Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
84 views

Manage passwords in Chromium --> security risk?

I realized that in Chromium (and also Chrome) for Linux it is possible to see all saved passwords in clear text. That seems a bit strange to me... after a short research I found out that it is not ...
5
votes
2answers
17k views

Driver for Validity Sensors Fingerprint scanner

prakhar@pr3d4tOr:~$ lsusb -s 001:003 -v Bus 001 Device 003: ID 138a:0018 Validity Sensors, Inc. Fingerprint scanner Couldn't open device, some information will be missing Device Descriptor: bLength ...
0
votes
0answers
58 views

Connecting to eduroam with CA certs

I have been around on every forum I could find and nothing helped me. I'm running Linux Mint 17.2 Cinnamon and I cannot figure out how to connect my computer for the life of me. I have tried this ...
105
votes
8answers
75k views

How to delete file(s) in secure manner?

Is there a way to make sure that a deleted file can not be recovered? As you know, deleting a file by pressing shift-del or using trash doesn't mean that file is gone forever. It resides somewhere ...
1
vote
1answer
112 views

Locking down an apache server - Prevent '/' page from being visible to all

I first installed Apache as part of a ZoneMinder setup. I then added to the server with an ownCloud setup. All this is only accessible to LAN or to WAN-through-ssh and that part works great. I now ...
1
vote
1answer
47 views

security risk of changing user in nginx server

I am planning to set up a server on a spare computer. I plan to use Ubuntu server 14.04 with nginx and php. I know that it is generally safe not to run a server as root user but is it ok if I set it ...
0
votes
2answers
43 views

Does sudo password protects me from networks hazards? [closed]

Do I need a good sudo password if I don't care about local unauthorized access (by another person) ?
3
votes
2answers
94 views

How to automate the process of checking an Ubuntu ISO SHA256sum

I know that I can get the SHA256sums (and MD5sums) from http://releases.ubuntu.com/ as they are provided now within the folders, but is there any way of automating the checking process so that the ...
0
votes
1answer
49 views

Ubuntu keeps asking me for Gmail passworld

I'm using Ubuntu 15 and everything was fine till i decided to use evolution. Evolution failed to connect to Gmail and since then it asks me to enter my password for my Google account. according to ...
0
votes
0answers
13 views

How to make denyhosts handling tuple username-IP?

I would like to add a user to restricted-usernames file in the same time as denyhosts adds its IP to hosts.deny. Also, when Denyhosts purges a host, I would like to remove this username from ...
4
votes
1answer
591 views

How can I add an SSL client certificate/key globally in Ubuntu?

I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
1
vote
0answers
32 views

WiFi does not connect anymore after libgcrypt

I am a total beginner in Ubuntu. I am using Ubuntu 15.04 and everything was working fine, until I tried to install Spotify. This required the installation of libgcrypt11, which was succesfull. ...
0
votes
0answers
87 views

Non-root user SFTP & /var/www/html permissions

So I set up a new Ubuntu 14.04 server with Wordpress and I've created a non-root user admin1 and set up certificate based authentication. I'll be using Secure FTP/SFTP content up to the server as ...
0
votes
0answers
16 views

My pid just jumped from 2000 to 4000

In resent days i noticed that if I do #ps aux there is a gap in my id #s. It started that i needed to kill my citrix receiver very often (due to lack of acceptance of Linux systems on my work ...
0
votes
0answers
10 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
0
votes
1answer
53 views

How to check security on Ubuntu

Today while I was trying to install a new software via software center, my password stopped working, that was strange for me after that situation I tried searching askubuntu.com to reset my user ...
0
votes
1answer
89 views

Is TOR breaking TLS for e-mail transport encryption to collect user credentials (security hole)?

EHLO response from mail server for starting encrypted TLS protocol when connecting to SMTP to send mail appears modified from STARTTLS to AUTH PLAIN when sent through tor instead of plain TCP. In ...
2
votes
2answers
70 views

Can I create a panic button in Ubuntu?

In case I'm ever raided or realise that I'm being spied upon whilst using my computer, is there a way in Ubuntu I can have a pre-set 'panic button' or series of keys that can log me out or secure my ...
2
votes
2answers
4k views

For more security: overwrite empty disk space

I know it might seem a stupid question but I haven't come across any forum or post on the internet about: - What does "overwriting an empty disk space" mean/do? - Why doing that makes it more ...
1
vote
2answers
197 views

ip forwarding enabled at every boot

Recently I noticed that cat /proc/sys/net/ipv4/ip_forward returns 1, something that is not recommended and I generally do not enable things I do not need that increase my attack vector. I thought, ...
2
votes
3answers
628 views

How can I create a hardened Virtualbox image for PenTesting?

As a serious security researcher, I'm looking for an answer to securing a Ubuntu installation against unwanted intrusion. This should include how I can: Log and alert remote connection attempts, Log ...
12
votes
2answers
484 views

I can get into my administer account on my Ubuntu without typing in the password how do I disable it?

I have a password on my Ubuntu computer, but if I just click the arrow next to login I can get into my account. I want to disable this, because my brothers have gone on and I don't want them to. Also, ...
9
votes
3answers
31k views

How can I open Java's Control Panel?

How can I open Java's Control Panel to change the security settings?
1
vote
1answer
649 views

Is there a VPN Monitor/Kill Switch application for Ubuntu?

Hi I am looking for a VPN Monitor/Kill Switch application that will ensure my VPN connection is always connected. Should my secured connection drop, the application will drop the applications that ...
61
votes
3answers
40k views

Difference between PGP and GPG

What are the main differences between PGP (Pretty Good Privacy) and GPG (GNU Privacy Guard) in relationship with security in Ubuntu and Launchpad?
2
votes
1answer
978 views

How can I allow a user to stream my videos securely?

I've got a script that records 10 minute videos from a webcam to video1.mp4 video2.mp4 video3.mp4 video4.mp4 Then records over video1 again in rotation. I'd like one user to be able to view these ...
-1
votes
2answers
131 views

How does usermod allow you to bypass sudo?

My team had a show-n-tell recently and I presented my findings on Docker. I explained how you can install Docker with: curl -sSL https://get.docker.com/ | sh I then explained that, with this ...
14
votes
6answers
12k views

Ubuntu One behind a proxy, how to make it work?

I am behind a web proxy server at work (no authentication) and I have set it up in Gnome (configuration applied system-wide). It works fine for accessing internet with a browser, but numerous ...
1
vote
0answers
54 views

NoScript syncing?

I have just noticed that after firing up my browser (after a NoScript update) I am getting strange reports of syncing in association with NoScript: When selecting Copy from the right-click menu on ...
5
votes
3answers
5k views

Disable usb mass storage

I want to disable usb mass storage on Ubuntu desktop 10.04, 11.04 and 11.10. As security policy to avoid data leakage. But in case of emergency there easy way getting usb mass storage back.
3
votes
1answer
91 views

Does passing passwords as plain text arguments reduce WiFi network security?

This app uses the command line to create a WiFi access point with this command: create_ap wlan0 eth0 MyAccessPoint and you can also make a WPA + WPA2 network with this command: create_ap wlan0 ...
0
votes
2answers
353 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
12
votes
4answers
6k views

How to prevent system applications (like the Software Center) from asking for password?

I'd like Software Center, Update Manager and some other system management applications to work without asking for password (like sudo does if configured with NOPASSWD) but only asking for a ...
3
votes
2answers
2k views

Untrusted Application Launcher

So I'm trying to create a desktop icon for an application, and I dragged it from the top-left menu (I think it's called Dash or something). I clicked on it and it says it is untrusted and refuse to ...
1
vote
1answer
5k views

changed permitrootlogin to no, but I can still login as root

I just created a new server (VM) and I setup SSH, I can login fine. I created another user account, added it to the admin group and sudo works fine. Now I want tried to disable the root login, so I ...
23
votes
3answers
2k views

What automated intrusion notification/detection setup is good for home desktop use?

I've been using Linux for quite a while now and I always feel the need to have a passive software / script setup which can alert me of any suspicious network activities like scans, failed login ...
2
votes
0answers
31 views

Files created in Ubuntu are given permissions to “Everyone” in Windows by default

I switch between Ubuntu and Windows7 workstations. I created a new text file in Ubuntu with some passwords and logins. Saved the file on an external drive. Now in Windows when I select the file the ...
0
votes
0answers
19 views

How to fix Faq-O-Matic fom.cgi XSS security issue

I hope someone can help me. I ran a security check against my server and it gave me a security warning about Faq-O-Matic. I need to find a way to fix this security error. I have googled and lots of ...
0
votes
2answers
6k views

How to remove malware?

I use ubuntu 32 bit and chrome's infected with the softwareupdaterlp virus. I don't really know what steps I should take aside from resetting/re-installing chrome. Would really appreciate any tips on ...
3
votes
0answers
78 views

After editing root .bashrc Unable to login even with tty1-6 and drop to prompt command from recovery mod

I have had the worse two weeks started with Ubuntu 12.04 , and updating to 14.04 had problem , just after a good luck of successfully installing brand new ubuntu 14.04 I now got the nightmare again ...
2
votes
1answer
2k views

.android Folder and adbkey Files

Today I discovered a folder in my home directory with the name ".android". Inside the folder are just two files, "adbkey" and "adbkey.pub". I have searched around and have found out that adbkey.pub ...
1
vote
0answers
32 views

Is there a deadman's switch feature in Ubuntu?

Is there a function in Ubuntu or that can be added that would create a deadman's switch? In effect, I would like to have a feature that, when I'm working on a specific sensitive file, periodically ...
0
votes
2answers
43 views

Why do I no longer receive any security updates?

I haven't received any security updates this past week. How do I check in terminal if everything is updating correctly?
1
vote
1answer
45 views

“allow executing file as program” box was already marked in the files I downloaded

I learned that, in order to install a program, one should make the downloaded file executable by going to its properties and marking the "allow executing file as program" box. I understand this as a ...
0
votes
0answers
62 views

SNORT - configuration to use it with VPN

my all network traffic goes trough VPN. Status of ufw: Default: deny (incoming), deny (outgoing), disabled (routed)/ ALLOW OUT Anywhere on tun0. snort.conf - http://pastebin.com/rvyYcCke ...
1
vote
1answer
79 views

Prevent pdf file's content from modifying

How can I create a read-only pdf file in Ubuntu?
0
votes
0answers
75 views

OpenVPN Disconnects every 60 minutes and asks to login again

I am running Ubuntu 14.04. I have installed openvpn. I use the vpn by enabling it thru the terminal with Sudo openvpn (filename), then I login and it connects fine. I have noticed that it will ...
3
votes
1answer
471 views

freeradius refuses to start because it says OpenSSL is vulnerable

I work with Ubuntu 14.04 and I can't start the freeradius deamon (freeradius-server-3.0.9). I have this error that I cannot solve: Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 ...
0
votes
0answers
24 views

Do I need to install antivirus on my linux system? [duplicate]

Am new to kubuntu and this is my first post in this forum. Do I need to install antivirus on my linux system? I hear people say linux-base is more secure than windows. Does that mean I should not ...
20
votes
4answers
60k views

How to disable IPv6 permanently?

How can we disable IPv6 system wide via terminal commands? I've read editing /etc/modprobe.d/aliases and replacing: alias net-pf-10 ipv6 with: alias net-pf-10 off alias ipv6 off Is this safe ...