Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

3
votes
1answer
73 views

Do malicious web sites ever exploit vulnerabilities in Linux clients? [closed]

Do malicious web sites ever exploit vulnerabilities in Linux clients? Are there any documented instances of this happening in the wild? I am talking about actually taking over the client's machine ...
24
votes
3answers
1k views

How do I run a sudo command needing password input in the background?

I have recently disabled sudo's authentication caching ability so that it now prompts me for a password every time. And though this is good for security, it has caused one slight problem which I ...
0
votes
0answers
19 views

want to change password on ubuntu entirely in a single line with no prompt

echo somepassword | passwd --stdin someaccount does not work. Why not? I don't care that it appears in the process table for an instant or is recorded by process accounting.
1
vote
0answers
56 views

Can an Ubuntu system get infected by a Macro Virus for MS Office / LibreOffice / OpenOffice?

We are running Ubuntu on several office machines, which are used to handle administrative tasks on a daily basis, e.g. to receive applications via e-mail. We now had the situation that we received ...
0
votes
0answers
65 views

How to Set-Up WOL with Security in Ubuntu 14.04?

I am setting up a Ubuntu PC which I only need to do Matlab computation efficiently through VPN connection. My network card should be ok (Intel 9301CT where processor Intel 82574L) which Ubuntu ...
0
votes
2answers
207 views

linux-image-generic vs linux-image-x.x.x-xx-generic security updates

I have an Ubuntu 12.04 32 bit server running with unattended-upgrades set up to only install security upgrades. I have the linux-image-generic and linux-headers-generic packages installed and am ...
1
vote
1answer
46 views

Preventing from DDOS attack

I think I am under a DDOS attack, I found these lines on my access.log: 41.214.156.122 - - [21/Mar/2016:06:01:40 +0300] "POST / HTTP/1.1" 200 41765 "-" "Dalvik/2.1.0 (Linux; U; Android 5.1.1; ...
2
votes
1answer
26 views

Trying to grasp the linux file permission concept

I know how to change file permissions, ownership etc. But sometimes I feel I don't know what would be the best approach security wise. I just change permissions or ownership to make things work, but I ...
5
votes
2answers
929 views

How to securely ssh into a machine at home over the internet

I will be travelling shortly, and I have a machine that run runs a bunch of cron jobs etc. I need to log in remotely to check the results of the jobs run and to do some work on the machine. Here are ...
4
votes
0answers
64 views

How is the guest account prevented from using su and sudo?

It's already known that the guest account can't use su or sudo: Why is su disabled from guest sessions? Sudo not available in guest login How is this done? My guess would be apparmor. However, ...
3
votes
3answers
71 views

How to prevent scripts/commands hijacking your session's cached sudo ability?

If I run a sudo command it will ask me for a password, however in that Terminal session for the next few minutes it will allow me to run sudo commands without asking me for a password as it will cache ...
1
vote
1answer
28 views

OS on external hard drive

If I put a OS like Ubuntu onto a external hard drive, would it allow viruses to infect my internal hard drive? If more info is needed, then feel free to ask.
-1
votes
3answers
483 views

What is the best antivirus for Kubuntu/Ubuntu as of 2015? [closed]

OK, I do have to admit I am somewhat new to Linux,(I'm used to Windows), and that's why I'm asking all of these questions about Kubuntu. As of 2015, what is the best, FREE anti-virus for Linux, ...
0
votes
0answers
41 views

Ubuntu chrome, and firefox with untrusted certification authorities

I have this as some of my server certificates, also some authorities. At least three users I know have this. Is this a bug? What should I do? dpkg -l ca-certificates ...
1
vote
0answers
12 views

Is ClipIt safe? How would I test this? [duplicate]

I have seen that Clipit has an "Offline mode", which is described in this question. However, it shocked me as I thought that perhaps it was storing my data online, which would be a security concern. ...
-1
votes
1answer
43 views

using VNC with SSH securely

While I know there is a plethora of available information on how to set up VNC for remote desktop viewing, some of which outlines the importance of using SSH to ensure security, I want to know dome ...
1
vote
1answer
60 views

How does ubuntu ensure software security bfrom external developers [duplicate]

I was reading on the hack against the Transmission Bittorrent Client. http://arstechnica.com/security/2016/03/first-mac-targeting-ransomware-hits-transmission-users-researchers-say/ It got me ...
0
votes
0answers
20 views

Make last command shows also sftp sessions

last command searches back through the file /var/log/wtmp (or the file designated by the -f flag) and displays a list of all users logged in (and out) since that file was created. On my Ubuntu ...
1
vote
2answers
82 views

LXD,LXC containers security

I just want to know dose the Linux containers (LXD) provide security? Such that if on container get infected with a virus will that effect the entire system (kernel+other containers) Or it will ...
1
vote
0answers
36 views

Is “oneconf-service” meant to be running?

I left my computer for a little while, and when I came back it told me that there was an internal error with oneconf-service, and though it (the process) is gone now, in the processes list in the ...
1
vote
0answers
57 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
9
votes
1answer
2k views

Are all versions of Ubuntu secure against DROWN attack?

OpenSSL updates release versions 1.0.2g and 1.0.1s to fix the DROWN vulnerability (CVE-2016-0800). In Ubuntu 14.04 LTS Trusty Tahr, the latest OpenSSL version is 1.0.1f-1ubuntu2.18. Do I understand it ...
0
votes
2answers
41 views

Why is server restart required? [duplicate]

When logging into my Ubuntu instance I get the message *** System restart required ***. I am running a server and uptime is very important for me. How can I know why the restart is required? I have ...
0
votes
1answer
28 views

syslog-ng viewer that can display many log files of different IDS

I have three Intrusion detection systems installed (snort, modsecurity,ossec) and I want to visualize the generated log files of these IDS. Is there a Graphical User Interface that can display the ...
6
votes
2answers
333 views

does rolling back the kernel in Ubuntu compromise security

I recently updated my kernel, and noticed that it was affecting my graphics drivers. As a quick fix I rolled back the driver , but would like to know if this affects my system security in any way? ...
2
votes
4answers
145 views

Is there any way to verify a Ubuntu iso or hashsum?

Neither the iso nor the hashsum is available via https. Is there any way to verify you're not getting man-in-the-middled?
0
votes
0answers
20 views

Which are the security problems on running an http server using Python's built in module?

I've just read this post but I haven't got the necessary points to comment on it. I'm running, $ python -m http.server I wonder which are the security implications about it, with some examples. ...
0
votes
1answer
101 views

telegram with secret chats

What is the best way to run telegram on linux with support for secret chats? This is what I tried already: run telegram desktop - works very well but no secret chats feature pack android telegram ...
0
votes
0answers
57 views

How to hide “Show password” in Network Manager?

I have a problem with the "show Password" checkbox. I'm trying to help a social school. The thing is that the "Wi-Fi Network Authentication Required" popup shows up some times. what is not a ...
0
votes
4answers
123 views

looking for the valid md5 checksum for “ubuntu-14.04.4-desktop-i386.iso” file

After the LinuxMint incident, I am giving Ubuntu a try. I was one of the "winners" who downloaded on the day of the hack attack. So I just wanted to be extra sure that the md5 was okay, but I can't ...
0
votes
1answer
24 views

how to install update by CVE number

In Redhat and Suse i can run below command in order to install a specific CVE. for example: yum update --cve CVE-2015-7547 zypper patch --cve=CVE-2015-7547 in this also possible in Ubuntu? How ...
0
votes
3answers
58 views

Is sudo's bruteforce protection really helpful?

In this question: Why is there a delay when entering a wrong password? it appears that there is a 1-2 seconds timeout in sudo once it is given a wrong password in order to make cracking attempts more ...
0
votes
0answers
51 views

How to check if Ubuntu Touch device is really new?

I just got a new BQ Aquarius E4.5 Ubuntu Edition from the shop. However: Battery was totally discharged (0%) I was not asked to perform initial configuration After I installed terminal, output of ...
0
votes
0answers
18 views

Is it possible to run services with limited privileges?

I have a home server with some web and database services running (nodejs, postgres, neo4j). Later I intend to add a vpn server, so I will be able to access the services from the office. As far as I ...
0
votes
0answers
14 views

Vulnerability check for glibc Security Issue: glibc getaddrinfo stack-based buffer overflow [duplicate]

A security problem with getaddrinfo in GNU’s glibc was reported by Google Engineers How can I check if my systems are affected? (using ubuntu 14.04 LTS) How to fix this issue?
0
votes
1answer
43 views

A buffer-overflow vulnerability in the GNU C Library

I came across this article by PC world informing about some serious vulnerability discovered by Google and Redhat a couple of days before, i am using Ubuntu latest version, and it's up-to-date, do i ...
0
votes
0answers
22 views

Fake SSID's showing up in nm-applet

I've started noticing fake SSID entries showing up in the network manager applet under Ubuntu. These apparent base stations don't really exist (othe devices can't see them when they scan for WiFi ...
4
votes
3answers
4k views

Which Ubuntu releases have fixes for CVE-2015-7547 (“Extremely Severe Bug” with libc getaddrinfo())? [duplicate]

Ars Technica posted an article describing the getaddrinfo() bug and how it is widespread in the Linux world. The vulnerability was introduced in 2008 in GNU C Library, a collection of open ...
0
votes
2answers
37 views

How to encrypt hard disk? [closed]

Can I encrypt hard disks? If yes, then how? Can it be used for any individual drive or I will have to encrypt all at once?
-1
votes
1answer
34 views

Can an infected USB infect my PC through sudo and/or home?

Can an infected USB infect my PC through sudo and/or home if it is under sudo (like cleaning it with sudo sgdisk --zap-all dev/sdb, sudo dd if=/dev/zero of=/dev/sdb, or even looking/changing ...
0
votes
0answers
34 views

Can ubuntu security updates restart services started via supervisord?

When unattended-upgrades install security patches for services like mysql, nginx or ssh, automatic demon restarts would get triggered. Will the same happen if I am running them via supervisord?
0
votes
1answer
66 views

How easy is it to get Linux.Ekoms.1?

I read about this malware, one of the biggest specimens of malware on the Linux news right now. How easy is it to get? Paranoia has gotten the better of me. According to the sites I visited, it is ...
0
votes
0answers
35 views

firefox on ubuntu triggers huge download in the background

I am using ubuntu 14.04.02, and firefox 44.0.2. Recently I noticed, my downloads were going really high but I never downloaded anything. After step by step debugging, I could find that the moment I ...
0
votes
0answers
14 views

Automatic security upgrades, unattended-upgrades, and controlling when it does it

I have a linux server running a java app. The vendor indicates that 99+% of the time that one of their customers gets hacked, it's because they haven't installed JDK security upgrades in months. I'm ...
0
votes
0answers
82 views

Can I run Flash player for my browser in sandbox?

Flash player has a lot of Vulnerabilities. I have disabled the plug-in for security reasons, but there are times when content needs it. Can I run Flash player for my browser in a sandbox (isolated)? ...
1
vote
0answers
52 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
3
votes
1answer
28 views

Security risks with fakeroot?

Is there a security risk having fakeroot installed on my system? I can't find much more than was is provided in the manpage.
1
vote
1answer
26 views

Ubuntu Mozilla Security, do I need this? General questions

I was searching for info on enabling/disabling javascript in firefox, some pages I need to have it function and without the java they're broke. I came across this and was wondering is this something ...
-1
votes
2answers
98 views

How to edit /etc/default/ntpdate and prevent ntpdate from ever running without uninstalling

Since both ntpd and ntpdate rely on ntp servers, and since the Ubuntu repos have yet to complete an update of ntp to 4.2.8p4 (the version recommended by ntp researchers), I expect this means that both ...
0
votes
0answers
19 views

Restricting the Number of IP/TCP Connection Request Per Second Using Ubuntu Sever

I know what type internet connection my machines have and how much CPU/RAM they are using. So Is it possible to restrict the accepting number of IP/TCP connections per second at the OS level, before ...