Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

8
votes
1answer
87 views

How do I report a sensitive security issue?

In Ubuntu 10.04 (and perhaps later) there appears to be a serious vulnerability to a brute force dictionary attack on any Apache server that is using MySQL to validate user logins. This issue means ...
3
votes
2answers
2k views

How Do I Stop The Service Sudo?

I want to make it impossible for any root commands to be issued during a Live Boot session. I don't want anyone being able to sign in as root. Period! So, is it possible to stop the sudo service? ...
0
votes
2answers
976 views

How to delete files/folders etc [duplicate]

Possible Duplicate: What do I have to do before giving away my Ubuntu machine? How to delete file(s) in secure manner? I intend to sell my laptop and therefor I am looking for some ...
2
votes
2answers
350 views

Should I use use .htaccess to secure Wordpress, or can I use the virtual host config file?

I`m using apache2 on ubuntu 11. I want to secure my wordpress site with .htaccess rules, but I understand that it is preferable to put the rules in the apache config file (httpd.conf). If I ...
28
votes
2answers
764 views

What precautions should I take with .debs I find on the internet?

So I was browsing the web the other day, and I came across a few places that wanted me to download .deb files - and since those are installed by root (and as such have the "powers" and capabilities of ...
10
votes
3answers
793 views

How can I make everything just assume I'm running as the superuser?

Is there a way I can make things just assume that when I run them I am running them as a privileged administrator (AKA root)? I know it could be dangerous and all, but its a risk I'm willing to take ...
2
votes
3answers
2k views

Why is Ubuntu permissive with outgoing connections by default?

I am pretty newbie to Linux, as most of computers for resources in my school use Linux, I just installed Ubuntu to learn. By default iptables and ufw sets policy as under: IPTABLES -P INPUT DROP ...
3
votes
1answer
203 views

Can issetuid() be cleared for a child process? [closed]

I have a wrapper script A which is calling program B. A must be invoked as root so some initial setup can happen. After that, A calls setuid() and setgid() to reduce its own privileges, for safety and ...
3
votes
1answer
87 views

Which application is responsible for accepting passwords when entered in diffrent keyboard layout?

I just noticed that when I'm prompted to enter my password to unlock the system, no matter what layout I choose (Persian or English) as long as I press same buttons that resembles my password in US ...
1
vote
1answer
117 views

How do I query Ubuntu One account information?

For what I promise are un-nefarious reasons, I'd like to programmatically fetch the Ubuntu One account details for the current user of an application (eg name, email, free space). Is there way to ...
5
votes
3answers
334 views

Do I need to be concerned about browser security?

I have been a long time windows user till about thanksgiving when I switched to ubuntu. on windows I used firefox because I could trust the security that it gave. Since malware/virus are next to none ...
2
votes
1answer
691 views

Password Problem [duplicate]

Possible Duplicate: How do I reset a lost Administrative(root) password? Ubuntu 11.1 is rejecting my password when I try to do anything that requires authentication. I am also asked for ...
2
votes
1answer
126 views

Why don't most applications authenticate via gksu?

I've found that most of user authentication programs that used in Ubuntu is not gksu, but it's not a problem. The problem is that these programs do not lock the keyboard (while gksu does). For ...
8
votes
3answers
18k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
4
votes
2answers
5k views

What is the best “File Shredder” to remove files from my system. [duplicate]

Possible Duplicate: How to delete file(s) in secure manner? I need a program to permanently remove files from my system similar to File Shredder
-1
votes
2answers
205 views

Security and Privacy measures

Whats the most Bomb Proof Security to protect h\d and data on it of all the programmes\options available. Thank you all for what appears to be a debate. I am actually looking for a way to protect my ...
4
votes
2answers
5k views

How to secure Ubuntu server

Is there any complete Ubuntu server hardening document which will suffice ISO 27001 or PCI DSS or any other security standard.
0
votes
0answers
330 views

does ubuntu 10 04 lts have a built in firewall and antivirus [duplicate]

Possible Duplicate: Is there a preinstalled or automatic firewall? Do I need to have 'antivirus software' installed? I have just installed ubuntu 10 04 lts on my laptop and I am ...
4
votes
1answer
334 views

Logging program use

I'm trying to find a way of logging what programs other users have been using on the system. I've checked /var/log but don't seem to find anything to show which programs have been accessed. I'm ...
0
votes
3answers
606 views

TCP/IP Fingerprinting Obfuscator

I've heard mention that there's tools for linux that will obscure the "fingerprint" your machine provides to snooping parties on the internet-- however I've been unable to find any mention in the ...
3
votes
1answer
358 views

Does apt-get automatically check digital signatures?

I am planning to run a production server on Ubuntu LTS 8.04 and I am concerned about security of the packages I am installing I want to make sure that packages that are downloaded by apt-get were not ...
0
votes
0answers
180 views

network manager don't save wireless key [duplicate]

Possible Duplicate: Network manager asks for wireless password continually I reset my NetWork Manager and know,it can't remember wifi security key. each time I wanna connect to wifi,it ask ...
6
votes
1answer
3k views

Storing passwords with python keyring

I'm using keyring library to store passwords in my python app. import keyring keyring.set_password('My namespace', username, password) keyring.get_password('My namespace', username) And this works ...
0
votes
2answers
2k views

How to configure firewall for home PC

Firstly, for a home PC, behind a router isit important to install/configure a firewall? If so, how do I do it? I have lamp-server installed as I'm a web developer. I may want my other PC's on LAN to ...
0
votes
1answer
2k views

Protecting samba shares with ubuntu 10.04

I'm using a linux distribution based on Ubuntu 10.04 (Backtrack 5 R1). I successfully managed to create a samba share that is read/write accessible to everyone in my network. I want to protect this ...
3
votes
0answers
979 views

How to turn off thumbnail previews in Nautilus? [duplicate]

Possible Duplicate: Is there a way to tell Nautilus not to generate previews of PDF files? I would like to turn off automatic previews of PDF documents in Ubuntu. Nautilus calls Evince PDF ...
2
votes
3answers
4k views

What Firewall, anti DDOS and anti Brute-Force managers exist in Ubuntu

I have heard of ufw and of course using iptables but is there any other firewall or port manager for incoming/outgoing connections. I am also looking for GUI based ones apart from terminal ones and a ...
5
votes
2answers
297 views

Is portfowarding to my localhost on my personal Ubuntu computer secure?

After installing Lamp on my personally Ubuntu computer, I am running a application that requires to connect to the web and send SMTP mail; for example paypal needs a www address to notify successful ...
1
vote
1answer
2k views

Installed .cer security cerificate [closed]

(linux noob here) I have been trying to resolve this all day, my university uses Secure W2 to control access to its wireless network, I have a copy of the security certificate but I cant seem to ...
7
votes
4answers
13k views

What rules to use for UFW?

I've decided to enable the UFW that comes with Ubuntu just to make my system even more secure (especially after watching a video of a person whose computer actually got infected!), and I've enabled ...
9
votes
2answers
23k views

Can see samba shares but not access them

For the life of me I cannot figure this one out. I have samba installed and set up on the ubuntu box and on the Win7 box I CAN SEE all the shares I created. I created two users on ubuntu that map ...
4
votes
1answer
2k views

How to use Secure Erase and is it on the install CD?

Supposedly there is some built in hard drive magic called "Secure Erase" which is wildly faster and more secure than "dd if=/dev/zero..." I am most excited about the speed increase. There seems to ...
4
votes
1answer
2k views

Wireless with WEP extremely slow on an Acer Timeline 4810T with a Centrino Wireless-N 1000

I've upgraded an Acer Timeline 4810T to Ubuntu 11.10. Everything works fine except for the darn wireless interface (network manager). I just tested the wireless interface over a non-encrypted signal ...
1
vote
1answer
833 views

How to run any program but prevent it from accessing the Internet

I see a nice tutorial on the subject from 2009: http://ubuntuforums.org/showthread.php?t=1188099 But wanted something that will (more likely) work on Ubuntu 11.10. This is a flavor of an ...
17
votes
1answer
3k views

Update Manager does not ask for password anymore [duplicate]

I have realized this behaviour recently. Before that each time the update manager poped up to tell me there are updates and I tell it to install them it will ask me for a password. But since recently ...
1
vote
1answer
282 views

Wine Security - Improvement by second user account?

Team, I'm considering installing wine - but still hesitant for security reasons. As far as I found out, malicious code could reach ~/.wine and all my personal data with my user-priviledges - but not ...
11
votes
4answers
20k views

What antivirus programs are available?

What antivirus programs are available for Ubuntu? We previously used Symantec Endpoint Protection but it does not work in Ubuntu.
3
votes
3answers
2k views

Disable usb mass storage

I want to disable usb mass storage on Ubuntu desktop 10.04, 11.04 and 11.10. As security policy to avoid data leakage. But in case of emergency there easy way getting usb mass storage back.
1
vote
4answers
286 views

Secure my root account

i want to know how to change the user name of my root account from root to xyz. Also I want to know how to remove the option of boot into rescue mode from grub option at the boot time.
42
votes
3answers
7k views

When to use pkexec vs. gksu/gksudo?

There are two general ways to run applications graphically as root (or, more generally, as another user). Programs like gksu, gksudo, and kdesudo are graphical frontends for sudo. In contrast, pkexec ...
1
vote
2answers
247 views

Will I be prone to viruses? [duplicate]

Possible Duplicate: Do I need to have 'antivirus software' installed on Ubuntu? I replaced windows because of the viruses and such. I was wondering if I had to worry much about them ...
4
votes
2answers
1k views

What is the best way to secure my EC2 server in regards to the SSH?

I have a Amazon ec2 instance, and was curious on if I should change the username (the default is ubuntu) or not? Since you need a public SSH key in order to access the server, I don't think you do, ...
8
votes
2answers
499 views

Why is Ubuntu default to allow everyone access to other users folders, Admin or Standard?

Why can other users see all my files by default, admin or standard users? Surely only the Public folder should have a default share, with the option to share other folders with users and groups as ...
38
votes
5answers
4k views

How can I prevent someone from resetting my password with a Live CD?

Recently one of my friends came over to my place, within 15 minutes he hacked my account using a Live CD and reset the password in front of me. I was baffled to see such a thing. Please guide me to ...
29
votes
8answers
11k views

How can I encrypt data in Ubuntu One or Dropbox?

I'd love to use Ubuntu One or Dropbox features, like file storage and so on, but I don't want anyone else to access my data, USA Patriot act etc.. I want things to be encrypted so that the only place ...
2
votes
2answers
342 views

No user name/password required when exploring from live USB?

A few months back when I buggered up my netbook and then booted into it to get information from it using a live USB. (Thinking that was 10.10) When I was copy/pasting this to another USB at no time ...
0
votes
3answers
871 views

new dyndns server at home needs more security

I have just setup an ubuntu web server to use at home as a backup and development server for a website i have. I am using dyndns so my colleges can access this also and test new code. This works well ...
2
votes
2answers
751 views

How can I make Deja Dup use AES 256 as the encryption algorithm?

I'm using Deja Dup on Oneiric Ocelot. How can I make it use AES 256 as the algorithm for encryption? Or for that matter, how can I control which encryption algorithm is used? Deja Dup uses ...
4
votes
2answers
3k views

Disable interactive SSH at user-level

I connect to a server I don't control via SSH. I use public key access and don't need to be able to connect with a keyboard-interactive password. I would like to disable keyboard-interactive access ...
3
votes
2answers
367 views

Use keyfile for encrypted swap [closed]

I installed Ubuntu 11.10 using the alternate CD and set up an ecrypted root and swap partition. Now, during boot, I have to enter a password for the root and a passwort for the swap partitition. I ...