Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

4
votes
2answers
771 views

What additional security measures should I apply for Ubuntu?

So on my Windows 7 install, I've got multiple free malware/virus scanners and a firewall up. But I've heard that Ubuntu (or Linux in general) is much more secure by default. So what additional ...
1
vote
2answers
261 views

How to backup encrypted home in encrypted form only?

I want to backup the encrypted home of a user who might be logged in at backup time. Which directories should I backup if I want to ensure that absolutely no plaintext data can be leaked? Are the ...
7
votes
3answers
944 views

Ubuntu installed alongside an infected Windows system

My antivirus scan has found something on Windows 7. No information yet what it is. However I was thinking of installing Ubuntu alongside Windows. Could that be dangerous in terms of Ubuntu catching ...
1
vote
1answer
953 views

Minimal LAMP iptables setup

What rules are needed for an Ubuntu LAMP server only having minimum necessary ports open.
0
votes
1answer
730 views

Completely eliminating all password prompt [duplicate]

Possible Duplicate: How to disable all password prompts? I've looked all over Google for a way to disable those annoying password prompts. So far the only one that's worked is editing the ...
48
votes
2answers
5k views

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
44
votes
6answers
18k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
0
votes
2answers
194 views

Easiest authentication for LAN networks?

There are a lot clients inside a LAN. The server is trusted, the clients are not. It has to be ensured that other clients can not spoof another clients or the servers LAN IP address. I want to ...
0
votes
1answer
75 views

What do the 68 group symbols in KeePassX stand for in detail?

KeePassX 0.4.3 > Menu > Groups > Add New Group > (Group Preferences) > '>' lists 68 group symbols. What do these 68 group symbols stand for in detail? The KeePassX handbook does not explain that. I ...
10
votes
2answers
9k views

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes? ...
2
votes
1answer
248 views

Can I specify tighter security group controls in EC2?

I see juju creates a new security group when we do a bootstrap, but this security group is so open that it allows all the machine inside the group to access all the ports. Is it possible to create a ...
5
votes
4answers
17k views

How to verify the SSL fingerprint by command line? (wget, curl, …)

Using a command line website downloader, such as wget, curl or any other one... In a script... I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
2
votes
2answers
749 views

How do I create a kiosk-mode where only one application runs, no games, etc.?

I want to create a Point-of-Sale (PoS) system with Ubuntu. (i.e. cash register). The system should start with the PoS application, and shutdown when the PoS app is closed. It must be locked down, and ...
2
votes
2answers
239 views

Is there supposed to be a Windows Network folder in the file manager?

I pulled my hard drive out of my computer and started with a bootable usb version of Ubuntu, which I am using that at this point. At first boot, I see that there is a Windows folder when browsing ...
1
vote
1answer
86 views

Configuring permissions with Bastille

I was using Bastille to improve the security of my OS. To set this software properly, it ask you several questions related to security rules and you respond it (Y-N). I'm stuck at this question that I ...
13
votes
1answer
700 views

In which country(s) is our Ubuntu One data stored?

In view of the UK government's new internet snooping proposals can anyone answer this question about the physical location of our data?
3
votes
2answers
447 views

If I enable ufw, and disable ssh. Is my base install Ubuntu 12.04 safe from the outside world?

I installed Ubuntu 12.04 I then installed Gufw, enabled it and Set every known application setting to "Deny". I never installed sshdaemon so I think its off. My machine still responds to pings... ...
1
vote
1answer
1k views

How do you make Bastille work and secure Ubuntu 12.04? It doesnt work for me `sudo bastille -x`

I was able to install bastille from the normal repositories and then run the GUI. After going through the options and clicking OK to apply, it showed these errors. Do you know why Bastille wont work ...
3
votes
2answers
172 views

Where will my full name be used?

During installation, the installer told me my name would be used for things like the default 'from' in emails. So now I'm wondering: Where else will my name be used? What benefits do I get from ...
8
votes
2answers
344 views

How do I get security updates for restricted/partner packages?

I want to perform just security updates on Ubuntu 12.04 LTS, keeping the rest of the system unchanged. I need to do this from the command line, no the GUI update manager. I have implemented the ...
0
votes
1answer
104 views

Elevation issue password always wrong?

ubuntu Newbie - I install OS using one account and then later created a second account made administrator with auto login and no password, then I logged in using new account and deleted old account. ...
1
vote
0answers
66 views

How do I securely store passwords? [duplicate]

Possible Duplicate: Password Management Applications? How do I securely store passwords in Ubuntu? Are there any tools available for this?
5
votes
1answer
3k views

blackhole exploit kit - Linux Server Script

It has come to our attention when scanning some of our hosted server websites that they have been infected with Blackhole Exploit Kit (top dollar hacking program - ...
5
votes
1answer
767 views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
0
votes
1answer
224 views

Can we add back track tools to 12.04?

If possible, then how can I add the tools available under Back Track Linux to my Ubuntu 12.04 distribution. I prefer their functionality from the terminal.
22
votes
6answers
17k views

What Can Be Done To Secure Ubuntu Server?

I have a project to secure Ubuntu Server as much as I can. The server is a web hosting server. The server will be running LAMP , Mail , and DNS.
1
vote
2answers
157 views

what packages to uninstall for better security?

I have read a recommendation which was stating that after installing one should remove some packages from the default Ubuntu installation, in order to have a more secure server. What are your ...
17
votes
2answers
8k views

What is the 'ptrace_scope' workaround for Wine programs and are there any risks?

To run certain Windows programs in WINE you need to this workaround: echo 0|sudo tee /proc/sys/kernel/yama/ptrace_scope According to the support websites, this is due to a bug in the Ubuntu kernel ...
1
vote
1answer
163 views

Passively monitoring CPU activity

So everytime I leave my ubuntu desktop alone, it seems that after a while it starts "working on stuff" -- CPU lights lighting, that busy CPU processing sound being pretty loud, etc. But when I move my ...
2
votes
4answers
1k views

Is this fix for Avast Antivirus crashing safe to use?

Well I have installed avast anti virus on Ubuntu 12.04. But after updating, it crashes! So I have made some tweaks like below: Press Ctrl+Alt+T to open the Terminal. When it opens, run the command ...
0
votes
1answer
54 views

Why are many operations or commands in Ubuntu not allowed normally when you can just do the same thing by typing sudo?

What purpose does this server when bypassing is as easy as typing sudo? Forgive the naivety here but I am a rookie and I'm sure there has to be a good reason for this, and I'd like to know that.
3
votes
3answers
3k views

Packet Sniffer found, what next?

After a download yesterday my computer crashed. I updated today and checked for rootkits. I found a packet sniffer eth0: PACKET SNIFFER(/sbin/dhclient[3966]) How can I remove this?
0
votes
1answer
53 views

How to file a bug report for a specific Ubuntu release?

I imagine if I want a package updated in an LTS, such as 12.04, it has be for a very good reason. The actual package I am interested in is picolisp: It has a (probably also affecting security!) bug ...
2
votes
1answer
2k views

Verify integrity of installed Ubuntu packages

I'm looking for a script that is run from a boot-CD doing the following for all files on a drive: find the debian-package a file is from (if possible) download and extract the debian-package ...
0
votes
1answer
236 views

Is there any mechanism that blocks connections by IP address in a default 11.04 installation?

On a default installation of 11.04 desktop (running inside a VM), I'm getting a strange phenomena in which occasionally some people can't ssh into their account in the regular way (they simply get a ...
5
votes
1answer
145 views

How do I create a default fallback profile for any process that doesn't have one in AppArmor?

Is there a way to specify a default profile on any executable that doesn't have a profile already defined? The idea is to avoid any unconstrained processes.
2
votes
1answer
317 views

Handling old kernels with automated upgrades

For security purposes I've been a fan of unattended-upgrades, Using something like this: Unattended-Upgrade::Allowed-Origins { "Ubuntu lucid-security"; }; ...
1
vote
0answers
86 views

Is it safe to install applications from PPAs? [duplicate]

Possible Duplicate: Are “PPA's” safe to add to my system, and what are some “red flags” to watch out for? What is the risk in adding an unknown PPA? I have ...
2
votes
0answers
146 views

Cannot login to user with encrypted directory

I unknowingly deleted the .ecrypts directory while reinstalling Ubuntu 12.04. I created a default user by the same name while installing the new version. However, I couldn't login to the user after ...
4
votes
3answers
4k views

GUI program to shred or wipe files with options to make sure they are unrecoverable?

I have a quick question about file shredding. Is there any application with graphical interface capable of shredding files and folders? I know bleachbit has that feature but there are no options or ...
3
votes
2answers
305 views

Is it safe to browse the Internet with a LiveCD?

In my case with a Kubuntu 12.04 Live USB, I wonder is it safe ? There have been a lot of updates (150+ or something) since it came out. Specifically with the USB, although I chose the "Discard on ...
1
vote
1answer
223 views

Accidentally accepted unknown IP to Desktop Sharing

I was using Desktop Sharing on 12.04 for some days, and there were a lot of connect requests from unknown IPs. One of the connect requests I accidentally agreed to because I mixed up the ...
1
vote
1answer
2k views

fail2ban broken after dist upgrade

My fail2ban install is broken after a dist update. I have no idea why it stopped to work. The logfile is over weeks 0 byte. Even if I can see in my server logs that the client should be blocked. Here ...
4
votes
2answers
2k views

Can ecryptfs-setup-private be made to use a 256 bit AES key (instead of the default 128 bit key length)?

ecryptfs-setup-private will by default use an AES 128 bit key. Can I make it use a 256 bit key (32 bytes key length)? Of course, I could do the whole process manually as described here: ...
2
votes
1answer
166 views

Could rsyslog be purging log files?

Today I found a lot of log files empty, these were: /var/log/auth.log /var/log/syslog /var/log/daemon.log /var/log/kern.log /var/log/mail.log /var/log/user.log /var/log/mail.info /var/log/mail.warn ...
1
vote
1answer
292 views

Is it possible or a good idea to run a more or less secure minecraft server without having pre-experience in Ubuntu?

Hello Dear Ubuntu Questions Community, This is my first on this site and is very important to me! I currently run a Minecraft Server that runs on a server that I have to move aways from, and that in ...
1
vote
1answer
1k views

Security Issues from Torrent Downloading

I am a new Ubuntu user (using it since last 1 month). When I was with windows there were all these Internet Security Suites that protected the PC. With Ubuntu there aren't any. I wanted to know if I ...
0
votes
0answers
38 views

Why does my Ubuntu 12.04 install not pull this security update? [duplicate]

Possible Duplicate: Update Manager Not working Fail to Download Repository Information I have installed Ubuntu 12.04 about a week ago and it is not letting me receive security updates. It ...
4
votes
4answers
5k views

Is it risky to download a script with a http://goo.gl/ link?

Following the advise of an answer in Ask Ubuntu, I downloaded and ran a script with a URL starting by http://goo.gl/ Is it risky to use such file? could it be a virus or something else? If yes, what ...
0
votes
1answer
394 views

Are there any security issues with guest accounts?

I have just reactivated the guest session in Ubuntu, because several people use my laptop on a temporary basis. I wanted to know if there are any security issues with using a guest session, and if ...