Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.
1
vote
1answer
48 views
How do I know if an app is safe to use?
Is there any reliable way to know if something that you install is safe? There are virus scanners like clamtk, but those only seem to focus on Windows files. Should I be concerned about viruses / ...
0
votes
2answers
154 views
Should I be worried about a possible threat?
I recently installed Ubuntu 12.10. I use Clamav and have scanned my system regularly for infections. Today it picked up a potential threat
...
-1
votes
2answers
153 views
Ubuntu security [closed]
My question is: what does it make Ubuntu more secure and safe for Internet access?
Is web browsing security related to the browser or the OS?
I need to understand the internal mechanisms for OS ...
0
votes
2answers
212 views
IP cam viewer for Vonnics DVR Ubuntu
I am trying to view the output from my Vonnics DVR security system. It works from a Windows program that came with the system, I-phones and my Android based phone. The only Windows computer is my ...
4
votes
4answers
241 views
How to protect Ubuntu12.10 from Viruses, Spywares, Spamware and Intruders?
I have been using Windows OS for a long time and there i needed to install a separate Anti virus Program (included with firewall, anti spam) etc..
With my mentor's recommendation, I have replaced ...
2
votes
1answer
36 views
How can I monitor/control applications making network connections?
I found out about nethogs and iftop the other day, and ran them. I was surprised to see some applications running daemons I didn't know about. It's fine now that I know about them, but I'd like to be ...
2
votes
1answer
43 views
What features should I check on my VPS in order to have a secure box?
I have a VPS with Ubuntu 12.10 server edition, an I connect to it from public/university. I host some web applications on it. I have always been concerned with security issues. What features is needed ...
3
votes
1answer
172 views
I (stupidly) left my laptop logged in, can I find out what was done while I wasn't there?
I am acutely aware I may be overly paranoid here.
I left my laptop unattended by myself (I trusted a friend who was beside it). He assures me it was not touched. When I returned I was still logged ...
42
votes
8answers
2k views
What are the risks of NOT using a firewall (home computer)?
Since a password is required to be a superuser (to install and modify programs), what are the risks to not use a firewall under Ubuntu ? More particularly if I am using a NAT router ?
1
vote
1answer
144 views
Which kernel does 12.10 require?
Earlier this week Software Updater installed linux-image 3.5.0.26 which caused my 2 systems to become extremely unstable. I have locked in Grub the version I'm using to 3.5.0.24.
Today Software ...
2
votes
1answer
47 views
Is there a patch for vulnerability in recent Linux kernels that offers root rights
An error in the handling of special netlink messages in the Linux
kernel can allow a user to surreptitiously gain root privileges.
To read the rest of the article, please click the following ...
0
votes
1answer
46 views
Best Practices for Monitoring Log Files
What are the best practices for monitoring log files on a single Ubuntu Server (LAMP)?
Are there any specific "go-to" files that should be watched?
I use fail2ban to monitor failed logins, but am ...
0
votes
1answer
63 views
Restrict SSH Access to Specific IP for User
My /etc/ssh/sshd_config file has a line like:
AllowUsers jim@11.22.33.456
If I want to allow jim to use another IP addresses, how do I specify it? Does it take the form of a comma separated list? ...
3
votes
1answer
55 views
How do I ensure that security updates are installed on Juju machines?
It seems that security updates and other package updates are not automatically installed in Juju nodes. I assume that they are installed at installation of new Juju machines, or that the installation ...
0
votes
0answers
58 views
What IPSec Client to use to connect to a Zywall USG 20?
I want to configure my Ubuntu Laptop as a "Roadwarrior".
On the Zywall USG 20 i configured IPSec.
What IPSec Client is the best for Ubuntu 12.04?
2
votes
1answer
112 views
Enabling TCP MD5 signatures in 12.04?
After running a NeXpose scan of one of my servers, I'm getting notice that TCP MD5 signatures may not be enabled. I've looked all over the net and from what I can see this feature should be enabled ...
1
vote
1answer
57 views
Can I change user in the Unity interface without having to type password when changing back?
First of all, let me emphasize that I am talking about my home computer that I use for personal use.
I have two accounts in Ubuntu: one for me, one for my wife. We don't use separate accounts to ...
4
votes
3answers
127 views
Will this sudo rule allow a user to update the system and nothing more?
I want to design a sudo rule that will allow the user ricardo to update the system using aptitude, but prevent him from using sudo to run any other command (he's a problem user). Are there any ...
1
vote
1answer
161 views
eth0: PACKET SNIFFER(/sbin/dhclient
Im new to Ubuntu and would like help please, I ran ProShield and got this error -
eth0: PACKET SNIFFER(/sbin/dhclient
I ran the following programs below and nothing came up as far as I can see. ...
1
vote
1answer
120 views
Can Mal/JavaJar-B infect an Ubuntu/Linux OS?
I've just read about the Mal/JavaJar-B malware that is apparently capable of attacking OS X computers via a security hole in Java. I've also heard a few people mention that it can also affect Linux ...
3
votes
1answer
50 views
Preventing a specific application from accessing a folder
I just installed an application that has the bad habit of automatically scanning all my folders for files to edit.
The app has no available options to disable this behavior. I cannot just remove ...
3
votes
1answer
88 views
Do these log entries recorded an intrusion to the server?
Here are log entries I found in auth.log. What does + ??? mean? And was there an unauthorized access?
Feb 11 07:48:32 tts-server su[31265]: Successful su for www-data by root
Feb 11 07:48:32 ...
2
votes
0answers
68 views
How can I check the checksum of an installed deb package against the same package in the repository?
Suppose someone got root access to my machine and replaced some files, e.g.
Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable
Warning: ...
1
vote
0answers
43 views
Ubuntu Update Manager [closed]
I'm using Ubuntu 12.04 LTS and recently got an error with my update manager: When I tried to install some updates, it all of a sudden showed an error message. The message said that an probably a ...
0
votes
0answers
75 views
Setting up user/group access to a usb drive
I'm trying to set up an Ubuntu 12.10 file server and don't know how to create the shares and permissions "properly" to make the system as secure as possible.
I'm looking for practical instructions, ...
2
votes
0answers
36 views
How to inject or know if my wireless card is injectable
what ways or methods exist to know if a wireless card is injectable or can be injected (Packet injection). Answers should not include recommending me to use another OS that is not the official Ubuntu ...
38
votes
1answer
1k views
Can I make the webcam take a picture when an incorrect password is entered?
I am using a laptop . I was thinking to have a support in my Ubuntu machine. When an incorrect password is entered, a picture is taken later revealing who has been trying to gain access.
I have ...
1
vote
1answer
31 views
Security bug when switching user account
I face the following security issue on Ubuntu 12.04, Classic desktop.
There we have 6 user accounts on the machine.
One user logs on. Ok. Then a second user is using the User switcher logs in as well. ...
4
votes
1answer
51 views
Is the Ubuntu “Restore Test” program legitimate?
I have an encrypted home directory, and today when I came to my computer, there was a prompt I had never seen before labeled "Restore Test", which asked me to input my home directory decryption key.
...
6
votes
1answer
173 views
Web pages in Firefox scroll automatically. Is someone intruding on my computer?
I think there has been 3 times an intrusion in my computer.
Last week, I was listening music on my computer (ubuntu 12.04.1 LTS on a MacBook Air 4,2), my hands were far from keyboard and trackpad (on ...
1
vote
0answers
57 views
How do I edit the commands that start a service in Ubuntu 12?
So I am trying out GBrowse, as we will use this later on.
But then, I'm getting this
------------------------------------------------------------------------------------------------
256000 features ...
3
votes
1answer
88 views
Using NX Server Securely?
Recently, I built a computer running Ubuntu and gave it away to a relative. I'm willing to give them IT support for free, but they live 50 miles away. The Solution? A NX Server. I setup the Node, ...
1
vote
0answers
261 views
no “single crack” mode rules found in john.ini
I am a linux noob trying to use john the ripper for a security class. I have John installed to usr/share/john and i have (I think) successfully used the unshadow command to unshadow the pw file and ...
0
votes
1answer
37 views
Tripwire local passphrase doenst work, how do I reset it?
my tripwire local passphrase does not work any more (no idea why) and I want to reset it. How can I do this? I still have the system passphrase (hopefully)
Open Source Tripwire(R) 2.4.2.2.2 built for ...
4
votes
1answer
675 views
How do I scan for viruses with ClamAV?
I installed ClamAV via Terminal (Ctrl+Alt+T) with:
sudo apt-get install clamav
but how can I scan for viruses?
5
votes
2answers
72 views
I installed an app from an untrusted source? What to do now?
As an Ubuntu/Linux newbie, I am not exactly accustomed with security.
I tried to install Gimpshop from this URL: http://www.ubuntugeek.com/images/gimpshop_2.2.11-1_i386.deb
It was processed by ...
11
votes
3answers
159 views
Should I include logs that contain “sensitive information”?
Sometimes, when info is being collected by ubuntu-bug (either automatically following a program crash or by manually calling it) the following dialog pops up:
Should I include these files or not? ...
3
votes
1answer
138 views
Rootkits: Should I be concerned?
I was reading some texts about rootkits and the tools used to remove them.
I have Ubuntu 12.04.1 and rkhunter reported various warnings. I'm wondering what those are.
BTW I install only original ...
1
vote
3answers
1k views
Why does `sudo passwd root` reset my root password? Is this a security risk?
Both in my ubuntu desktop host and virtual machine. I have't login as root for about a month, during which I upgraded the kernel. I found my root password doesn't work anymore. However, by using sudo ...
2
votes
0answers
40 views
Why do I see a screen showing all text I typed during the session on logging out?
When I log off of Ubuntu 12.10, a screen appears shortly with all the text I typed during the session, including passwords and such.
Is this supposed to happen?
[update]
The screen is fullscreen ...
0
votes
1answer
586 views
Unlocking the disk (sda5_crypt) Enter Passphrase
I had installed ubuntu 12.10 with security key for enscrypting system hard disk which requires you to enter the passphrase before the login screen every time you boot your system... i wanted to get ...
1
vote
1answer
91 views
Cronjob for security updates?
I'm having trouble creating a cronjob for automatic security updates on my ubuntu server 12.04.
I separated the security sources into a different file, and then did this from within a cronjob:
...
0
votes
0answers
96 views
How do I install security updates in Ubuntu [duplicate]
I get the following message during a login. How do I install security updates in Ubuntu.
Why am I getting the reboot error.
132 packages can be updated.
68 updates are security updates.
Get cloud ...
3
votes
1answer
131 views
Was my computer hacked by Minecraft/Craftbukkit Initscript?
I was playing around in Terminal, I 'mis-clicked' (havent yet configured trackpad, very jumpy cursor) while trying to run nano.
What happened next kind of threw me for a loop. Here is what printed ...
2
votes
1answer
110 views
How can I install the Network Security Toolkit (NST) in Ubuntu?
How can I install NST in Ubuntu? I have searched but found nothing.
4
votes
2answers
109 views
How do I check whether a PPA package has been tampered with?
I want to use a recent package from a PPA. How do I make sure that the PPA maintainer hasn't added any malicious code in the version provided there?
0
votes
2answers
64 views
Is there any security alarm?
I have friend that leaves an awful amount of time his laptop unattended. Its is not me, it would be stupid tip for thieves to ask this publicly if it was me :p.
I was thinking of an alarm that could ...
6
votes
4answers
391 views
How do I audit an executable to make sure it is not malicious?
I was wondering if there is a tool or a technique to run an executable in an isolated environment, maybe in a virtual machine. While the program is running, I want to be able to audit the ...
0
votes
3answers
77 views
Getting a LAMP server secured and locked down for development
I'm turning my VPS into a development server which will hold development copies of all my websites, controlled by git. Of course, I installed the LAMP server so I can test them.
I've already ...
0
votes
0answers
14 views
Need help regarding sniffdet0.9
I need help configuring and installing sniffdet tool. Currently I'm using sniffdet0.9 for my environment. My base environment is using libnet version 1.0.2a and ubuntu o/s as kernel 3.2.6 x86_64
I'm ...
