Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
187 views

Does Ubuntu support the OpenBSD Crypto Framework?

I can't seem to find an answer to this question. There is the Linux Crypto API, and the OpenBSD Crypto Framework (OCF). I can't find anyting on Google as to whether Ubuntu supports OCF or if the ...
5
votes
3answers
9k views

Why UFW has to be (re)started at boot time if it's only iptables rule manager?

README from source package says: When installing ufw from source, you will also need to integrate it into your boot process for the firewall to start when you restart your system. Depending on your ...
1
vote
2answers
418 views

Inetd limit access to one user

I am using telnet because of a barcode reader. It is pretty old before 2000 i think and it seems that it supports only telnet via wifi connection. However how can i restrict telnet access to only ...
4
votes
1answer
114 views

Security in Hybrid cloud

How do we ensure security while setting up a hybrid cloud? For example, if I want to use EC2 or Rackspace, how can I make sure that the connectivity between the private and the public cloud is ...
10
votes
2answers
2k views

What is a security update?

Why are some updates called Important security updates? How are they different from other updates? Is my system insecure, If I don't install them? How can there be very frequent security updates? ...
1
vote
1answer
10k views

Importing PKCS#12 (.p12) files into Firefox From the Command Line

I've posted this question up on #Ubuntu and #Firefox Forums, and really could do with some help.. Anyone know where i could look or help with the answer. I'm hoping the power of social media will come ...
2
votes
1answer
828 views

Security of keyctl

Today I set up an ecryptfs directory, which is automatically mounted at login via pam. To do so i followed the guide in the ecryptfs readme ecryptfs-readme To sum up, I now have a key stored in the ...
12
votes
8answers
3k views

Is a Firewall really necessary these days? [closed]

should I install something like gufw?
13
votes
4answers
2k views

What is default password?

What is the difference between default and login? And what does Default Keyring mean? When I run some applications(Emphaty etc), Unlock Keyring window launched first, then it requires me password. ...
1
vote
1answer
705 views

Setting up fastcgi on an Ubuntu server (socket file permissions issue)

I am trying to set up mod_fcgid on my server. Part of the requirement is that Apache needs to create a socket file for mod_fcgid. I specified the folder for Apache to write the socket data to: ...
0
votes
1answer
947 views

Encrypted replication between normal CouchDB and Ubuntu One?

this is a very special question. Currently I'm starting to develop a new online shop using Python (Flask). I want to use CouchDB to store (and sync) new orders. But CouchDB does not encrypt the ...
22
votes
1answer
1k views

Is Ubuntu vulnerable to recent exploits using USB sticks and automount?

I read recently that someone demonstrated a security attack on a PC via the use of automount and a USB stick. How vulnerable am I to this attack and what steps are developers doing to be proactive ...
3
votes
1answer
3k views

How to prevent Synaptic Package Manager from asking for password?

This is similar to How to prevent system applications (like the Software Center) from asking for password? However that solution does not work for Synaptic Package Manager in 10.04.
12
votes
2answers
13k views

What does “pts/” in the output of w mean?

When I run w - to see who is logged on and what they are doing, i see this: USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user tty7 :0 08:14 10:32m ...
0
votes
1answer
408 views

Is UbuntuOne encrypted? [duplicate]

Possible Duplicate: Ubuntu One Encryption? A simple question: is the connection between client and server encrypted and are the stored data on the server encrypted?
20
votes
2answers
24k views

chkrootkit says /sbin/init is infected, what does that mean?

I recently ran chkrootkit and got the following line: Searching for Suckit rootkit... Warning: /sbin/init INFECTED What does this mean exactly? I heard this was a false positive, ...
36
votes
17answers
35k views

Can you recommend a password generator?

I was hoping someone could recommend a good password generator. Extra props to the person who can name one that gives you a mnemonic to remember it as well.
2
votes
2answers
1k views

Making files generally available on Linux system (when security is relatively unimportant)?

I am using Ubuntu 9.10 on a stationary PC. I have a secondary 1 TB harddrive with a single big logical partition (currently formatted as ext4). It is mounted as /usr3 with options user, exec in ...
8
votes
3answers
2k views

Is it possible to do a remote wipe of a system?

My office had a break-in over the weekend, and several laptops were stolen. Mine wasn't one of them, but I'm curious - the owners of the stolen computers (Windows and Mac) are all talking about remote ...
6
votes
1answer
734 views

Is troubleshooting AppArmor with 'teardown' unsafe?

I understand there is a safer, more targeted way to troubleshoot AppArmor's possible contribution to an issue than completely stopping the service and tearing down AppArmor profiles. Can someone give ...
60
votes
2answers
9k views

How to protect Ubuntu from fork bomb

I heard someone talking about a fork bomb, I did some research and found some dreadful information about some strange looking characters people can have you type at the command line and as a result do ...
18
votes
2answers
2k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...
45
votes
4answers
21k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
5
votes
2answers
4k views

Copy all bridge traffic to a specific interface

I have a bridge/switch set up an a machine that has multiple ports. Occasionally, I have a vm running through virtualbox, and I'll have it use a virtual adapter and then I add the adapter to the ...
2
votes
2answers
524 views

How to make ext4 update files in place during writes

This question consists of two parts: How to find out what is the writing mode of ext4? How to configure an existing ext4 (a journaling file system) to do writes to a file in place such ...
5
votes
3answers
571 views

How to ban an IP temporarily after several incorrect password attempts?

My new server got hacked (sigh). I have physical access to my machine. It seems like the only changes made was a new user account created and a broken /etc/sudoers file. It seems as though the ...
2
votes
4answers
263 views

Security considerations for a default install?

So with an old burned install CD of Feisty Fawn I went through the process of completely formatting the Windows OS and installing Ubuntu on an old XP laptop. I then went through the online upgrade to ...
48
votes
3answers
28k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...
29
votes
3answers
18k views

How to block internet access for wine applications?

How can one prevent specific or any wine applications from accessing the internet? When using certain applications under Windows, they were trying to access the internet from time to time without ...
6
votes
3answers
941 views

Why is this bypassing the SUDO password?

I have a bash script I am using to automate a SVN checkout. The contents of the file were: #!/bin/bash cd /var/www-cake sudo svn checkout file:///usr/local/svn/bash_repo/repo/ Then when I double ...
2
votes
5answers
476 views

Wireless internet security

I have just installed Ubuntu 10.10 (dual booted with Windows 7) on a laptop which will connect to the internet through a wireless internet connection and I want to ensure that this is secure. I have ...
0
votes
3answers
520 views

Security problem with sudo su?

By typing sudo su, any sudoer can go into the root prompt & thus change the root password! Then what is the use of having a root & then the sudoers , because now sudoers can interfere with ...
12
votes
4answers
6k views

How to prevent system applications (like the Software Center) from asking for password?

I'd like Software Center, Update Manager and some other system management applications to work without asking for password (like sudo does if configured with NOPASSWD) but only asking for a ...
4
votes
2answers
298 views

How can I prevent Desktop Users from accessing any online website?

How can I prevent Desktop Users from accessing any online website? I tried 127.0.0.1 * in /etc/hosts but it didn't do the trick. Please note that I need to keep http://localhost fully functional. ...
7
votes
1answer
210 views

How can I prevent Desktop Users from connecting to new wireless networks?

I have a created a wireless connection from the main admin account and checked the box saying "Available to all users", everything is working correctly. I only need to prevent the Desktop Users from ...
7
votes
1answer
8k views

How to remove/change saved SVN passwords?

I'm using SVN from Eclipse and it has a feature that allows you to save the SVN user and password. It think it uses something called gnome-keyring to do so. The problem is that now I need to use ...
2
votes
1answer
4k views

Restrict access to specific folder on samba

I have network server on ubuntu server with Samba. I want to set a password to a specific folder. Does anybody know how to do this?
4
votes
4answers
1k views

How to disable GUI root login?

Sometime ago I just tested to see if I could login to desktop from root, and I succeeded. I clicked on Others on the userlist and entered root and its password and logged in. Now I'd like to know how ...
12
votes
4answers
24k views

How can I block ping requests with IPTables?

and stealth specific ports?
6
votes
6answers
287 views

What strategies (especially available software) do you use to keep passwords safe?

Inspired by the recent issue with the Gawker network sites, I've been re-evaluating my password management. What strategies do you use to keep passwords safe? I'm particularly interested in ...
17
votes
2answers
947 views

Accidentally typed password in username input, any logs to clear?

I have accidentally typed my password in SSH's interactive username prompt. Are there any log files that I should clear?
10
votes
1answer
435 views

How to restrict the number of processes a user can start?

We tried /etc/security/limits.conf, but that seems to have no effect. The used line for limits.conf looks as follows: myuser hard nproc 6 That is configuration for a server. I want to limit the ...
128
votes
18answers
43k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
11
votes
1answer
2k views

How to give ssh access to trusted friend?

I've got a friend that I trust enough to give ssh access to one of my servers. To this end, I've created a user account for him. The box is accessible by key authentication only, not passwords. ...
2
votes
4answers
505 views

How to browse the web safely with Mozilla Firefox?

i want to know how can i possibly keep me secured from forgery sites. i am currently using mozilla 3.7
6
votes
3answers
831 views

Updating a mysql production server without having problems

I have a mysql server, ubuntu server 10.04. It works great and we're really happy about it. Time for updates has come and I am sincerely scared: can I do a sudo apt-get dist-upgrade with light heart? ...
5
votes
2answers
1k views

Ubuntu comes with firewall by default?

I understand the Ubuntu comes with firwallul UFW is true? There is a GUI for it? if so, what is his name and where do I download? It is possible that UFW notify us (like in windows with a pop-up ...
4
votes
2answers
282 views

Securing system admin account

As it is well known, it is recommended that the system administrator login to the system using a normal user (non-root). When the admin needs to do privileged tasks, sudo can be used to become ...
0
votes
0answers
343 views

How can I solve a Pidgin certificate error? [duplicate]

Possible Duplicate: Where does Ubuntu store the SSL certificates for Pidgin? Changing my ~/.purple/certificates to certificates.old doesn't solved. Unable to validate certificate ...
7
votes
5answers
1k views

How to hide process arguments from other users?

A while ago, I used to use the grsecurity kernel patches, which had an option to hide process arguments from other non-root users. Basically this just made /proc/*/cmdline be mode 0600, and ps ...