Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
3answers
2k views

OpenVPN vs. IPSec - which one is faster for tunneling?

Complexity of installation of IPSec is not an issue. I would like to know which one will provide a faster connection for tunneling.
2
votes
3answers
1k views

Do any NetworkManager VPN plugins support IPv6?

Do any of the NetworkManager VPN plugins support IPv6? The two I've tried so far (PPTP and StrongSwan) only show an "IPv4" tab. I would have thought at least the IPsec one would support IPv6?
5
votes
4answers
1k views

Alternative to NetScanner

Is there a software alternative to NetScanner (which runs on the Windows platform)?
1
vote
1answer
2k views

Why is this rkhunter script sending empty emails?

I have started running rkhunter (a security monitoring tool) and I have finally managed to clear all of its warnings. Now, a cron job runs every day to monitor my machine. Rather than send me an ...
1
vote
1answer
89 views

Is it reasonable to use a GPG certificate for more than one email-account?

Are there any known issues or is this way just a time-saver for lazy people.
22
votes
2answers
2k views

How is the system kept secure?

I understand that if any malware made it's way into a Linux system, it will, at most, gain a user-level privilege and ruin anything within the particular user's reach, i.e. the user's own files. But ...
2
votes
1answer
187 views

Does Ubuntu support the OpenBSD Crypto Framework?

I can't seem to find an answer to this question. There is the Linux Crypto API, and the OpenBSD Crypto Framework (OCF). I can't find anyting on Google as to whether Ubuntu supports OCF or if the ...
6
votes
3answers
9k views

Why UFW has to be (re)started at boot time if it's only iptables rule manager?

README from source package says: When installing ufw from source, you will also need to integrate it into your boot process for the firewall to start when you restart your system. Depending on your ...
1
vote
2answers
423 views

Inetd limit access to one user

I am using telnet because of a barcode reader. It is pretty old before 2000 i think and it seems that it supports only telnet via wifi connection. However how can i restrict telnet access to only ...
4
votes
1answer
114 views

Security in Hybrid cloud

How do we ensure security while setting up a hybrid cloud? For example, if I want to use EC2 or Rackspace, how can I make sure that the connectivity between the private and the public cloud is ...
10
votes
2answers
2k views

What is a security update?

Why are some updates called Important security updates? How are they different from other updates? Is my system insecure, If I don't install them? How can there be very frequent security updates? ...
1
vote
1answer
10k views

Importing PKCS#12 (.p12) files into Firefox From the Command Line

I've posted this question up on #Ubuntu and #Firefox Forums, and really could do with some help.. Anyone know where i could look or help with the answer. I'm hoping the power of social media will come ...
2
votes
1answer
833 views

Security of keyctl

Today I set up an ecryptfs directory, which is automatically mounted at login via pam. To do so i followed the guide in the ecryptfs readme ecryptfs-readme To sum up, I now have a key stored in the ...
12
votes
8answers
3k views

Is a Firewall really necessary these days? [closed]

should I install something like gufw?
13
votes
4answers
2k views

What is default password?

What is the difference between default and login? And what does Default Keyring mean? When I run some applications(Emphaty etc), Unlock Keyring window launched first, then it requires me password. ...
1
vote
1answer
707 views

Setting up fastcgi on an Ubuntu server (socket file permissions issue)

I am trying to set up mod_fcgid on my server. Part of the requirement is that Apache needs to create a socket file for mod_fcgid. I specified the folder for Apache to write the socket data to: ...
0
votes
1answer
952 views

Encrypted replication between normal CouchDB and Ubuntu One?

this is a very special question. Currently I'm starting to develop a new online shop using Python (Flask). I want to use CouchDB to store (and sync) new orders. But CouchDB does not encrypt the ...
22
votes
1answer
1k views

Is Ubuntu vulnerable to recent exploits using USB sticks and automount?

I read recently that someone demonstrated a security attack on a PC via the use of automount and a USB stick. How vulnerable am I to this attack and what steps are developers doing to be proactive ...
3
votes
1answer
3k views

How to prevent Synaptic Package Manager from asking for password?

This is similar to How to prevent system applications (like the Software Center) from asking for password? However that solution does not work for Synaptic Package Manager in 10.04.
13
votes
2answers
13k views

What does “pts/” in the output of w mean?

When I run w - to see who is logged on and what they are doing, i see this: USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user tty7 :0 08:14 10:32m ...
0
votes
1answer
408 views

Is UbuntuOne encrypted? [duplicate]

Possible Duplicate: Ubuntu One Encryption? A simple question: is the connection between client and server encrypted and are the stored data on the server encrypted?
20
votes
2answers
25k views

chkrootkit says /sbin/init is infected, what does that mean?

I recently ran chkrootkit and got the following line: Searching for Suckit rootkit... Warning: /sbin/init INFECTED What does this mean exactly? I heard this was a false positive, ...
36
votes
17answers
35k views

Can you recommend a password generator?

I was hoping someone could recommend a good password generator. Extra props to the person who can name one that gives you a mnemonic to remember it as well.
2
votes
2answers
1k views

Making files generally available on Linux system (when security is relatively unimportant)?

I am using Ubuntu 9.10 on a stationary PC. I have a secondary 1 TB harddrive with a single big logical partition (currently formatted as ext4). It is mounted as /usr3 with options user, exec in ...
8
votes
3answers
2k views

Is it possible to do a remote wipe of a system?

My office had a break-in over the weekend, and several laptops were stolen. Mine wasn't one of them, but I'm curious - the owners of the stolen computers (Windows and Mac) are all talking about remote ...
6
votes
1answer
739 views

Is troubleshooting AppArmor with 'teardown' unsafe?

I understand there is a safer, more targeted way to troubleshoot AppArmor's possible contribution to an issue than completely stopping the service and tearing down AppArmor profiles. Can someone give ...
60
votes
2answers
9k views

How to protect Ubuntu from fork bomb

I heard someone talking about a fork bomb, I did some research and found some dreadful information about some strange looking characters people can have you type at the command line and as a result do ...
18
votes
2answers
2k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...
45
votes
4answers
21k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
5
votes
2answers
5k views

Copy all bridge traffic to a specific interface

I have a bridge/switch set up an a machine that has multiple ports. Occasionally, I have a vm running through virtualbox, and I'll have it use a virtual adapter and then I add the adapter to the ...
2
votes
2answers
531 views

How to make ext4 update files in place during writes

This question consists of two parts: How to find out what is the writing mode of ext4? How to configure an existing ext4 (a journaling file system) to do writes to a file in place such ...
5
votes
3answers
585 views

How to ban an IP temporarily after several incorrect password attempts?

My new server got hacked (sigh). I have physical access to my machine. It seems like the only changes made was a new user account created and a broken /etc/sudoers file. It seems as though the ...
2
votes
4answers
266 views

Security considerations for a default install?

So with an old burned install CD of Feisty Fawn I went through the process of completely formatting the Windows OS and installing Ubuntu on an old XP laptop. I then went through the online upgrade to ...
50
votes
2answers
28k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...
29
votes
3answers
19k views

How to block internet access for wine applications?

How can one prevent specific or any wine applications from accessing the internet? When using certain applications under Windows, they were trying to access the internet from time to time without ...
6
votes
3answers
941 views

Why is this bypassing the SUDO password?

I have a bash script I am using to automate a SVN checkout. The contents of the file were: #!/bin/bash cd /var/www-cake sudo svn checkout file:///usr/local/svn/bash_repo/repo/ Then when I double ...
2
votes
5answers
476 views

Wireless internet security

I have just installed Ubuntu 10.10 (dual booted with Windows 7) on a laptop which will connect to the internet through a wireless internet connection and I want to ensure that this is secure. I have ...
0
votes
3answers
521 views

Security problem with sudo su?

By typing sudo su, any sudoer can go into the root prompt & thus change the root password! Then what is the use of having a root & then the sudoers , because now sudoers can interfere with ...
12
votes
4answers
6k views

How to prevent system applications (like the Software Center) from asking for password?

I'd like Software Center, Update Manager and some other system management applications to work without asking for password (like sudo does if configured with NOPASSWD) but only asking for a ...
4
votes
2answers
298 views

How can I prevent Desktop Users from accessing any online website?

How can I prevent Desktop Users from accessing any online website? I tried 127.0.0.1 * in /etc/hosts but it didn't do the trick. Please note that I need to keep http://localhost fully functional. ...
7
votes
1answer
210 views

How can I prevent Desktop Users from connecting to new wireless networks?

I have a created a wireless connection from the main admin account and checked the box saying "Available to all users", everything is working correctly. I only need to prevent the Desktop Users from ...
7
votes
1answer
8k views

How to remove/change saved SVN passwords?

I'm using SVN from Eclipse and it has a feature that allows you to save the SVN user and password. It think it uses something called gnome-keyring to do so. The problem is that now I need to use ...
2
votes
1answer
4k views

Restrict access to specific folder on samba

I have network server on ubuntu server with Samba. I want to set a password to a specific folder. Does anybody know how to do this?
4
votes
4answers
1k views

How to disable GUI root login?

Sometime ago I just tested to see if I could login to desktop from root, and I succeeded. I clicked on Others on the userlist and entered root and its password and logged in. Now I'd like to know how ...
12
votes
4answers
25k views

How can I block ping requests with IPTables?

and stealth specific ports?
6
votes
6answers
287 views

What strategies (especially available software) do you use to keep passwords safe?

Inspired by the recent issue with the Gawker network sites, I've been re-evaluating my password management. What strategies do you use to keep passwords safe? I'm particularly interested in ...
17
votes
2answers
957 views

Accidentally typed password in username input, any logs to clear?

I have accidentally typed my password in SSH's interactive username prompt. Are there any log files that I should clear?
10
votes
1answer
439 views

How to restrict the number of processes a user can start?

We tried /etc/security/limits.conf, but that seems to have no effect. The used line for limits.conf looks as follows: myuser hard nproc 6 That is configuration for a server. I want to limit the ...
129
votes
18answers
44k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
11
votes
1answer
2k views

How to give ssh access to trusted friend?

I've got a friend that I trust enough to give ssh access to one of my servers. To this end, I've created a user account for him. The box is accessible by key authentication only, not passwords. ...