Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
65 views

tcpd[3674]: connect from unknown (unknown) - Am I being hacked?

Earlier today I had 7 tcpd processes on my server running at 100% cpu for a long period of time. Looking into syslog I found a lot of lines like this: tcpd[11447]: connect from unknown (unknown) ...
0
votes
1answer
47 views

Using 12.04 LTS network manager mixing up login and wifi passwords

I've been using 12.04LTS on my laptop for a while now, with automatic security patches etc. etc. I use wired ethernet at work, and wifi at home. Until recently both worked seamlessly and without any ...
0
votes
0answers
60 views

Ubuntu for the paranoid

Would it be possible to create an encrypted installation and use an SD card (or I can make a hardware key with a UART converter+microprocessor and keyboard. 1 key=1 password) as the decryption HW key ...
-1
votes
1answer
26 views

Information and updates [closed]

I would like to know what are the first steps for a new user of ubuntu. What is most useful for an inexperienced user of Linux, mainly one that arrived from Windows. Is it important to use the ...
-1
votes
2answers
61 views

What is MAC spoofing in the internet connections manager and does it have any benefit in terms of security? [closed]

What is MAC spoofing in the internet connections and does it have any benefit in terms of security? What is the purpose of cloning the mac or spoofing it? Does it help protect against hackers at ...
1
vote
0answers
35 views

New System account created automatically [closed]

This is weird. Last night, I started to download a movie from a torrent site, and I fell asleep. When I woke up, the download was finished and There is another user account created in my system named ...
0
votes
2answers
144 views

Will support for 14.10 stop this year? [duplicate]

A month back I have transitioned from Windows to Linux and I have utopic installed in my system. No complaints till now! :D What I wanted to know was as this is not an LTS release, will I face ...
0
votes
0answers
47 views

Using seahorse generated password files from command-line

Seahorse (aka Passwords and Keys) is a pretty cool application for general password management. It stores the keys in ~/.local/share/keyrings/. Is there some way for me to easily read/modify this ...
1
vote
2answers
64 views

Home folders accessible to other users and should not be, how to fix?

Why are my home folders accessible by other users on the same system by default? I understand that I can change the permission of the home folders but want to know why this happened? I have done ...
0
votes
2answers
108 views

ubuntu antivirus [duplicate]

Why I need to use anti virus like clam-av clam-tk or commodo anti virus or any free anti virus in Ubuntu ? Note: if I've root login enabled.and I am running few windows programs inwine1.6. will ...
0
votes
0answers
30 views

How force Logcheck to report fail2ban bans?

I'm using Logcheck to take care of my logfiles and suspicous activites. I also installed fail2ban and get sometimes... I would like to be informed then fail2ban blocks an ip.. but logcheck is not ...
0
votes
0answers
31 views

Can't access IRC on WiFi

I had been away from Ubuntu for quite a while, but now I fully migrated to it, and I'm quite happy with it. However, after a year or so, when I tried to login to Freenode, I saw that I can not connect ...
0
votes
1answer
21 views

So I used fixubuntu as a privicy measure, what other precations should I take using Ubuntu Linux?

Yes, I just want a privacy preserving OS, I know it's not 100% possible but I'd like to get as close as I can. Thanks
2
votes
1answer
71 views

How can I prevent people to see what application(s) I have opened?

I don't want people to see what applications I have opened. I would like to be able to instantly hide the windows with a shortcut key combination, so I can save my work afterwards. I also want to hide ...
0
votes
0answers
93 views

minimal data showing in auth.log

I have locked my server down and to help troubleshoot any holes, I look in the logs, especially auth.log. In the logs, it shows that there are attempts to log in but no data shows. I am not able to ...
0
votes
2answers
893 views

How to remove malware?

I use ubuntu 32 bit and chrome's infected with the softwareupdaterlp virus. I don't really know what steps I should take aside from resetting/re-installing chrome. Would really appreciate any tips on ...
1
vote
3answers
328 views

How can I have a Very secure Ubuntu Desktop system [closed]

How can I have a Very secure Ubuntu Desktop system and where is the best place online to learn about hardening Linux, not just Ubuntu?
1
vote
1answer
110 views

Are all PHP security upgrades backported to Ubuntu 12.04 until 2017

I recently came across an extension to a popular CMS that would not install on an Ubuntu 12.04 server, because PHP version 5.3 reached end of live. I was however under the impression that all security ...
0
votes
1answer
432 views

How to only install security updates [duplicate]

Is it possible to only install the security updates. If this is possible it needs to be done on several servers and ubuntu virtual machines (Manually in command line) . I already tried a few ...
2
votes
1answer
1k views

Ubuntu 12.04.5 LTS won't update libc6 to 2.15-0ubuntu10.10

In light of CVE-2015-0235, I set out to upgrade my Ubuntu Servers today. I have a 12.04.5 LTS server that refuses to update my libc6 package to the version that does not contain the vulnerability ...
3
votes
1answer
601 views

What is the 'libc gethostbyname buffer overflow' and how can I protect myself from it

Apparently there is a bug in the GNU C Library, that can cause a buffer overflow? What exactly is it, and how can i protect myself from it?! Reference: oss-security - Qualys Security Advisory ...
3
votes
1answer
2k views

CVE-2015-0235 How to update eglibc to 2.15-0ubuntu10.10

I followed these instructions and found that my glibc version was 2.15-0ubuntu10.9. How do I update it to 2.15-0ubuntu10.10? It is also mentioned here that services have to be restarted after the ...
0
votes
0answers
119 views

How can I disable all locking in 14.10?

I don't want the machine to prompt for password on resume from suspend, I don't want the machine to lock after a certain period of inactivity. At the moment, I only want it to lock a) when it boots ...
1
vote
2answers
77 views

SSD & Security & wipe Oh My

So SSD's are memory based, and therefore solid state, meaning that they have no mechanical parts like a a regular spinning hard drive. How does this affect the need to wash empty disk space and will ...
0
votes
4answers
55 views

can someone remotely access your ubuntu user account on your computer if they steal your ubuntu username and password

I would like to know if it is possible for someone who steals your ubuntu username and password to remotely access your ubuntu user account on your computer and even see what you are doing when you ...
2
votes
1answer
29 views

Is there a way to tell which application last accessed your camera?

Is there an application which will tell me which programs have last accessed my camera?
0
votes
1answer
47 views

How to password-protect an individual folder

I have to password-protect two folders: folder A is on my computer's hard drive, and folder B is on an external hard drive. Regarding folder A: I have tried encrypting folder A using Cryptkeeper but, ...
0
votes
0answers
47 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
11 views

Why is Ubuntu only using SHA1 for WDE?

I'm wondering. In times where Hardware gets faster every week and all the NSA thingies about Snowden and such, why is Ubuntu still using Sha1 when encrypting the system over the GUI (the installer) I ...
0
votes
2answers
73 views

Is it safe to download and open files? [closed]

I understand that a virus and malware can exists in Linux. However, I have read a lot about how Linux is not vulnerable to viruses because of a variety of reasons. So does that mean that I can ...
0
votes
0answers
55 views

Asus K52Jr webcam notification LED always lit

I have been using Ubuntu 14.10 on my Asus K52Jr notebook for some time now, and this always bothered me. The webcam's LED is always lit (on Windows it only lights up if it's in use), and I'm concerned ...
0
votes
0answers
70 views

java security prompt even with exception list

I'm trying to run an applet of a website, and a prompt pops up with "Application blocked by security Java" but I have this website on the exception list! I'm running ubuntu 14.04 and Java Version 8 ...
0
votes
1answer
689 views

How to add user from apache user group in linux

The question is simple. How we can add user without root privileges (because www-data is very important for security)? For example adding user with root user: sudo adduser user group Without root ...
1
vote
1answer
65 views

ip forwarding enabled at every boot

Recently I noticed that cat /proc/sys/net/ipv4/ip_forward returns 1, something that is not recommended and I generally do not enable things I do not need that increase my attack vector. I thought, ...
1
vote
2answers
72 views

Can Port Forwarding to a Windows VM cause Security problems? [closed]

I have question. My physical host is Ubuntu 14.04. I installed Virtualbox with a Windows Server 2012 VM with IIS. I set port forwarding from my Ubuntu host to my vm. If my virtual Windows Server ...
2
votes
0answers
144 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
0
votes
0answers
116 views

Migration from Truecrypt to LUKS

I am looking for an alternative for True-crypt which can be used both at the disk level and with portable media. Having installed Ubuntu 14.04 ticking 'with disc encryption' enabled, it works very ...
1
vote
1answer
235 views

How to run an application on a sandbox? [duplicate]

I'm interested in running Skype on a sandbox. I don't want to use a virtual-machine however, since it's overkill just for a program. I don't need Skype's video or voice capabilities to work, chat ...
1
vote
1answer
68 views

New to Ubuntu-updates, security, on Acer Aspire One ZG5

All, I'm completely new to Ubuntu but am looking forward to working with it. I have an Acer Aspire One ZG5 (150?) from about 2008. From what I can gather, I should install 12.10 (this appears to be ...
0
votes
1answer
46 views

How to perform detail packet capture on Ubuntu firewall?

I've routed internet traffic of my other systems on this ubuntu linux system where I have configured packet forwarding. but still I am unable to get internet on other systems. Hence I want to ...
2
votes
1answer
43 views

Will creating a directory inside a system directory with 777 permission cause security vulnerability?

Can creating directories with 777 permission inside system directories cause any security weakness? For example, say I open a directory called Custom inside /usr/share/backgrounds/ and give it 777 ...
0
votes
1answer
105 views

Ubuntu 14.04 and 14.10 Can't login to some secure website logins

I can generally google to find solutions to problems I have with Ubuntu, but this one has me stumped. I have been using Ubuntu 14.04 for several months, on this computer. I use Chrome as my primary ...
2
votes
3answers
465 views

How can I tell if a CVE has been fixed in Ubuntu's repositories?

Today a couple of buffer overflows in NTP were announced 1, 2. It looks like updating my system to fix these issues is in order. How can I find out if they have been fixed in the Ubuntu ...
1
vote
1answer
54 views

Looking for network surveillance tool

I sometimes use / test software that cannot be found in the apt tree. The software comes from all over the internet. When executing the software I create an extra user for this particular software and ...
3
votes
2answers
256 views

Where to store a Keepass password file?

Where would you recommend me to store a Keepass file? Usually I have my personal documents in my Dropbox account. Would it be safe to use Dropbox for this file?
7
votes
2answers
252 views

/var/log suspicious entries

For fun I tailed /var/log/auth.log (tail auth.log) and there were many of the following: sshd[16225]: Received disconnect from 203.100.83.32: 11: Bye Bye [preauth] The ip appears to be from ...
0
votes
1answer
578 views

How can you test for a DNS leak for an OpenVPN provider?

I'm currently using VPNBook with OpenVPN. I just recently learned about DNS leaking. Is there a way to scan for it?
0
votes
1answer
58 views

How do I unlock system tools such as users and date and time

I'm using Ubuntu Server 14.04 with Gnome and suddenly I can't unlock system settings such as Users and time & date: the unlock icon is grayed out even though I'm an administrator and terminal ...
0
votes
1answer
262 views

Package with bad signature got instlaled on second try: how?

I executed my daily sudo apt-get update && sudo apt-get upgrade command, and got a bad signature error when hitting google chrome: Fetched 2178 kB in 2s (981 kB/s) Reading package lists... ...
3
votes
1answer
6k views

Can I install all the hacking tools of KALI on Ubuntu?

I want to know is there any way to install all hacking tools of kali on ubuntu 12.04 ? If yes then pls tell me how ? like sqlmap , nikto , john , aircrack-ng etc . Thanks.