Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

5
votes
2answers
2k views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
0
votes
1answer
113 views

How to install iptables in Ubuntu

I tried to install the Linux firewall iptable but it did not work I tried sudo apt-get install iptable and that did not work.
0
votes
0answers
27 views

Building a grsec patched kernel for 15.10

I would like secure kernel. I tried adapting the guide at https://wiki.ubuntu.com/Kernel/BuildYourOwnKernel without luck. Is there a proper step by step guide for doing this? Thank you.
0
votes
1answer
221 views

How to update ntpd to the latest version to patch the latest vulnerability?

This week a new attack on the Network Time Protocol Daemon (ntpd) was demonstrated, see this paper. This could potentially wreak havoc with my HTTPS website or other time sensitive services I am ...
1
vote
1answer
61 views

Unable to generate unattended OpenPGP keys with GnuPG

I am trying to generate unattended OpenPGP keys without passphrase to automatically deploy secure files on servers. When generated manually all goes fine (using gpg --no-permission-warning --homedir ...
0
votes
0answers
59 views

Missing Security & Privacy after upgrade

After a successful upgrade from Vivid 15.04 to Wiley 15.10 everything is working 100% fine. But I discovered I am missing the "security & privacy" option in system settings. It doesnt appear in ...
2
votes
1answer
117 views

What's the best way to avoid getting hacked by anyone, e.g. governments or other criminals? [closed]

I don't know if you've all heard/read about the software from companies such as "hacking team", see e.g. the remote control system: ...
0
votes
0answers
93 views

Manage passwords in Chromium --> security risk?

I realized that in Chromium (and also Chrome) for Linux it is possible to see all saved passwords in clear text. That seems a bit strange to me... after a short research I found out that it is not ...
0
votes
0answers
60 views

Connecting to eduroam with CA certs

I have been around on every forum I could find and nothing helped me. I'm running Linux Mint 17.2 Cinnamon and I cannot figure out how to connect my computer for the life of me. I have tried this ...
1
vote
1answer
48 views

security risk of changing user in nginx server

I am planning to set up a server on a spare computer. I plan to use Ubuntu server 14.04 with nginx and php. I know that it is generally safe not to run a server as root user but is it ok if I set it ...
0
votes
2answers
44 views

Does sudo password protects me from networks hazards? [closed]

Do I need a good sudo password if I don't care about local unauthorized access (by another person) ?
0
votes
1answer
50 views

Ubuntu keeps asking me for Gmail passworld

I'm using Ubuntu 15 and everything was fine till i decided to use evolution. Evolution failed to connect to Gmail and since then it asks me to enter my password for my Google account. according to ...
0
votes
0answers
14 views

How to make denyhosts handling tuple username-IP?

I would like to add a user to restricted-usernames file in the same time as denyhosts adds its IP to hosts.deny. Also, when Denyhosts purges a host, I would like to remove this username from ...
1
vote
0answers
32 views

WiFi does not connect anymore after libgcrypt

I am a total beginner in Ubuntu. I am using Ubuntu 15.04 and everything was working fine, until I tried to install Spotify. This required the installation of libgcrypt11, which was succesfull. ...
0
votes
0answers
16 views

My pid just jumped from 2000 to 4000

In resent days i noticed that if I do #ps aux there is a gap in my id #s. It started that i needed to kill my citrix receiver very often (due to lack of acceptance of Linux systems on my work ...
0
votes
0answers
94 views

Non-root user SFTP & /var/www/html permissions

So I set up a new Ubuntu 14.04 server with Wordpress and I've created a non-root user admin1 and set up certificate based authentication. I'll be using Secure FTP/SFTP content up to the server as ...
23
votes
5answers
2k views

How important is the sudo password?

I know that the sudo password protects my computer from being locally hacked by someone having physical access to it (edit : actually, it doesn't). My password is strong enough for that purpose, but I ...
0
votes
0answers
10 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
1
vote
0answers
105 views

Scanning with ClamAV returns 10820 errors - Infected Joomla site with Trojan Iframe.MA

My server seems to have been infected with a Trojan. I run a Ubuntu 14.04.3 LTS When I approach one of the sites on my server my windows eset scanner blocks the link. Throwing a "Trojan ...
0
votes
1answer
54 views

How to check security on Ubuntu

Today while I was trying to install a new software via software center, my password stopped working, that was strange for me after that situation I tried searching askubuntu.com to reset my user ...
12
votes
2answers
485 views

I can get into my administer account on my Ubuntu without typing in the password how do I disable it?

I have a password on my Ubuntu computer, but if I just click the arrow next to login I can get into my account. I want to disable this, because my brothers have gone on and I don't want them to. Also, ...
2
votes
2answers
72 views

Can I create a panic button in Ubuntu?

In case I'm ever raided or realise that I'm being spied upon whilst using my computer, is there a way in Ubuntu I can have a pre-set 'panic button' or series of keys that can log me out or secure my ...
0
votes
1answer
89 views

Is TOR breaking TLS for e-mail transport encryption to collect user credentials (security hole)?

EHLO response from mail server for starting encrypted TLS protocol when connecting to SMTP to send mail appears modified from STARTTLS to AUTH PLAIN when sent through tor instead of plain TCP. In ...
-1
votes
2answers
136 views

How does usermod allow you to bypass sudo?

My team had a show-n-tell recently and I presented my findings on Docker. I explained how you can install Docker with: curl -sSL https://get.docker.com/ | sh I then explained that, with this ...
1
vote
0answers
55 views

NoScript syncing?

I have just noticed that after firing up my browser (after a NoScript update) I am getting strange reports of syncing in association with NoScript: When selecting Copy from the right-click menu on ...
3
votes
1answer
91 views

Does passing passwords as plain text arguments reduce WiFi network security?

This app uses the command line to create a WiFi access point with this command: create_ap wlan0 eth0 MyAccessPoint and you can also make a WPA + WPA2 network with this command: create_ap wlan0 ...
0
votes
1answer
40 views

Can console be suspended and ask for a password on wakeup?

Although I suspect that this is not currently possible, I would just like to ask because it would be something very useful in my opinion. Because when I close my lid and I am in the GUI my computer ...
2
votes
0answers
31 views

Files created in Ubuntu are given permissions to “Everyone” in Windows by default

I switch between Ubuntu and Windows7 workstations. I created a new text file in Ubuntu with some passwords and logins. Saved the file on an external drive. Now in Windows when I select the file the ...
61
votes
6answers
8k views

How to secure my laptop so that hacking by physical access is not possible?

I messed up my system earlier, I was greeted with a black screen, when booting in to Ubuntu. When I started up my laptop, I selected the recovery option from the grub menu, and chose fallback at root ...
0
votes
0answers
19 views

How to fix Faq-O-Matic fom.cgi XSS security issue

I hope someone can help me. I ran a security check against my server and it gave me a security warning about Faq-O-Matic. I need to find a way to fix this security error. I have googled and lots of ...
3
votes
0answers
80 views

After editing root .bashrc Unable to login even with tty1-6 and drop to prompt command from recovery mod

I have had the worse two weeks started with Ubuntu 12.04 , and updating to 14.04 had problem , just after a good luck of successfully installing brand new ubuntu 14.04 I now got the nightmare again ...
1
vote
0answers
32 views

Is there a deadman's switch feature in Ubuntu?

Is there a function in Ubuntu or that can be added that would create a deadman's switch? In effect, I would like to have a feature that, when I'm working on a specific sensitive file, periodically ...
0
votes
2answers
43 views

Why do I no longer receive any security updates?

I haven't received any security updates this past week. How do I check in terminal if everything is updating correctly?
1
vote
1answer
46 views

“allow executing file as program” box was already marked in the files I downloaded

I learned that, in order to install a program, one should make the downloaded file executable by going to its properties and marking the "allow executing file as program" box. I understand this as a ...
0
votes
0answers
65 views

SNORT - configuration to use it with VPN

my all network traffic goes trough VPN. Status of ufw: Default: deny (incoming), deny (outgoing), disabled (routed)/ ALLOW OUT Anywhere on tun0. snort.conf - http://pastebin.com/rvyYcCke ...
0
votes
0answers
78 views

OpenVPN Disconnects every 60 minutes and asks to login again

I am running Ubuntu 14.04. I have installed openvpn. I use the vpn by enabling it thru the terminal with Sudo openvpn (filename), then I login and it connects fine. I have noticed that it will ...
1
vote
1answer
84 views

Prevent pdf file's content from modifying

How can I create a read-only pdf file in Ubuntu?
3
votes
1answer
504 views

freeradius refuses to start because it says OpenSSL is vulnerable

I work with Ubuntu 14.04 and I can't start the freeradius deamon (freeradius-server-3.0.9). I have this error that I cannot solve: Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 ...
0
votes
0answers
24 views

Do I need to install antivirus on my linux system? [duplicate]

Am new to kubuntu and this is my first post in this forum. Do I need to install antivirus on my linux system? I hear people say linux-base is more secure than windows. Does that mean I should not ...
0
votes
1answer
36 views

Only allow websites to use already installed fonts and not download their own in Firefox

I have read a lot lately about fonts being malicious, and as a website can just download its own custom font onto your machine so that it can use it, it could exploit something with this and do ...
0
votes
1answer
61 views

Have I compromised my security because of unpacking an installation archive?

I'm NOT a technical person. I use only Ubuntu 14.04 lts on my computer, no other OS. Today I downloaded a package called 'Tor browser bundle' (tor-browser-linux64-5.0.2_en-US.tar.xz) from Tor-website ...
0
votes
1answer
85 views

Lock the position of desktop icon 14.03

I was wondering if there is a way to prevent a user from moving a desktop icon but it still be usable? I am on ubuntu 14.03 32 bit. Any help wnd suggestions are appreciated. Thanks.
6
votes
4answers
479 views

Check security mode of connected Wi-Fi network

How do I check the security mode of the connected Wi-Fi network, using the command-line interface? I want to know whether the current Wi-Fi connection is protected with WPA, protected with WEP, or is ...
2
votes
2answers
270 views

How to enable Secure Boot without issue?

I read here that it is essential to have Secure Boot enabled: However I find that when I enable Secure Boot, it changes it so that systems can boot with UEFI boot, but not Legacy, it also disables ...
1
vote
1answer
66 views

how to scan my wifi connection?

I used to do it with SoftPerfect Wifi Guard, but 1.0.6 new version isn't allowed for Linux and I can't find previous version 1.0.5. The target is identify all devices connected into my wireless ...
0
votes
1answer
52 views

istartsurf on chomium

A few days ago I noticed that I'd got the istartsurf malware in Chromium on my Ubuntu laptop despite being careful of which software I'm installing, but anyway. So I reinstalled Ubuntu on my laptop ...
0
votes
0answers
37 views

Locked down guest account [duplicate]

I need to setup a computer so a user can surf the internet and that's it. I want an admin account to make changes, apply updates, ect. I would like the guest account to be locked down with no access ...
1
vote
1answer
142 views

Is Ubuntu spyware (referring to article by Richard Stallmann)? [duplicate]

I received a link to the article "Ubuntu Spyware: What to do?" by Richard Stallmann which advises the reader not to use or recommend Ubuntu for several reasons: It does not meet all four freedoms of ...
0
votes
0answers
10 views

Best way to secure a virtualised ubuntu running apache 2

I do front end web development for clients and have a local webserver that acts as my production/staging ground I have a Windows 7 machine that has Ubuntu installed within a virtual box, Ubuntu is ...
1
vote
0answers
17 views

Challenge-response local user login

Is it possible in Ubuntu, or in any Debian based distro, to use Digital Signatures with a Challenge-response setting for local user login(I don't mean ssh), instead of a password ? Storing the key on ...