Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
17 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
0
votes
0answers
25 views

How do you set up a systemwide read only user for a security scanner

I'm hoping to play with STEALTH https://apps.ubuntu.com/cat/applications/precise/stealth/ It suggests the creation of a read only access user that the integrity scanner can use to access its target ...
0
votes
1answer
34 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
1
vote
1answer
29 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
0
votes
0answers
27 views

Is this a bug or normal (mis) behavior?

When I sudo-rebooted from the top-right menu, after Unity closed I was taken to an open tty, where I saw my login password in plaintext where I had typed it in earlier. In Ubuntu-bug, a specific ...
2
votes
0answers
27 views

What is the difference between security.ubuntu.com and archive.ubuntu.com? [duplicate]

The various releases have a -security channel in archive.ubuntu.com. How does that channel differ from the security.ubuntu.com? If I have to set up a local mirror, how does security.ubuntu.com come ...
14
votes
6answers
4k views

Does spyware exist for ubuntu?

Someone I know said he had put spyware on my computer. Is he talking crap? I've been using Ubuntu 12.04 for nearly 3 years now and I've never seen any type of spyware, remote keyloggers or RATS ...
0
votes
0answers
86 views

Help recovering from a hack and a malware warning

On Thursday (2014/7/24) morning I discovered that one of my Ubuntu systems was hacked. I believe it may have been the malware NetWire. I was able to see some traffic from the internet directed at ...
0
votes
1answer
81 views

How can I make my WiFi hotspot secure?

I just created a wifi hotspot with an adaptor, and it says that it uses WEP security. I may be mistaken, but isn't WEP security not really secure? How can I make it more secure, such as WPA or ...
2
votes
1answer
298 views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
-1
votes
2answers
50 views

Security updates for old-releases

I know that I should upgrade to a newer supported Ubuntu version if possible, but: if you have no possibility to upgrade (for reasons not important here) you have to use the old-releases archive from ...
0
votes
1answer
34 views

Possibility that ubuntu machine infected by FTP malware

I know that this question might be duplicated but here is what happened. Our web server got attack by injecting the spam links into server script file (Web server running ...
0
votes
1answer
127 views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
0
votes
1answer
37 views

Ubuntu 13.10 end of support

13.10 ends support today, I want to do a clean install of 14.04.1,but it arrives next week,is it highly risk to wait fot 14.04.1 one week with 13.10 no supported? Thanks.
1
vote
0answers
69 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
27 views

Moving away from ROOT user

I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really. However I found out that since the day they got their VPS everything, ...
26
votes
1answer
1k views

How to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?
23
votes
6answers
2k views

How can I confirm that the binaries in my Ubuntu are from the source code it should be from?

Like 99% of users, I install Ubuntu from ready-made binaries. How can I verify myself that those binaries are in fact from the original source code from Ubuntu? It would be good to verify that ...
1
vote
0answers
43 views

install ubuntu on a hardware AES encrypted flash drive

I couldn't find the answer to my question after hours of search. I hope someone can help me out. I would like to install ubuntu on a flash drive. I followed to standard instructions for installing ...
1
vote
0answers
34 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
0
votes
1answer
111 views

Restrict user access to /proc and /sys

I have one big problem: setfacl does not seem to work for /proc and /sys, but I would like to restrict one specific users rights and I do not find it acceptable for that user to read stuff like ...
1
vote
0answers
44 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
2
votes
1answer
91 views

Sudo is also user login password - why? how to change?

When installing Ubuntu I can create a user with an encrypted folder, what I always do. Now after the installation the login password for this user is also the sudo password. Is that how it should be? ...
0
votes
0answers
16 views

Are Ubuntu upgrades signed or encrypted?

When you download updates from the standard Software Updater (which I'm assuming is just a graphical front-end for apt), are these updates signed or encrypted between the server and the user, or are ...
0
votes
0answers
20 views

Want to know how how secure my system is with current settings

My system is at kernel 3.15.2 Mainline. I have Enabled the firewall with all ports closed. I have very strong passwords set for BIOS, Drive Encryption, and login SSH is Disabled. I have installed ...
0
votes
2answers
107 views

How to store network-manager settings in home

I'm using Ubuntu 14.04 with the network-manager. It stores all Information about wireless networks, VPNs, ... in /etc/NetworkManager/system-connections and I was just wondering why... I thought the ...
0
votes
0answers
17 views

are ubuntu software center mirrors safe? [duplicate]

Could the admin of a mirror server/ isp attach a trojan into or fake a package? It's all my question. This sentence is just spam. You don't need to read. Why it is difficult to post a question here. ...
0
votes
1answer
361 views

Is fingerprint-gui a security hole?

I have a Thinkpad T440 on Ubuntu 14.04. I use fingerprint-gui to allow me to login and use sudo by swiping a fingerprint. The worrying part is that anyone can run the fingerprint-gui program to ...
3
votes
1answer
472 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from this wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully with ...
0
votes
0answers
27 views

Why do I have to keep entering my password when using sudo? [duplicate]

When I use ec2, whenever I enter sudo I never have to enter a password. I have my own VM server now and I created a user using this command when I was a root: usermod -a -G sudo deploy So now when ...
0
votes
1answer
32 views

Ubuntu virtual machine guest-only internet

Disconnecting internet is a great security advise but i want to check my emails. is that possible to use Ubuntu as host without internet connection while in a guest OS in Virtualbox is able to browse ...
1
vote
3answers
1k views

cryptsetup - LUKS vs. Truecrypt

this question may already been made but I'd like to know how secure LUKS / cryptsetup is compared to TrueCrypt. What is the advantage and what is the disadvantage?
1
vote
1answer
176 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
0
votes
1answer
26 views

Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?

My title pretty much says it all: Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?
0
votes
1answer
145 views

Ubuntu 14 - unable to use sudo echo to overwrite files [duplicate]

For ubuntu 12.04 bash scripts, I used to be able to run commands like the example below to overwrite files: sudo echo 'line1 line2 line3' > /etc/some/config/file.conf Ever since Ubuntu 14.04, ...
1
vote
1answer
801 views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
0
votes
0answers
149 views

Is Enabling UPnP in Transmission Worth the Security Risk?

I'm wondering if enabling UPnP so that Transmission can select a random port on start worth the security risk. I am not asking if having a listening port is worth the risk but instead is it worth the ...
1
vote
1answer
948 views

changed permitrootlogin to no, but I can still login as root

I just created a new server (VM) and I setup SSH, I can login fine. I created another user account, added it to the admin group and sudo works fine. Now I want tried to disable the root login, so I ...
0
votes
1answer
50 views

Unknown Micropohne can hear unknown person (weird)

I tried to capture a video using webcam and VLC. On Menu I select "open capture device". VLC then presents my webcam and 4 audio devices named hw:0,0, hw:0,2, hw:1,0 and hw:10. Because I don't know ...
1
vote
0answers
29 views

Why isn't Bastille in Ubuntu 14.04 [duplicate]

Bastille is missing from the Ubutnu 14.04 universe repository. The main question - what should I do to replace the security provided by Bastille? There must be a reason it was removed so how do I ...
1
vote
0answers
124 views

I am unable to generate a gpg key through the keyring program

Whenever I try to generate a gpg key through the system's GPG program, it asks for my name, email, and password then everything except for the GPG program's main window disappears. Upon using gpg ...
-2
votes
3answers
146 views

Penetration and Security of ubuntu operating system and it's working

I was reading about ubuntu and linux systems that they are immune to malware and virus attacks due to their well managed and good architecture. So the question is how much secure a ubuntu system is ...
-1
votes
1answer
90 views

How do I remove GPG private keys from memory? [closed]

When I do the following: gpg --decrypt somefile.pgp I see a graphical dialog come up asking me for the passphrase for my private GPG key. After that, subsequent runs don't require a passphrase, as ...
-1
votes
1answer
29 views

rpm -q --verify --nouser --nogroup --nomode --nomtime PACKAGENAME

What is equivalent to following line in Ubuntu / Debian world ? Note: I have original .deb files and i want to check which files differs from original zimbra-*.deb for Z in $(rpm -qa | grep ...
0
votes
1answer
21 views

Why is each security update file size so large?

The 'Software Updater' just asked me to download a security update which has a filesize of 62MB. And these updates are quite frequent. My questions are: Why are they this big, if, by the frequency ...
0
votes
0answers
64 views

How to create a fake packet that can be used in Ettercap filters

I am working on Ettercap filters and came across inject(file) function provided by it. This function simply injects the contents of file specified in the current packet. We can also drop the entire ...
5
votes
3answers
5k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
0
votes
2answers
163 views

Is it safe to alias rm to safe-rm?

We are happy to use safe-rm as a replacement to rm, but is it considered safe to alias it? e.g. alias rm='safe-rm'
-1
votes
1answer
41 views

Problem to current security

I have install ubuntu in my lap . But after restarting my lap there is a message that " ubuntu has blocked by current securty policy" what can i do?
0
votes
1answer
51 views

How to temporarily block network access to root user?

Just want to temporarily block network access sometimes, even to the root user. How can I do this?