Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
48 views

Modern Ubuntu home media, security, and automation center [closed]

I'm looking to set up a large computer to act as a home media center, a security system, and possibly home automation. I'd like the following features 64 bit support Modern (based on a recent ...
5
votes
2answers
90 views

What are the reasons to have strong password at home?

For a typical home PC the security situation is following: No servers running, not even the SSH. Firewall is ufw running in simple mode: all outgoing allowed, all incoming denied. Torrents and DC++ ...
0
votes
0answers
42 views

ConsoleKit history log file is suddenly huge

I've had a server running (accessible on the web) for a year or so. There's a series of compressed history files in /var/log/ConsoleKit that are a few kilobytes each. However. October's is 1.2 GB, ...
0
votes
0answers
154 views

How do I address CVE-2014-3566 (POODLE) for lighttpd (1.4.28) on Ubuntu 12.04? [duplicate]

As most of you know, CVE-2014-3566 (AKA POODLE) involves weaknesses in SSLv3 on clients and servers. See https://securityblog.redhat.com/2014/10/15/poodle-a-ssl3-vulnerability-cve-2014-3566/ for more ...
0
votes
0answers
85 views

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption vulnerability) in Lubuntu 14.04 [duplicate]

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption) vulnerability in Lubuntu 14.04 and fix for the issue.
7
votes
3answers
9k views

How do I disable SSLv3 in tomcat?

Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)? for Tomcat. I have tried following below link, however it does not help: tomcat-users mailing list ...
0
votes
0answers
7 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
131
votes
3answers
141k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
0
votes
3answers
111 views

Run rkhunter regularely on a desktop system

I want to get a warning on my desktop when rkhunter finds something odd on my system. I whitelisted some files and dirs that seem ok in /etc/rkhunter.conf so I get no warnings anymore. Now I want to ...
0
votes
0answers
14 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables
0
votes
0answers
25 views

List only “security” related upgrades with apt-get upgrade

I'm interested in a shell command that can behave like apt-get dist-upgrade except only list/consider security related package upgrades. For example, limit it to packages in security.ubuntu.com or in ...
1
vote
1answer
34 views

restore patched bash to apt maintained

Last month I manually patched bash on a server running ubuntu 11.10 for the shellshock bug, as suggested in the comments here: What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I ...
0
votes
1answer
200 views

Does Ubuntu 14.10 have the security fix for Shellshock bash exploit? [duplicate]

On the internet, I noticed there were Patches for the Shellshock vulnerability which is scaring me a lot. Does Ubuntu 14.10 have this automatically in it?
0
votes
1answer
47 views

Ubuntu 14 home/personal use version of Windows Update or apt-get “Must Dos” for Security [closed]

What basic security measures should be taken for Ubuntu's distro for home/personal use. No apache or web server installed.
0
votes
0answers
22 views

Is there any way of preventing an encryptd folder from showing sundry file information?

I have set up an encrypted folder with EncFS and use it successfully through the terminal on ubuntu 14.04. One thing I have noticed though on the hidden encrypted folder while on giving away name or ...
0
votes
0answers
19 views

Secure SSH Server from brute-force? [duplicate]

I'm just a newbie in Linux and recently got a VPS (Ubuntu 14.04 LTS Server). How can I secure its ssh server from brute-force attacks?
0
votes
1answer
75 views

Encryption [STANDARD] Ubuntu?

During the installation of Ubuntu I ticked the encrypt system and encrypt home folder boxes. But I have heard that it is foolish to encrypt the home folder when I already have encrypted my system. So ...
0
votes
1answer
37 views

Samba - Windows Network

I was recently checking my network and realized Samba was installed. When I go to "browse network" in the file explorer I see that there is "windows network" and my home folder is located inside. My ...
0
votes
0answers
91 views

how to install mod_security apache2.4

I was looking at my logs yesterday, when I saw a bot roaming folders I have in my robots.txt file. I tried to block it with a rule in my UFW firewall, but this did not keep them out. So then I was ...
0
votes
0answers
11 views

Restrict users ports

How could I go about restricting specific users access to ports based on a whitelist based system. I heard it can be done with SELinux (I do have it installed), but I haven't been able to work out ...
1
vote
1answer
9k views

ShellShock - bash already updated?

I'm trying to fix this new ShellShock bug on my PC (running Ubuntu 14.04). From what I've gathered, the simplest way to do this is to just update bash via the terminal (I've tested my system for the ...
0
votes
1answer
222 views

shellshock vulnerability and super user

can shellshock vulnerability execute somehow commands with superuser permissions? And if yes, from where/how? It is possible to be executed commands from cgi yes, but is it possible to get executed ...
1
vote
1answer
1k views

How do I know if my system is vulnerable to the ShockShell vulnerability? [duplicate]

The recently discovered ShockShell vulnerability affects many Linux and Mac systems, because they are using the vulnerable BASH shell. How do I know if I am vulnerable to this attack and how do I ...
2
votes
2answers
258 views

CVE-2014-6271 over ssh example attack?

I've been reading about the CVE-2014-6271 bug on lots of pages, but I'm still not able to understand how exactly is it possible to exploit it over ssh. From all I've read, I couldn't find an example ...
0
votes
0answers
254 views

How do I upgrade from 12.10 on a DigitalOcean droplet?

The recent ShellShock exploit has prompted me to upgrade my Ubuntu 12.10 server, as I cannot upgrade bash on it (I receive 404 errors on apt-get-update (somebody else with a similar issue)). I opened ...
1
vote
0answers
353 views

How to Patch for Shellshock [duplicate]

So, in light of this closed thread, and this article, how can we patch for the shellshock bug/exploit/vulnerability for currently supported Ubuntu versions? 13.10 and 14.04?
126
votes
5answers
91k views

What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?

Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
4
votes
2answers
3k views

CVE-2014-6271 bash patch trouble

I have a Ubuntu [EDIT] 12.04.4 LTS server that is vulnerable to the recent bash remote executable exploit. Ubuntu says they have released a patch here. I have run a sudo apt-get update && ...
0
votes
0answers
24 views

rootkit hunter found suspect files

I recently run rkhunter and found 9 suspect files detected, why curl ,dpkg show warnings as shown in the image below what should i do to remove those warnings?
3
votes
1answer
193 views

ClamAV found infected files on Ubuntu server, what do I do now?

I checked the Ubuntu server using the command clamscan -r. I don't know whether or not the files were cleaned or deleted. This is a screenshot of the results: I'd like to know if these files still ...
0
votes
0answers
121 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
2
votes
2answers
126 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
0
votes
1answer
100 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
0
votes
0answers
104 views

How to avoid chrome store password in seahorse?

I am very concerned about the unencrypted passwords saved by chrome in seahorse. This equipment is shared and used by several people, so any user with the root password can change my user password ...
0
votes
1answer
210 views

how to verify that sbin/init isn't infected?

for sometime chkrootkit has been showing sbin/init as being infected with SuckIt rootkit. early this year when the warning first appeared a quick google search indicated that it was most likely a ...
0
votes
1answer
22 views

How do I report an Ubuntu Software Center “Listing” problem?

How do you report a possible security risk to users in Ubuntu Software Center? There is two game apps in the Ubuntu Software Center called "Karts" and "Kart 1000..." Both: - Listed as free - But the ...
0
votes
0answers
28 views

Ubuntu 14.04 installation permission denied from HDD & external HDD

Title is self explanatory sadly; had no luck after getting past the security (for now) and the same from my Samsung external HDD Desperate trying to get this to work but no luck except on a virtual ...
1
vote
0answers
17 views

What kind of access flash has to our systems?

It seems like there is major security issue found in flash every other week or so. There was another one just yesterday. This and being closed source, I can't help but wonder, what kind of access it ...
1
vote
0answers
71 views

Allow one process access to /dev/uninput without completely compromising security

Steam In-Home-Streaming was turned back on the other day. This allows you to play games being rendered on one computer on another computer (commonly playing games on a TV/Media Centre that are being ...
0
votes
0answers
10 views

Questions about how malwares might operate under wine [duplicate]

a recent scan by clamav found that a few exe files in the WINE directory are infected with a trojan (called Ratnim?). A have a few specific questions on what a windows malware can do under linux. 1) ...
1
vote
0answers
82 views

Blocking HTTP requests without Host header using mod_security2

In my Apache configuration, I want to allow only Host header based vhosts. That is, I'd like to block any traffic by IP address only. I have mod_security2 installed, but I am only using the default ...
0
votes
2answers
154 views

What's the status of encfs?

Is the encfs project no longer maintained? It seems the last update 1.7.4 was released on November 18 2010. In a security audit several weaknesses have been identified, but no updates have since been ...
0
votes
1answer
70 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
0
votes
0answers
18 views

Ubuntu servers protection

Here is my needs : i need to protect data from being stolen on servers and Those servers are not physically secured. First i just wanted to base security solution on root password protection but ...
1
vote
1answer
315 views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
1
vote
2answers
216 views

How to access locked hard drive?

I have a hard drive with an old 12.04 server install and a data partition on it. I have the hard drive hooked up to my current desktop using a usb to sata adapter with external power supply. I am on ...
0
votes
1answer
24 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
82 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
0
votes
0answers
106 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
1
vote
2answers
37 views

Is this a security risk/concern?

According to: http://wiki.secondlife.com/wiki/Linux_Viewer#Installing_and_Running The Second Life Linux client entirely runs out of the directory you have unpacked it into - no installation step ...