Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
48 views

Is “oneconf-service” meant to be running?

I left my computer for a little while, and when I came back it told me that there was an internal error with oneconf-service, and though it (the process) is gone now, in the processes list in the ...
1
vote
0answers
75 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
9
votes
1answer
2k views

Are all versions of Ubuntu secure against DROWN attack?

OpenSSL updates release versions 1.0.2g and 1.0.1s to fix the DROWN vulnerability (CVE-2016-0800). In Ubuntu 14.04 LTS Trusty Tahr, the latest OpenSSL version is 1.0.1f-1ubuntu2.18. Do I understand it ...
0
votes
2answers
51 views

Why is server restart required? [duplicate]

When logging into my Ubuntu instance I get the message *** System restart required ***. I am running a server and uptime is very important for me. How can I know why the restart is required? I have ...
0
votes
1answer
49 views

syslog-ng viewer that can display many log files of different IDS

I have three Intrusion detection systems installed (snort, modsecurity,ossec) and I want to visualize the generated log files of these IDS. Is there a Graphical User Interface that can display the ...
6
votes
2answers
343 views

does rolling back the kernel in Ubuntu compromise security

I recently updated my kernel, and noticed that it was affecting my graphics drivers. As a quick fix I rolled back the driver , but would like to know if this affects my system security in any way? ...
2
votes
4answers
172 views

Is there any way to verify a Ubuntu iso or hashsum?

Neither the iso nor the hashsum is available via https. Is there any way to verify you're not getting man-in-the-middled?
0
votes
0answers
24 views

Which are the security problems on running an http server using Python's built in module?

I've just read this post but I haven't got the necessary points to comment on it. I'm running, $ python -m http.server I wonder which are the security implications about it, with some examples. ...
0
votes
1answer
269 views

telegram with secret chats

What is the best way to run telegram on linux with support for secret chats? This is what I tried already: run telegram desktop - works very well but no secret chats feature pack android telegram ...
0
votes
0answers
72 views

How to hide “Show password” in Network Manager?

I have a problem with the "show Password" checkbox. I'm trying to help a social school. The thing is that the "Wi-Fi Network Authentication Required" popup shows up some times. what is not a ...
0
votes
4answers
137 views

looking for the valid md5 checksum for “ubuntu-14.04.4-desktop-i386.iso” file

After the LinuxMint incident, I am giving Ubuntu a try. I was one of the "winners" who downloaded on the day of the hack attack. So I just wanted to be extra sure that the md5 was okay, but I can't ...
0
votes
1answer
34 views

how to install update by CVE number

In Redhat and Suse i can run below command in order to install a specific CVE. for example: yum update --cve CVE-2015-7547 zypper patch --cve=CVE-2015-7547 in this also possible in Ubuntu? How ...
0
votes
3answers
79 views

Is sudo's bruteforce protection really helpful?

In this question: Why is there a delay when entering a wrong password? it appears that there is a 1-2 seconds timeout in sudo once it is given a wrong password in order to make cracking attempts more ...
0
votes
0answers
52 views

How to check if Ubuntu Touch device is really new?

I just got a new BQ Aquarius E4.5 Ubuntu Edition from the shop. However: Battery was totally discharged (0%) I was not asked to perform initial configuration After I installed terminal, output of "...
0
votes
0answers
19 views

Is it possible to run services with limited privileges?

I have a home server with some web and database services running (nodejs, postgres, neo4j). Later I intend to add a vpn server, so I will be able to access the services from the office. As far as I ...
0
votes
0answers
14 views

Vulnerability check for glibc Security Issue: glibc getaddrinfo stack-based buffer overflow [duplicate]

A security problem with getaddrinfo in GNU’s glibc was reported by Google Engineers How can I check if my systems are affected? (using ubuntu 14.04 LTS) How to fix this issue?
0
votes
1answer
45 views

A buffer-overflow vulnerability in the GNU C Library

I came across this article by PC world informing about some serious vulnerability discovered by Google and Redhat a couple of days before, i am using Ubuntu latest version, and it's up-to-date, do i ...
0
votes
0answers
22 views

Fake SSID's showing up in nm-applet

I've started noticing fake SSID entries showing up in the network manager applet under Ubuntu. These apparent base stations don't really exist (othe devices can't see them when they scan for WiFi ...
4
votes
3answers
4k views

Which Ubuntu releases have fixes for CVE-2015-7547 (“Extremely Severe Bug” with libc getaddrinfo())? [duplicate]

Ars Technica posted an article describing the getaddrinfo() bug and how it is widespread in the Linux world. The vulnerability was introduced in 2008 in GNU C Library, a collection of open ...
0
votes
2answers
39 views

How to encrypt hard disk? [closed]

Can I encrypt hard disks? If yes, then how? Can it be used for any individual drive or I will have to encrypt all at once?
0
votes
1answer
36 views

Can an infected USB infect my PC through sudo and/or home?

Can an infected USB infect my PC through sudo and/or home if it is under sudo (like cleaning it with sudo sgdisk --zap-all dev/sdb, sudo dd if=/dev/zero of=/dev/sdb, or even looking/changing ...
0
votes
0answers
46 views

Can ubuntu security updates restart services started via supervisord?

When unattended-upgrades install security patches for services like mysql, nginx or ssh, automatic demon restarts would get triggered. Will the same happen if I am running them via supervisord?
0
votes
1answer
72 views

How easy is it to get Linux.Ekoms.1?

I read about this malware, one of the biggest specimens of malware on the Linux news right now. How easy is it to get? Paranoia has gotten the better of me. According to the sites I visited, it is ...
0
votes
0answers
36 views

firefox on ubuntu triggers huge download in the background

I am using ubuntu 14.04.02, and firefox 44.0.2. Recently I noticed, my downloads were going really high but I never downloaded anything. After step by step debugging, I could find that the moment I ...
0
votes
0answers
15 views

Automatic security upgrades, unattended-upgrades, and controlling when it does it

I have a linux server running a java app. The vendor indicates that 99+% of the time that one of their customers gets hacked, it's because they haven't installed JDK security upgrades in months. I'm ...
0
votes
0answers
119 views

Can I run Flash player for my browser in sandbox?

Flash player has a lot of Vulnerabilities. I have disabled the plug-in for security reasons, but there are times when content needs it. Can I run Flash player for my browser in a sandbox (isolated)? ...
1
vote
0answers
64 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
3
votes
1answer
33 views

Security risks with fakeroot?

Is there a security risk having fakeroot installed on my system? I can't find much more than was is provided in the manpage.
1
vote
1answer
29 views

Ubuntu Mozilla Security, do I need this? General questions

I was searching for info on enabling/disabling javascript in firefox, some pages I need to have it function and without the java they're broke. I came across this and was wondering is this something ...
-1
votes
2answers
166 views

How to edit /etc/default/ntpdate and prevent ntpdate from ever running without uninstalling

Since both ntpd and ntpdate rely on ntp servers, and since the Ubuntu repos have yet to complete an update of ntp to 4.2.8p4 (the version recommended by ntp researchers), I expect this means that both ...
0
votes
0answers
30 views

Restricting the Number of IP/TCP Connection Request Per Second Using Ubuntu Sever

I know what type internet connection my machines have and how much CPU/RAM they are using. So Is it possible to restrict the accepting number of IP/TCP connections per second at the OS level, before ...
0
votes
0answers
22 views

Run file when USB device inserted

I want to implement a strict policy of nobody being able to insert any USB device into my laptop. If someone inserts a memory stick, keyboard, light etc... into any USB PORT (while the computer is ...
1
vote
0answers
13 views

Securing a port in ubuntu with username and password

I have Elasticsearch running on 9200 port.I want to secure it and I dont want others to access the data stored in the index in ElasticSearch. How do I secure the port and limit its access using ...
1
vote
1answer
91 views

With secure boot disabled, is there long term vulnerability to malicious code (on 14.10 and 15.04/Win multiboot setups)?

In a nutshell: is it really a good safe idea to leave Secure Boot disabled? I have two laptops with LinuxMint,Xuntu, Ubuntu 14&5 Win 10 and Win 8.1 between them. Grub 2 works fine with /,/boot ...
3
votes
2answers
247 views

Email on failed login attempt?

I was wondering if it is possible to set it up in such a way that on a failed login Ubuntu will send me an email? And of course if the computer is not connected to the internet when the attempt occurs,...
0
votes
0answers
25 views

encfs reset settings to standard

I do not correctly identify the customizations when it first installs. Encrypted data is now not displayed. How to reset the settings to standard?
15
votes
2answers
714 views

How can I further secure my system using 2 factor authentication?

The title pretty much says it. I have been hearing more about 2 factor authentication, one-time passwords, hard-tokens, and other improved security features. With the decreasing security of using just ...
0
votes
4answers
59 views

What is the reasoning behind hiding characters when entering the sudo password?

When entering the sudo password, the • characters are hidden. Apparently the • are omitted for better security. They seem secure enough to me, and I don't see why they're not used. I think I'm ...
-1
votes
2answers
80 views

Is firefox safe to use on Ubuntu/Linux? [closed]

While using Firefox on Ubuntu, I frequently run into warnings from various sites (recent examples: when checking gmail, www.hitrecord.org), that inform me that I am using an outdated/unsupported ...
0
votes
0answers
37 views

UFW ACCEPT Problem

I'm having problem with UFW. If i block like whole /24 network becouse lots of bruteforcing etc. coming from China / Korea or somewhere. They still get to open ports. If i have, lets say port 443 ...
-1
votes
1answer
40 views

Of what help is SE linux to me?

i am new to Linux. I have heard about SE linux ... how does it work with Ubuntu and what can i do with it?
15
votes
3answers
1k views

Unsupported Ubuntus - is it safe to continue with them?

I'll try to be as clear as I can about this, hoping to get clear answers. I have Ubuntu Studio 15.10, which is not an LTS version, and will only be supported till July 2016. Does that mean there ...
1
vote
2answers
142 views

Auto unlock keyring on auto login without leaving password unencrypted

So I keep getting this unlock keyring popup when I login to Ubuntu automatically. There is a fix here: How can I stop being prompted to unlock the 'default' keyring on boot? I have been googling ...
1
vote
1answer
63 views

Remove string “please enter passpharase for disk…”

I traveled to Australia it seems they didn't like my face or I looked suspicious since they made me turn on my laptop and when ubuntu encryption password popped up they asked me for it, nothing to ...
1
vote
0answers
21 views

How to only allow a file to be opened or executed by certain application(s)?

Let's say that I've got a security application (or something which I just don't want any old application or user to have access to because it is very important and if the wrong guys had access to it ...
0
votes
1answer
68 views

Automatic kernel security updates no long being installed

A while back my /boot partition filled up on my Ubuntu server 14.04 install. This caused an automatic kernel security update to fail and be in a partially installed state. To fix the problem I removed ...
16
votes
2answers
5k views

New Zero-day exploit reportedly found affecting Linux/Android (CVE-2016-0728)

Russia Today reports (20 January 2016) that there is a new zero-day exploit that has been discovered affecting Linux and all Linux-based OSes for computers and phones. What is the deal; how does it ...
0
votes
0answers
8 views

cureent Kerberos password specifications

Current kerberos password, there must a certain number of used charecters or length...I keep getting, that doesn't work please try again from my welcome screen, does anyone know the specifications?
0
votes
1answer
49 views

Secure browsing

I would like to hear from you suggestions, how to improve security during browsing. Let's say that I am going to use Chromium. With this extensions: Web of Thrust (to be noticed, if i visit bad ...
0
votes
0answers
34 views

NTP question on ntpdc -c peers

I just started learning networking. I recently installed ntp on Ubuntu 14.04 running in Virtualbox on OS X. I was just trying to understand how it works. so when I executed ntpdc -c peers command in ...