Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

135
votes
18answers
47k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
1
vote
0answers
14 views

Is ClipIt safe? How would I test this? [duplicate]

I have seen that Clipit has an "Offline mode", which is described in this question. However, it shocked me as I thought that perhaps it was storing my data online, which would be a security concern. ...
-1
votes
1answer
49 views

using VNC with SSH securely

While I know there is a plethora of available information on how to set up VNC for remote desktop viewing, some of which outlines the importance of using SSH to ensure security, I want to know dome ...
0
votes
0answers
23 views

Make last command shows also sftp sessions

last command searches back through the file /var/log/wtmp (or the file designated by the -f flag) and displays a list of all users logged in (and out) since that file was created. On my Ubuntu ...
0
votes
4answers
144 views

looking for the valid md5 checksum for “ubuntu-14.04.4-desktop-i386.iso” file

After the LinuxMint incident, I am giving Ubuntu a try. I was one of the "winners" who downloaded on the day of the hack attack. So I just wanted to be extra sure that the md5 was okay, but I can't ...
0
votes
1answer
100 views

How can I get capabilities to work with su?

I added a line to /etc/security/capability.conf so I can have a user who can read everything for backups, but not do everything root can. cap_dac_read_search backup If I add a password and shell ...
5
votes
2answers
4k views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
1
vote
0answers
60 views

Is “oneconf-service” meant to be running?

I left my computer for a little while, and when I came back it told me that there was an internal error with oneconf-service, and though it (the process) is gone now, in the processes list in the ...
1
vote
0answers
80 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
0
votes
1answer
53 views

syslog-ng viewer that can display many log files of different IDS

I have three Intrusion detection systems installed (snort, modsecurity,ossec) and I want to visualize the generated log files of these IDS. Is there a Graphical User Interface that can display the ...
0
votes
2answers
57 views

Why is server restart required? [duplicate]

When logging into my Ubuntu instance I get the message *** System restart required ***. I am running a server and uptime is very important for me. How can I know why the restart is required? I have ...
6
votes
2answers
345 views

does rolling back the kernel in Ubuntu compromise security

I recently updated my kernel, and noticed that it was affecting my graphics drivers. As a quick fix I rolled back the driver , but would like to know if this affects my system security in any way? ...
1
vote
1answer
201 views

Missing Security & Privacy after upgrade

After a successful upgrade from Vivid 15.04 to Wiley 15.10 everything is working 100% fine. But I discovered I am missing the "security & privacy" option in system settings. It doesnt appear in ...
1
vote
1answer
90 views

Opening True Crypt volumes and files. 14.x

I have two drives in my computer. One boots Win7 the other Ubuntu 14. I have external USB drives with banking and other data that are encrypted with truecrypt. I don't want to use BitLocker and have ...
0
votes
0answers
31 views

Which are the security problems on running an http server using Python's built in module?

I've just read this post but I haven't got the necessary points to comment on it. I'm running, $ python -m http.server I wonder which are the security implications about it, with some examples. ...
4
votes
3answers
4k views

Which Ubuntu releases have fixes for CVE-2015-7547 (“Extremely Severe Bug” with libc getaddrinfo())? [duplicate]

Ars Technica posted an article describing the getaddrinfo() bug and how it is widespread in the Linux world. The vulnerability was introduced in 2008 in GNU C Library, a collection of open ...
0
votes
1answer
38 views

how to install update by CVE number

In Redhat and Suse i can run below command in order to install a specific CVE. for example: yum update --cve CVE-2015-7547 zypper patch --cve=CVE-2015-7547 in this also possible in Ubuntu? How ...
3
votes
2answers
285 views

Email on failed login attempt?

I was wondering if it is possible to set it up in such a way that on a failed login Ubuntu will send me an email? And of course if the computer is not connected to the internet when the attempt occurs,...
0
votes
3answers
90 views

Is sudo's bruteforce protection really helpful?

In this question: Why is there a delay when entering a wrong password? it appears that there is a 1-2 seconds timeout in sudo once it is given a wrong password in order to make cracking attempts more ...
0
votes
0answers
52 views

How to check if Ubuntu Touch device is really new?

I just got a new BQ Aquarius E4.5 Ubuntu Edition from the shop. However: Battery was totally discharged (0%) I was not asked to perform initial configuration After I installed terminal, output of "...
4
votes
3answers
1k views

How can I tell if a CVE has been fixed in Ubuntu's repositories?

Today a couple of buffer overflows in NTP were announced 1, 2. It looks like updating my system to fix these issues is in order. How can I find out if they have been fixed in the Ubuntu repositories,...
3
votes
2answers
36k views

How can I scan for possible viruses on my Ubuntu system? [duplicate]

I think I may have a virus. How would I go about checking for a virus and how can I protect my computer from any other virus? Please give detailed answer as I'm still learning about Ubuntu.
0
votes
0answers
19 views

Is it possible to run services with limited privileges?

I have a home server with some web and database services running (nodejs, postgres, neo4j). Later I intend to add a vpn server, so I will be able to access the services from the office. As far as I ...
3
votes
1answer
777 views

What is the 'libc gethostbyname buffer overflow' and how can I protect myself from it

Apparently there is a bug in the GNU C Library, that can cause a buffer overflow, how can I protect myself from it?! Reference: oss-security - Qualys Security Advisory CVE-2015-0235 - GHOST: glibc ...
0
votes
1answer
46 views

A buffer-overflow vulnerability in the GNU C Library

I came across this article by PC world informing about some serious vulnerability discovered by Google and Redhat a couple of days before, i am using Ubuntu latest version, and it's up-to-date, do i ...
0
votes
0answers
14 views

Vulnerability check for glibc Security Issue: glibc getaddrinfo stack-based buffer overflow [duplicate]

A security problem with getaddrinfo in GNU’s glibc was reported by Google Engineers How can I check if my systems are affected? (using ubuntu 14.04 LTS) How to fix this issue?
0
votes
0answers
24 views

Fake SSID's showing up in nm-applet

I've started noticing fake SSID entries showing up in the network manager applet under Ubuntu. These apparent base stations don't really exist (othe devices can't see them when they scan for WiFi ...
0
votes
2answers
42 views

How to encrypt hard disk? [closed]

Can I encrypt hard disks? If yes, then how? Can it be used for any individual drive or I will have to encrypt all at once?
0
votes
1answer
42 views

Can an infected USB infect my PC through sudo and/or home?

Can an infected USB infect my PC through sudo and/or home if it is under sudo (like cleaning it with sudo sgdisk --zap-all dev/sdb, sudo dd if=/dev/zero of=/dev/sdb, or even looking/changing ...
0
votes
0answers
49 views

Can ubuntu security updates restart services started via supervisord?

When unattended-upgrades install security patches for services like mysql, nginx or ssh, automatic demon restarts would get triggered. Will the same happen if I am running them via supervisord?
0
votes
1answer
76 views

How easy is it to get Linux.Ekoms.1?

I read about this malware, one of the biggest specimens of malware on the Linux news right now. How easy is it to get? Paranoia has gotten the better of me. According to the sites I visited, it is ...
0
votes
0answers
36 views

firefox on ubuntu triggers huge download in the background

I am using ubuntu 14.04.02, and firefox 44.0.2. Recently I noticed, my downloads were going really high but I never downloaded anything. After step by step debugging, I could find that the moment I ...
5
votes
1answer
6k views

How do I enforce a password complexity policy?

I need to configure an Ubuntu server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one special ...
0
votes
0answers
19 views

Automatic security upgrades, unattended-upgrades, and controlling when it does it

I have a linux server running a java app. The vendor indicates that 99+% of the time that one of their customers gets hacked, it's because they haven't installed JDK security upgrades in months. I'm ...
33
votes
9answers
14k views

How can I encrypt data in Ubuntu One or Dropbox?

I'd love to use Ubuntu One or Dropbox features, like file storage and so on, but I don't want anyone else to access my data, USA Patriot act etc.. I want things to be encrypted so that the only place ...
1
vote
0answers
69 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
3
votes
1answer
37 views

Security risks with fakeroot?

Is there a security risk having fakeroot installed on my system? I can't find much more than was is provided in the manpage.
15
votes
2answers
727 views

How can I further secure my system using 2 factor authentication?

The title pretty much says it. I have been hearing more about 2 factor authentication, one-time passwords, hard-tokens, and other improved security features. With the decreasing security of using just ...
1
vote
1answer
31 views

Ubuntu Mozilla Security, do I need this? General questions

I was searching for info on enabling/disabling javascript in firefox, some pages I need to have it function and without the java they're broke. I came across this and was wondering is this something ...
-1
votes
2answers
194 views

How to edit /etc/default/ntpdate and prevent ntpdate from ever running without uninstalling

Since both ntpd and ntpdate rely on ntp servers, and since the Ubuntu repos have yet to complete an update of ntp to 4.2.8p4 (the version recommended by ntp researchers), I expect this means that both ...
7
votes
2answers
7k views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v https://...
45
votes
4answers
22k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
0
votes
0answers
31 views

Restricting the Number of IP/TCP Connection Request Per Second Using Ubuntu Sever

I know what type internet connection my machines have and how much CPU/RAM they are using. So Is it possible to restrict the accepting number of IP/TCP connections per second at the OS level, before ...
5
votes
1answer
18k views

Restrict SSH Access to Specific IP for User

My /etc/ssh/sshd_config file has a line like: AllowUsers jim@11.22.33.456 If I want to allow jim to use another IP addresses, how do I specify it? Does it take the form of a comma separated list? ...
5
votes
3answers
6k views

ClamAV: PUA.Win.Exploit.CVE_2012_0110 FOUND (/usr/share/mime/mime.cache)

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: /...
0
votes
0answers
22 views

Run file when USB device inserted

I want to implement a strict policy of nobody being able to insert any USB device into my laptop. If someone inserts a memory stick, keyboard, light etc... into any USB PORT (while the computer is ...
51
votes
2answers
29k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...
1
vote
1answer
119 views

With secure boot disabled, is there long term vulnerability to malicious code (on 14.10 and 15.04/Win multiboot setups)?

In a nutshell: is it really a good safe idea to leave Secure Boot disabled? I have two laptops with LinuxMint,Xuntu, Ubuntu 14&5 Win 10 and Win 8.1 between them. Grub 2 works fine with /,/boot ...
1
vote
0answers
15 views

Securing a port in ubuntu with username and password

I have Elasticsearch running on 9200 port.I want to secure it and I dont want others to access the data stored in the index in ElasticSearch. How do I secure the port and limit its access using ...
91
votes
1answer
209k views

How do I scan for viruses with ClamAV?

I installed ClamAV via Terminal (Ctrl+Alt+T) with: sudo apt-get install clamav but how can I scan for viruses?