Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
121 views

How to configure UFW for a basic desktop / laptop? [closed]

Reading this answer about enabling UFW, I understand that a computer without firewall can be safe in my local network, but this same safe configuration on a laptop used outside of my local network ...
0
votes
1answer
38 views

Why is su disabled from guest sessions?

From guest you can't sudo or ssh. Why I can't sudo is simple. But why can't I su? What is it that su provides that ssh to the user@localhost wont? The reason for this question being my other ...
0
votes
0answers
32 views

How to prevent ssh on local host?

I came to know that on ubuntu, sudo and su is not available in a guest session because of security concerns. But all I need to do, if I have the login credentials of a user in the sudoers list is too ...
2
votes
2answers
1k views

What is CVE-2015-1793? Does it affect me?

Apparently a new bug has been discovered in OpenSSL, it is being called as Alternative chains certificate forgery (CVE-2015-1793). Canonical already declared the versions of openssl that are not ...
0
votes
2answers
50 views

Apparmor is not functioning

When I check the status of Apparmor, I get this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
1
vote
1answer
44 views

How to file a bug report against Ubuntu in general?

I am wanting to file a bug report against Ubuntu in general, because I have noticed that the Ubuntu security hashes provided, are only MD5sums, and as for security reasons MD5 is being phased out, it ...
5
votes
1answer
42 views

Kernel security levels in ubuntu

Is there any ubuntu equivalent of BSD Kernel Security Level? If yes, how can one change the security level?
2
votes
1answer
24 views

What is a (reasonably) secure and automated way to backup my mysql database using (any) free cloud/online services?

I have a mysql database that I use for personal devlopment. I would like to back-it up online using any free (in cost) online storage. (dropbox, google-drive etc...) I am assuming a shell script ...
0
votes
0answers
20 views

xubuntu suddenly asked me for my password to mount an USB flash disk. Is this normal?

It never asked for it before or after and this one time was after the flash disk was inserted in an untrusted computer. I don't remember the message exactly. Is it possible malware got on the flash ...
1
vote
0answers
24 views

Can i run apache 1 / 2 as root?

I am hoping someone can confirm if apache 1 and / or 2 could be run as root if the user wishes it? There are previous questions around this, where people say "no you don't want to do that" and don't ...
2
votes
1answer
75 views

Can malware enter Ubuntu?

I have a desktop computer with Window 7 system and Ubuntu (installed by my boyfriend). Last week when I shopped online on Win7, I accidentally caught Eye Perform ads in Firefox. I Google and found ...
0
votes
0answers
15 views

How do I add an existing ubuntu user to a new domain?

Our organization is making some changes in their security model and they have created a domain server with which each machine would be linked. For this, they have created a new user on my laptop which ...
0
votes
0answers
37 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...
1
vote
1answer
39 views

Locking down an apache server - Prevent '/' page from being visible to all

I first installed Apache as part of a ZoneMinder setup. I then added to the server with an ownCloud setup. All this is only accessible to LAN or to WAN-through-ssh and that part works great. I now ...
9
votes
3answers
488 views

sudo permission doesn't time out durring apt-get upgrade

Consider this: You type $sudo apt-get upgrade and get a list of things that need upgrading with a "Y\n" confirmation. before you can read the list, and type "Y" or "n", the phone rings, or your boss ...
0
votes
1answer
22 views

Can I make the Windows folder require a password to access it? [Edit/change or add flder and data]

Recently, I was thinking that while running wine an application that contains a virus can inject into the windows folder. I don't know if this is possible, but it would be nice to make the Windows ...
0
votes
0answers
30 views

How would I securely connect to a smartphone?

I have got Ubuntu 14.04 LTS and a smartphone with no brand name of any kind. How do I connect the smartphone to my computer securely? The OS is unspecified. it looks like android. I am worried ...
1
vote
1answer
60 views

launch ipython but not like root

ipython is launched like root (UID); ok, but I need that after ipython cann't run and don't allow, script/code that can gain root privilegies. eg I launch ipython, ok the UID is root. And in my ...
0
votes
1answer
30 views

Stateful Packet Inspection on Ubuntu?

By default Ubuntu doesn't have open ports (exceptions: Avahi and dhcp). Assuming that my system is connected to the internet by direct way (no hardware firewall used): If I am sending a UDP packet to ...
0
votes
1answer
42 views

Block all but one ip address

I need to allow access to only one IP address and block the rest, so I wrote the following: sudo iptables -F sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables ...
0
votes
0answers
7 views

Does installing WINE make a Ubuntu PC less secure? [duplicate]

Does anyone know if installing WINE on a Ubuntu PC make it more prone to security risks i.e. malware, virii, system security exploits, etc? I would like to know more about why it would or would not ...
1
vote
1answer
63 views

Why ntpd needs an open port?

On my Ubuntu system I have activated the 'Time Synchronization via Internet'. Because of that the ntp daemon gets started. What I don't understand: Why needs ntpd an open UDP port 123? Actually, I ...
0
votes
0answers
32 views

How do I compare my openssl version with non-ubuntu openssl versions?

I have an ongoing problem where every time an openssl vulnerability is found, the announcement documentation tells me what versions of openssl are safe -- but ubuntu doesn't actually use the same ...
0
votes
1answer
51 views

What does these logs means? (DHCPREQUEST)

I'm using Ubuntu 14.04 LTS as my OS. For safety purposes, I'm always checking the logs to see any strange thing. Today, I have found something that (probably) never happened to me: Jun 11 23:33:59 ...
1
vote
1answer
44 views

Suspected rootkit, what should I do?

I inherited ubuntu 12.4 server and I want to check it for possible rootkits/modifications. Is there a way to test all executable/library files for modification (test if currently installed files are ...
0
votes
1answer
30 views

How to deal with this untrusted program

The program is IPFS. I do not fully trust the program, how should I keep it from making changes to my system outside of its designated folders?
0
votes
0answers
62 views

Password popup on USB unplug/replug “Authentication is required to change your own user data”

After upgrading from 14.04 to 14.10 when I unplug and re-plug a USB mouse (or switch keyboard/monitor/mouse with a KVM switch.) an authentication popup dialog appears asking for my password saying ...
0
votes
0answers
21 views

virtualization and security vis PCI DSS security

I have a couple questions about the effect of virtualization and the security of both the host and guest systems. The OS on both is Ubuntu server 14.04. I opted for use of Oracle's Virtualbox. I ...
0
votes
0answers
40 views

Failing PCI audit

I am Running Ubuntu 14.04.2 with Apache as a reverse proxy the server is fully patched and I am getting the following information when I use www.mynpcdata.net to scan the system. I have no idea if ...
1
vote
1answer
97 views

What are the features in Snappy Ubuntu that make it more secure than the normal Ubuntu?

I am thinking of using Snappy Ubuntu for IoT application. Security is important in IoT. What is the difference between Snappy Ubuntu and the normal Ubuntu that makes Snappy more secure compared to ...
0
votes
0answers
38 views

Do I have all the security benefits of Ubuntu if I install it on an android tablet?

Background: I will go traveling and need a small computer to check things, do banking, book flights and write. I want Ubuntu on it to have a secure, save and stable environment (as I have it on my ...
0
votes
0answers
15 views

Wireless network connection won't stay secured

I set my wireless connections with WPA & WPA2 Personal Security & a password. Every time I shut down & come back later those settings are gone & my network connection is unsecured ...
0
votes
1answer
38 views

How to exclude a specific folder from search in Synapse?

I added excluded folder to Security & Privacy settings and I followed this instructions but all of them seem to be working only when using Unity Dash search. Inside System and Home Dir. I could ...
2
votes
2answers
40 views

When would my application need to run with privileges?

One way of making sure an application is less prone to attack is to make sure it runs with the least privileges required (user mode preferred). I've only usually programmed for Windows using the .NET ...
1
vote
1answer
308 views

can windows virus affect Linux machine through wine? [duplicate]

When we use wine on Linux PC windows Virus can affect folders of wine? I think may be not; But I still Confuse about that. What is accurate answer? Wine is emulator of windows then some question ...
0
votes
1answer
70 views

Ubuntu Phone prevent text messages from lock screen

On my Aquaris Ubuntu Phone, text messages quickly pop up on the lock screen. As I consider this a serious security issue, is it possible to hide any messages from the lock screen? Thanks for any ...
0
votes
1answer
24 views

Unresolvable problem [duplicate]

An unresolvable problem occurred while initialising the package information. Please report this bug for the 'update-manager' package and try to include the following error message: 'E:Malformed line ...
3
votes
1answer
389 views

Could not load host key: /etc/ssh/ssh_host_ed25519_key in /var/log/auth.log

I have an Ubuntu 14.04 instance running on AWS. I was browsing the auth logs (/var/log/auth.log*), and noticed the following line appearing: Could not load host key: /etc/ssh/ssh_host_ed25519_key ...
0
votes
0answers
74 views

How to encrypt dual-booted Xubuntu?

I'm running a dual-booted Windows and Xubuntu system. I need full partition encryption, but only on the Xubuntu side. Is it possible to set it up without loosing any data? Which method is the safest ...
3
votes
1answer
80 views

How to show all files created on a specific date

On 16/05/2015 at 17:18 I visited a malicious website. And I suspect a drive-by-download, so I want to check my machine to see since that time in order of creation which files have been created or ...
0
votes
0answers
57 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
1
vote
2answers
70 views

What is this and how can this happen? Is this a security issue or can it be a virus?

From the last 3-4 days, my laptop has started becoming much laggy when I'm working on Android Studio or if it is just running in the background. So, today again I was working in Android Studio. My ...
2
votes
1answer
69 views

How to enable unhide in rkhunter

I have installed rkhunter with: sudo apt-get install rkhunter And even though I have enabled all test, when I run: sudo rkhunter --check --sk If I check in the log file, I see this about the ...
0
votes
0answers
37 views

Upgrade hardware enablement stack but retain kernel

Ubuntu 14.04.01 According to official documentation, upgrading the hardware enablement stack in Ubuntu to utopic-lts upgrades the kernel and xorg. I only want to upgrade xorg to correct a display ...
2
votes
1answer
42 views

Installing Tripwire

I just installed a fresh version of Ubuntu 15 and while I installed it I did not connect to the Internet. I have read you should install tripwire first thing after a fresh install and before you even ...
2
votes
1answer
108 views

Mumblehard Malware on my Server?

this morning, I watched a monthly webinar about IT-Security. One of the actual topics was the malware "mumblehard". This malware makes your server to a part of a botnet and sends spam via email. The ...
1
vote
0answers
43 views

Cannot download security updates in Lubuntu 14.04 LTS

Software Updater offers Security Updates--Ubuntu Base--61.9MB. I click Install now and authenticate. Screen shows "Failed to download package, check your internet connection'. There is no problem with ...
0
votes
0answers
339 views

Is this a security threat (failed SSH login as root)

I was checking the /var/log/auth.log and I found it's full of these two paragraphs May 6 07:42:12 mypc2 sshd[4489]: Failed password for root from 221.229.166.29 port 36998 ssh2 May 6 07:42:18 ...
3
votes
1answer
51 views

Is running packages from Ubuntu universe more risky than running the same packages on Debian? [closed]

I am running Ubuntu LTS Server. Are there any concerns with security patching of universe packages? I mean am I in risk of running vulnerable system if having universe packages when compared to the ...
0
votes
0answers
91 views

/var/cache/apt/apt-file/gb.archive.ubuntu.com_ubuntu_dists_vivid-backports_Contents-amd64.gz: PUA.File.Exploit.CVE_2012_1461 FOUND

I recently scanned my machine with ClamAV (using the latest virus definitions) with this command: sudo clamscan -r --detect-pua --infected --bell / And this was one of the outputted results: ...