votes
1answer
386 views

How disable mysql command in sudoers file?

How can I disable /usr/bin/mysql command in sudoers file? I've tried to use it this way: %tailonly ALL=!/usr/bin/mysql But when I access user 'tailonly' of group 'tailonly', this command is still ...
3
votes
1answer
627 views

Require password to login to Nexus 7

The default behavior in the Nexus 7 Image is to log straight in to the default user's desktop, bypassing the lightdm greeter. This seems like an acceptable behavior for testing the core but it's ...
3
votes
1answer
429 views

gnome-online-account remembers my google password?

I just added my google account to gnome-online-account, assuming it'd use OAuth. I should mention I use two factor authentication. I wrote in my google password + my verification key (but chose not ...
1
vote
1answer
4k views

Sync KeePassX with KeePass2

Simply put: In Ubuntu I am using KeePassX and in Windows KeePass2. In am not able to export/import passwords from one to another. I would prefer to use the same database, but I don't really know ...
1
vote
1answer
282 views

Ubuntu security with services running from /opt

It took me a while to understand what's going on here (I think), but can someone explain to me if there are security risks with regards to my logic of what's going on here as I am trying to set up a ...
0
votes
1answer
159 views

samhain troubleshooting and performance

I am new user to Samhain so don't know much about it except the fact why its used. Now I am finding my samhain-2.8.5 is consuming too much of CPU. Its almost eating up 2 cores and I cant find the ...
1
vote
2answers
112 views

Is it secure to run windows application on linux? [duplicate]

Possible Duplicate: Risks/Disadvantages associated with Wine I wanted to run windows applications on ubuntu. So i installed winehq. My question is that, is it secure to run windows ...
17
votes
9answers
13k views

Access Prompt keeps asking for GMail password

A pop up keeping appearing in Ubuntu (running 12.10), asking for the password to my gmail account. The icon has a silver shield, and it is labeled Access Prompt. The actual window has an image of ...
2
votes
1answer
856 views

CUPS: Restrict printer access to trusted users on network

I would like to share my printer (connected to my computer with USB) with my colleague though our network. I am very concerned with security issues and I don't want to do anything that could ...
8
votes
3answers
2k views

How to access an OS X keychain via Ubuntu

I need to access some of the content of an old OS X keychain. I know the password - this isn't about cracking ;-) What I don't have is a Mac. I do have the keychain files on a backup drive. Is ...
1
vote
0answers
181 views

Ubuntu all versions from 10.04 till 12.10 [closed]

Is simply enabling the firewall ufw (sudo ufw enable) sufficient enough for protection of the OS ? I mean should extra rules be added for 'better' protection, or is simply enabling the firewall enough ...
3
votes
2answers
705 views

Adobe Flash Player 11.2 Security?

The most recent Flash Player for Windows is 11.4.x, for Linux it is 11.2.x. Are there already any security issues? Are security patches still released for the Linux versions?
2
votes
1answer
56 views

What part of the update manager do you have sift through for, to avoid errors in one's system?

Are the updates on the update manager all by Ubuntu? What part of the update manager do you have sift through for, to avoid errors in one's system? Thanks.
3
votes
2answers
97 views

What security exist when sharing files via an external USB drive?

We have several external sources that send us data via an external hard drive. What security risks are we exposing ourselves to?
-6
votes
1answer
2k views

How to sudo visudo without a password, remove all prompts for password [closed]

Websites tell me to use sudo when I have no password, usually tell me one of two things. It is bad security Or use 'sudo visudo' and the %admin ALL=(ALL) NOPASSWD: ALL line I would like to not ...
11
votes
3answers
41k views

What are the Major Differences between Ubuntu 12.04 and 12.10 in terms of Security? [closed]

I use Ubuntu 12.04. Recently, 12.10 was released. I'd like to upgrade but I want know what the benefits are in using Ubuntu 12.10 over Ubuntu 12.04 first. My requirement is here Security , is there ...
3
votes
1answer
458 views

How to manage security cameras in Ubuntu?

I am setting up a server and chose ubuntu for the OS. The system will have 3 purposes, storing my wife's photography work, storing music for quick access to our entertainment system (will be running ...
5
votes
2answers
196 views

Is There A Security Risk With Users That Are Also Groups?

I know a little about users and groups; in the past I might have had a group like 'DBAS' or 'ADMINS' and I'd add individual users to each group... But I was surprised to learn I could add users to ...
0
votes
2answers
875 views

Why does the Software Centre ask me to install untrusted packages?

I am trying to install Darktable on my Ubuntu 12.04 64bit desktop computer. When I attempt to install it through the Ubuntu Software Centre I get a warning: "Requires installation of untrusted ...
2
votes
1answer
740 views

How would I know if my OS is compromised?

I had opened a php folder from a friend's web host. I run it on mine to fix some bugs. Then I tried attaching the code to be emailed and GMAIL stated that the attachment was infected by a virus. Now ...
7
votes
1answer
554 views

What to do about this gnome-keyring message? [duplicate]

Possible Duplicate: Why do I get this warning from Gnome keyring in Xubuntu? I upgraded from ubuntu 10.04 to 12.04 and installed lxde. Since then whenever I try to print some file (or use ...
1
vote
1answer
536 views

File permissions vulnerability in pure-ftpd using php script

I have created ftp-server using pure-ftpd following this wonderful tutorial. Everything works fine, except file access. Here is the problem. Joe's home folder is /var/www/joe and Steve's home folder ...