Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
53 views

File/folder protection that even government cannot break [closed]

If I have some intellectual property file that under no circumstances my competition can view, what is the best and most secure way to protect them? I know that there are many encryption apps for ...
3
votes
1answer
70 views

is the current Adobe Flash 'ransomware vulnerability' affecting Ubuntu users?

Currently there is an important release from Adobe telling users to update their Flash after learning of certain vulnerabilities where users computer are infected with ransomware. One of the many news ...
10
votes
1answer
299 views

How to prevent users from changing their password to one of the last X passwords?

I have an Ubuntu GNOME 15.10 with GNOME 3.18 system which I would like to set up so that the users using it cannot set a new password as one of the previous X passwords, how can this be achieved? ...
0
votes
0answers
23 views

Ubuntu Vulnerabilities Filtered By Severity

It there a page that provides a list of Ubuntu security vulnerabilities by priority? The CVE Tracker seems to be colour coded by priority but I'm looking for something that I can easily filter based ...
0
votes
1answer
31 views

Permission denied for ubuntu shell user to list home directories of users

When I use shell I can't list the directories of local home users created by useradd or through virtual min ls -ls /home/someuser/ permission denied but I can list directories created by root. ...
-2
votes
1answer
53 views

Fix duplicate error sudo apt-get update .Help me!

I trying update security ... sudo apt-get update And faiel... Reading package lists ... Done W: Duplicate sources.list http://archive.canonical.com/ubuntu/ precise entry / i386 partner Packages ...
6
votes
2answers
155 views

Can someone determine my previous sudo password was if they have access to my machine and my new one?

I have found a bug and the developers to whom I reported this bug to want me to send them the VM with the bug. They want me to send them the password and the VM in its current state (a snapshot). I ...
0
votes
0answers
37 views

Is it possible to make HASP4 key working in 14.04 x64?

I'm trying to install HASP4 service on Ubuntu 14.04 and for now I don't know why key is not accessible over network. What I have: root@zentyal:/etc/init.d# /etc/init.d/haspd restart Stopping ...
3
votes
2answers
458 views

Postfix Mail Server. Someone is sending Mails from my server

I am receiving Mails from my own mail server, from a user that belongs to my domain, but is not listed in my mail user db. Here are the logs: 4679 Mar 28 15:54:13 Bumblebee postfix/smtpd[29350]: ...
1
vote
1answer
20 views

How to check logs for all connections Linux made to servers and/or downloads

I downloaded Sophos a few days eariler, but now I'm worried I might've got it from a bad source. Is there a way to check to see where I've got it from without using the download list of Chromium (It ...
0
votes
1answer
22 views

Switching back to an older version having high period of security and maintenance [duplicate]

I am presently using ubuntu 15.10. Just want to know if I can switch back to an older version which has more security and maintenance as 15.10 has only a 9 month one.
3
votes
1answer
79 views

Do malicious web sites ever exploit vulnerabilities in Linux clients? [closed]

Do malicious web sites ever exploit vulnerabilities in Linux clients? Are there any documented instances of this happening in the wild? I am talking about actually taking over the client's machine ...
24
votes
3answers
1k views

How do I run a sudo command needing password input in the background?

I have recently disabled sudo's authentication caching ability so that it now prompts me for a password every time. And though this is good for security, it has caused one slight problem which I ...
0
votes
0answers
19 views

want to change password on ubuntu entirely in a single line with no prompt

echo somepassword | passwd --stdin someaccount does not work. Why not? I don't care that it appears in the process table for an instant or is recorded by process accounting.
1
vote
0answers
58 views

Can an Ubuntu system get infected by a Macro Virus for MS Office / LibreOffice / OpenOffice?

We are running Ubuntu on several office machines, which are used to handle administrative tasks on a daily basis, e.g. to receive applications via e-mail. We now had the situation that we received ...
0
votes
0answers
75 views

How to Set-Up WOL with Security in Ubuntu 14.04?

I am setting up a Ubuntu PC which I only need to do Matlab computation efficiently through VPN connection. My network card should be ok (Intel 9301CT where processor Intel 82574L) which Ubuntu ...
0
votes
2answers
227 views

linux-image-generic vs linux-image-x.x.x-xx-generic security updates

I have an Ubuntu 12.04 32 bit server running with unattended-upgrades set up to only install security upgrades. I have the linux-image-generic and linux-headers-generic packages installed and am ...
1
vote
1answer
50 views

Preventing from DDOS attack

I think I am under a DDOS attack, I found these lines on my access.log: 41.214.156.122 - - [21/Mar/2016:06:01:40 +0300] "POST / HTTP/1.1" 200 41765 "-" "Dalvik/2.1.0 (Linux; U; Android 5.1.1; ...
2
votes
1answer
27 views

Trying to grasp the linux file permission concept

I know how to change file permissions, ownership etc. But sometimes I feel I don't know what would be the best approach security wise. I just change permissions or ownership to make things work, but I ...
5
votes
2answers
1k views

How to securely ssh into a machine at home over the internet

I will be travelling shortly, and I have a machine that run runs a bunch of cron jobs etc. I need to log in remotely to check the results of the jobs run and to do some work on the machine. Here are ...
4
votes
0answers
74 views

How is the guest account prevented from using su and sudo?

It's already known that the guest account can't use su or sudo: Why is su disabled from guest sessions? Sudo not available in guest login How is this done? My guess would be apparmor. However, ...
3
votes
3answers
82 views

How to prevent scripts/commands hijacking your session's cached sudo ability?

If I run a sudo command it will ask me for a password, however in that Terminal session for the next few minutes it will allow me to run sudo commands without asking me for a password as it will cache ...
1
vote
1answer
31 views

OS on external hard drive

If I put a OS like Ubuntu onto a external hard drive, would it allow viruses to infect my internal hard drive? If more info is needed, then feel free to ask.
-1
votes
3answers
937 views

What is the best antivirus for Kubuntu/Ubuntu as of 2015? [closed]

OK, I do have to admit I am somewhat new to Linux,(I'm used to Windows), and that's why I'm asking all of these questions about Kubuntu. As of 2015, what is the best, FREE anti-virus for Linux, ...
0
votes
0answers
47 views

Ubuntu chrome, and firefox with untrusted certification authorities

I have this as some of my server certificates, also some authorities. At least three users I know have this. Is this a bug? What should I do? dpkg -l ca-certificates ...
1
vote
0answers
12 views

Is ClipIt safe? How would I test this? [duplicate]

I have seen that Clipit has an "Offline mode", which is described in this question. However, it shocked me as I thought that perhaps it was storing my data online, which would be a security concern. ...
-1
votes
1answer
46 views

using VNC with SSH securely

While I know there is a plethora of available information on how to set up VNC for remote desktop viewing, some of which outlines the importance of using SSH to ensure security, I want to know dome ...
1
vote
1answer
65 views

How does ubuntu ensure software security bfrom external developers [duplicate]

I was reading on the hack against the Transmission Bittorrent Client. http://arstechnica.com/security/2016/03/first-mac-targeting-ransomware-hits-transmission-users-researchers-say/ It got me ...
0
votes
0answers
21 views

Make last command shows also sftp sessions

last command searches back through the file /var/log/wtmp (or the file designated by the -f flag) and displays a list of all users logged in (and out) since that file was created. On my Ubuntu ...
1
vote
2answers
119 views

LXD,LXC containers security

I just want to know dose the Linux containers (LXD) provide security? Such that if on container get infected with a virus will that effect the entire system (kernel+other containers) Or it will ...
1
vote
0answers
41 views

Is “oneconf-service” meant to be running?

I left my computer for a little while, and when I came back it told me that there was an internal error with oneconf-service, and though it (the process) is gone now, in the processes list in the ...
1
vote
0answers
66 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
9
votes
1answer
2k views

Are all versions of Ubuntu secure against DROWN attack?

OpenSSL updates release versions 1.0.2g and 1.0.1s to fix the DROWN vulnerability (CVE-2016-0800). In Ubuntu 14.04 LTS Trusty Tahr, the latest OpenSSL version is 1.0.1f-1ubuntu2.18. Do I understand it ...
0
votes
2answers
44 views

Why is server restart required? [duplicate]

When logging into my Ubuntu instance I get the message *** System restart required ***. I am running a server and uptime is very important for me. How can I know why the restart is required? I have ...
0
votes
1answer
39 views

syslog-ng viewer that can display many log files of different IDS

I have three Intrusion detection systems installed (snort, modsecurity,ossec) and I want to visualize the generated log files of these IDS. Is there a Graphical User Interface that can display the ...
6
votes
2answers
335 views

does rolling back the kernel in Ubuntu compromise security

I recently updated my kernel, and noticed that it was affecting my graphics drivers. As a quick fix I rolled back the driver , but would like to know if this affects my system security in any way? ...
2
votes
4answers
153 views

Is there any way to verify a Ubuntu iso or hashsum?

Neither the iso nor the hashsum is available via https. Is there any way to verify you're not getting man-in-the-middled?
0
votes
0answers
22 views

Which are the security problems on running an http server using Python's built in module?

I've just read this post but I haven't got the necessary points to comment on it. I'm running, $ python -m http.server I wonder which are the security implications about it, with some examples. ...
0
votes
1answer
170 views

telegram with secret chats

What is the best way to run telegram on linux with support for secret chats? This is what I tried already: run telegram desktop - works very well but no secret chats feature pack android telegram ...
0
votes
0answers
66 views

How to hide “Show password” in Network Manager?

I have a problem with the "show Password" checkbox. I'm trying to help a social school. The thing is that the "Wi-Fi Network Authentication Required" popup shows up some times. what is not a ...
0
votes
4answers
127 views

looking for the valid md5 checksum for “ubuntu-14.04.4-desktop-i386.iso” file

After the LinuxMint incident, I am giving Ubuntu a try. I was one of the "winners" who downloaded on the day of the hack attack. So I just wanted to be extra sure that the md5 was okay, but I can't ...
0
votes
1answer
28 views

how to install update by CVE number

In Redhat and Suse i can run below command in order to install a specific CVE. for example: yum update --cve CVE-2015-7547 zypper patch --cve=CVE-2015-7547 in this also possible in Ubuntu? How ...
0
votes
3answers
69 views

Is sudo's bruteforce protection really helpful?

In this question: Why is there a delay when entering a wrong password? it appears that there is a 1-2 seconds timeout in sudo once it is given a wrong password in order to make cracking attempts more ...
0
votes
0answers
52 views

How to check if Ubuntu Touch device is really new?

I just got a new BQ Aquarius E4.5 Ubuntu Edition from the shop. However: Battery was totally discharged (0%) I was not asked to perform initial configuration After I installed terminal, output of ...
0
votes
0answers
18 views

Is it possible to run services with limited privileges?

I have a home server with some web and database services running (nodejs, postgres, neo4j). Later I intend to add a vpn server, so I will be able to access the services from the office. As far as I ...
0
votes
0answers
14 views

Vulnerability check for glibc Security Issue: glibc getaddrinfo stack-based buffer overflow [duplicate]

A security problem with getaddrinfo in GNU’s glibc was reported by Google Engineers How can I check if my systems are affected? (using ubuntu 14.04 LTS) How to fix this issue?
0
votes
1answer
45 views

A buffer-overflow vulnerability in the GNU C Library

I came across this article by PC world informing about some serious vulnerability discovered by Google and Redhat a couple of days before, i am using Ubuntu latest version, and it's up-to-date, do i ...
0
votes
0answers
22 views

Fake SSID's showing up in nm-applet

I've started noticing fake SSID entries showing up in the network manager applet under Ubuntu. These apparent base stations don't really exist (othe devices can't see them when they scan for WiFi ...
4
votes
3answers
4k views

Which Ubuntu releases have fixes for CVE-2015-7547 (“Extremely Severe Bug” with libc getaddrinfo())? [duplicate]

Ars Technica posted an article describing the getaddrinfo() bug and how it is widespread in the Linux world. The vulnerability was introduced in 2008 in GNU C Library, a collection of open ...
0
votes
2answers
38 views

How to encrypt hard disk? [closed]

Can I encrypt hard disks? If yes, then how? Can it be used for any individual drive or I will have to encrypt all at once?