Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
2answers
309 views

Ubuntu/Kubuntu LTS: longer support for server packages

I read that Ubuntu 10.04 LTS Desktop is supported till April 2013, but Server is supported till April 2015. If I install Ubuntu LTS Desktop, will the server packages of the system still be updated ...
10
votes
3answers
18k views

Security camera system server

I'd like to setup a Security Camera system which is captures and stores video streams into Ubuntu Server From 2 wireless Cameras. Which type of motion-detecting wireless camera you suggested? Are ...
11
votes
2answers
14k views

“allrequestsallowed.com”… Hack attempt?

I have many attempts on my (small, personal and absolutely unimportant) web server, and apache and fail2ban usually do their job right. But there's a log entry that worries me: xx.yy.www.zzz - - ...
2
votes
2answers
287 views

Which security features are disabled when I start wireshark?

I want to know which security features are disabled(if any) when i start wireshark in Ubuntu 10.10.
11
votes
2answers
4k views

What is the least insecure way to store a password that is used by a script?

I have a Bash script that automatically authenticates with a service using my username and password. The credentials are currently stored as plain text within the script. What precautions should I ...
8
votes
1answer
2k views

Why should I use gksudo for Gtk apps instead of sudo? [duplicate]

I read somewhere that people should use gksudo for applications that use the Gtk GUI instead of sudo? What's the reasoning for this?
6
votes
2answers
3k views

How do I configure my caching nameserver to validate DNSSEC?

Since the root of the DNS tree has been signed, how do I change my caching DNS server to start validating DNSSEC signatures?
5
votes
4answers
374 views

GPG Workflow in 11.04

At work we handle the transfer of small bits of sensitive data with GPG, usually posted on a secure internal website. Until Firefox 4 was released, we used FireGPG for inline decryption; however the ...
6
votes
4answers
2k views

Why do I get redirected to a weird Chinese site for non-existent websites?

If I go to a web address that doesn't exist such as http://testestewcsdijncijfkdmkdfkddmkmdmdsexsecsecfvrgtoejwfej.com/ I get landed on a strange Chinese page like this: This happens for all web ...
3
votes
1answer
153 views

On-line security tools?

Are there tools built into "Ubuntu" (or possibly within the repositories) to help me secure my on-line information.
19
votes
3answers
4k views

Risks/Disadvantages associated with Wine

Can wine as a whole or the windows applications installed via wine pose some kind of risk to an Ubuntu installation? This question arose in my mind when I read this answer to my earlier question ...
8
votes
2answers
3k views

How to make Firefox use the Gnome Keyring vault for password storage and retrieval?

With Chrome it is quite simple to use Gnome Keyring for password storage. But with Firefox 4 on ubuntu 11.04, I don't know how to achieve this. I remember that firefox 4 supposedly has OS integration ...
6
votes
1answer
7k views

How to either configure, or completely remove policykit? [closed]

Where can someone get policykit related tools? gnome-policykit-authorizations polkit-config-file-validate polkit-policy-file-validate And if getting them is not an option: Where can I get a full ...
11
votes
6answers
4k views

Why can't non-admin users install software?

This is probably something I don't understand since I am used to Windows and am only starting out with Ubuntu. I know that software in linux comes in packages what I don't understand is why can't ...
-1
votes
1answer
1k views

Why aren't there viruses in all Linux based systems? [duplicate]

Possible Duplicate: Do I need to have antivirus software installed on Ubuntu? I only need an article which explain why We don't have viruses in all Linux based systems? and also explain if ...
51
votes
2answers
64k views

How to create a restricted SSH user for port forwarding?

ændrük suggested a reverse connection for getting an easy SSH connection with someone else (for remote help). For that to work, an additional user is needed to accept the connection. This user needs ...
19
votes
2answers
2k views

Why should I trust the “System program problem detected” dialog?

This always shows up a few minutes after I log in: I have no idea what it is. If I click Report problem, it asks for my password: This is exactly what I would do if I wanted to steal someone's ...
7
votes
1answer
756 views

Is it safe to run a GUI program as another user?

I need to run a program (libreoffice) as another user. I noticed that the program started in the background when invoked as kdesudo -u otheruser libreoffice, possibly to avoid social engineering ...
4
votes
3answers
810 views

Where can I find the SHA256 hashes of Ubuntu images?

I'm trying to securely validate the hash of a downloaded ubuntu-11.04-alternate-amd64.iso but it seems I just can't find any. I found this site: https://help.ubuntu.com/community/UbuntuHashes but ...
0
votes
1answer
3k views

Alternatives to TrueCrypt [duplicate]

Possible Duplicate: Is there a tool to encrypt a file or directory? Hello. Are there any alternatives to TrueCrypt that work out of the box and don't require any installation? I am looking ...
3
votes
2answers
1k views

What is this executable /usr/bin/bsd-mailx?

I'm getting a warning from this executable along with /usr/bin/mail. Apparently, the latter is a symbolic link to /etc/alternatives/mail which in turn is a symbolic link to the former. Is it part of ...
2
votes
4answers
10k views

How can I know the usernames connected to my system?

Is there a way to know how to catch the username of the users connected to my system? So, I've a WiFi router with a wep key setted, me and friend are making some test. Considered that my friend has ...
1
vote
1answer
258 views

Certificate logins to servers

I have some ubuntu cloud servers running and has the iptable rules applied on them to allow only few ip addresses to connect via ssh. I know how to generate SSH-key for connecting to server ...
5
votes
2answers
892 views

Is there a fingerprint reader tool available for Ubuntu?

I've got a fingerprint reader (Authentek AES2810) built in to my laptop (Dell Latitude E5500) and would like to take a picture of my fingerprint (not just to use it to log-in or something alike, but ...
2
votes
3answers
3k views

Can udev be used (udev rules) to whitelist certain usb devices?

Can udev be used (udev rules) to whitelist certain usb devices? What I mean is that only devices in a list I create (containing device IDs that I can obtain with lsusb) will be passed on / processed ...
3
votes
1answer
2k views

Remove password request after screensaver

How do i change my security settings? I want to remove, only the password request that shows after the screen saver turns on. I'm new with Ubuntu and have not yet figured out were to find the ...
3
votes
3answers
8k views

Choose password for new keyring

I'm using Ubuntu 11.04, after login it displays this message: Choose password for new keyring An application wants to create a new keyring called 'Default'. Choose password you want to ...
5
votes
2answers
2k views

How to truly secure a hard-drive?

When I boot from an USB stick into my laptop I am able to mount and connect through chroot to the my hard drive and browse my files without a problem, while this has been something very very useful in ...
11
votes
3answers
4k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
40
votes
7answers
12k views

What is the Ubuntu “built in virus protection”?

At ubuntu.com there is this "only in ubuntu" that says "Built in virus protection": What is the Ubuntu built it protection? What is the program in charge of this and how does it work?
3
votes
1answer
504 views

What is the best practice for security updates?

For all of my official ubuntu updates (main universe multiverse restricted) I use an Israeli mirror of the ubuntu repositories, with one exception: for the security updates I use ...
1
vote
2answers
265 views

Prevent accidental low-level access (formatting) of system disk by root?

Is it possible to prevent accidental mounting and/or reformatting of a disk or partition by the root user during normal operation of a system? For example, this happened to me a while ago: Under ...
2
votes
0answers
7k views

Automatic unlocking of keyring? [duplicate]

Possible Duplicate: How can I stop being prompted to unlock the 'default' keyring on boot? I like the idea of gnome-keyring, but having it ask for the unlock password after every ...
0
votes
2answers
658 views

Can I install LAMP and some IDE on my USB device?

Actually I am using a shared pc, and I want to know, if there is a way That I can install applications on my PEN DRIVE or EXTERNAL HARD. Like LMAP, Netbeans and some other for the web development. Or ...
30
votes
3answers
48k views

How do I setup OpenVPN so I can securely use the internet from an unsecured hotspot?

Goal: I want to be able to securely use the internet via my home PC while my notebook is connected to an open hotspot/access point. I do know that I can use a SSH tunnel/SOCKS proxy, but I don't want ...
199
votes
8answers
93k views

Are PPA's safe to add to my system and what are some “red flags” to watch out for?

I see a lot of interesting programs out there that can only be obtained by adding a "PPA" to the system but, if I'm understanding correctly, we should stay within the official "repositories" for ...
6
votes
4answers
938 views

Threats while using ubuntu?

Is there any precaution you need to take while using ubuntu? Because i dont use any antivirus available for ubuntu! So any security changes do i need to make while surfing on the net?
29
votes
8answers
6k views

What do I have to do before giving away my Ubuntu machine?

I have an old laptop that is running Ubuntu. Now I want to give away this laptop, but I want to remove all private data. So what should I remove? I don't want to format the whole system, because the ...
9
votes
3answers
19k views

How to disable cryptswap?

How can I disable cryptswap? I would like an unencrypted swap like before. This is on an ubuntu 9.10 system.
2
votes
1answer
3k views

Creating TUN device for IPSEC

Is it possible to create a separate device (like tun made by openvpn) for ipsec? If yes how can I do it?
4
votes
1answer
3k views

Where do I get the AppArmor 2.4 compatibility patch?

I just compiled the 2.6.39-rc1 kernel and AppArmor complains about a missing /sys interface (plus, it slows down the boot). Where do I get the AppArmor 2.4 compatibility patch AppArmor asks for?
1
vote
2answers
1k views

How to prevent seahorse from asking for a passphrase?

I've created one password-protected RSA key to access my remote server via ssh using key-based authentication and added it to seahorse using ssh-add. I would like to prevent seahorse from asking me ...
10
votes
3answers
5k views

Does Ubuntu use security features like DEP and ALSR?

I often read that features such as DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization) are provided on Windows. On Windows, you are given some control over turning on DEP for ...
16
votes
6answers
29k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
0
votes
1answer
371 views

NETGEAR *Security Alert* [58:84:C7] almost on daily basis, should I do anything?

My Netgear wireless modem and router DG834PN has firewall installed and just recently I have been receiving almost daily 'security Alerts' stating; TCP Packet - Source:58.218.199.147 ...
9
votes
2answers
2k views

How to secure grub recovery mode

When I boot system in to recovery mode from GRUB menu, I can get in to all powerful root without entering any password, thus insecure. How I can secure this and ensure that a password is asked every ...
1
vote
1answer
869 views

Permission problems with Clamfs

been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these. But I am having permission troubles with a ...
3
votes
1answer
1k views

Is full partition encryption the only sure way to make Ubuntu safe from external access?

(By "external access", I mean eg. via a Live CD, or another OS on the same dual-boot machine) A friend wants to try Ubuntu. He's fed up with Vista grinding to a crawl (the kids? :), so he likes the ...
1
vote
1answer
792 views

How can I boot from read-only filesystem while having writable partitions for logs?

I want to mount my root filesystem as read-only on boot, and use separate writable partition for logs. Is it necessary to create a ramfs image for such task? How can I do this?
2
votes
2answers
504 views

Warning about SSL ceritificate, am I under attack?

Lately I've been getting a lot of warnings about SSL certifications on my pc, Empathy keeps telling me that Facebook's certificate is self-signed and can't be trusted, and also, there are occasional ...