Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
1answer
50 views

Why the attack's ip address has a string 'dia'

This is a record from netstat –lnt | grep ^tcp: tcp 0 0 xx.xxx.xx.72:ssh 106.49.174.61.dia:55983 ESTABLISHED "x" is hidden by me :) my questions are: why does the address have ...
1
vote
2answers
27 views

Is an application in Ubuntu allowed to open other applications if it does not have elevated privileges?

Let's assume an application in Ubuntu is compromised. Since, by default, downloaded applications do not have root privileges, no major damage can occur. The worst a malicious hacker can possibly do ...
0
votes
1answer
68 views

Automatically installing security updates on desktop system more than once per day

I see that the GUI configuration for update-manager has a maximum check interval of once per day. I'm sure Canonical thought about this carefully, but these days I don't want to be without a ...
1
vote
0answers
48 views

Start programming [closed]

I am a beginner ubuntu user, and I am interested in learning a programming language. My demands are that I would like it to help me master the command line, and be a good base voor learning future ...
-10
votes
2answers
808 views

I think my PC is being hacked. What should I do? [closed]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
8
votes
2answers
3k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
0
votes
1answer
97 views

someone is using may sendmail to spam other

I have an Ubuntu (14.04.1 LTS) install on AWS with sendmail. I keep getting messages from mail servers that are unable to deliver some of my messages (I did not send) and all are about sex. So I ...
0
votes
1answer
34 views

gnuPG encrypt and decrypt folder

I use this command to compress and encrypt a directory: tar zcvf - /tmp/directory | gpg -c > /tmp/directory.tar.gz.gpg What is the command to decrypt and unpack at the same time?
1
vote
1answer
127 views

How do I prevent webcam hacks [closed]

I have read on many websites that there is an increasing number of attacks on webcams, based on viruses and similar software that allow third parties to gain control of the webcam of an attacked ...
11
votes
2answers
5k views

how to install KeePassX 2.0 Alpha on ubuntu

On the KeePassX site there is only a Linux version 0.4.3 for download. how can I install the latest version on Ubuntu? The problem is, that Version 0.4 is basically unmaintained. see: ...
-2
votes
3answers
46 views

Does Ubuntu accept purely random incoming connections outside the LAN by default (meaning ufw is disabled)? [closed]

By "purely random," I mean that the connection was not initiated by the Ubuntu user. EDIT: For example, think of a malicious SSH connection from a source outside the LAN.
1
vote
1answer
46 views

OSSEC user accounts disabled

I have recently installed OSSEC (2.8.1), and during the installation I noticed that it created some extra user accounts. But when viewing those user accounts in my System Settings > User Accounts ...
1
vote
2answers
82 views

permanent terminal with root [closed]

Is it bad to have at all times (one) terminal logged in as root? If so, why? (I leave the window with root terminal usually opened because it's much more comfortable than writing sudo before ...
0
votes
1answer
50 views

How to get a program to startup at start if it requires sudo to start

I have got a program which to start needs to be started with sudo, but as it would be very useful for this program to start up at startup without me having to manually start it, is there a way to get ...
6
votes
2answers
179 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
2answers
169 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
0
votes
4answers
65 views

can someone remotely access your ubuntu user account on your computer if they steal your ubuntu username and password

I would like to know if it is possible for someone who steals your ubuntu username and password to remotely access your ubuntu user account on your computer and even see what you are doing when you ...
52
votes
6answers
22k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
22
votes
3answers
14k views

How to block internet access for wine applications?

How can one prevent specific or any wine applications from accessing the internet? When using certain applications under Windows, they were trying to access the internet from time to time without ...
0
votes
2answers
19 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
12
votes
3answers
5k views

How to prevent system applications (like the Software Center) from asking for password?

I'd like Software Center, Update Manager and some other system management applications to work without asking for password (like sudo does if configured with NOPASSWD) but only asking for a ...
1
vote
2answers
25 views

mitigation of grub attacks

I want to disable the sing user mode attack performed at the grub level by passing kernel parameters. I know a solution that is putting the grub password & bios password.but I want to know ...
1
vote
1answer
95 views

Why system accounts given login shell on Ubuntu 12.04.5 Desktop

I did a fresh install of Ubuntu 12.04.5 64-bit Desktop from ubuntu-12.04.5-desktop-amd64.iso and was shocked to find the login shell of numerous system accounts was set to /bin/sh instead of ...
-1
votes
1answer
75 views

what is the best way to upgrade security patches on ubuntu 14.04

I am trying to upgrade security patches on production boxes. Need to know how can i plan this activity. I also need to make sure that in case something is wrong then how do i roll the updates.
1
vote
1answer
70 views

Am I part of a botnet?

I have Ubuntu 14.10. How do I check if my Ubuntu is part of a botnet? These are the addresses I found with netstat: tcp ESTAB 0 0 192.168.5.122:33195 213.199.179.157:40016 ...
0
votes
1answer
34 views

Is there a resource which lists Ubuntu Security Notices?

Every week, I check the Ubuntu Security Notices page, to see what's going on in the world of vulnerabilities. Is there anywhere the information from these posts is kept in a more reviewable format? ...
1
vote
1answer
54 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
1
vote
1answer
18 views

Which Ubuntu Source file implements the management of the nx bit?

As I understand it, Ubuntu has a feature to set the nx bit to prevent stack smashing attacks. What source code file implements this, and during normal operations what process/data structure handles ...
0
votes
0answers
113 views

12.04 auditd will not record user login and logoff to audit.log

Auditd only logs events of types CWD, PATH and SYSCALL. It never seems to detect events of type USER_LOGIN for example. I have enabled rules to catch these login/logout events but they do not seem ...
1
vote
2answers
71 views

Which is actual difference between package update and security updates?

This is probably a real noob question... I would like to understand what the "updates" alerts I get when logging onto my Lubuntu box actually mean. When I read: 35 packages can be updated. 22 ...
0
votes
0answers
18 views

What protocol does the system-wide proxy use?

I'm writing a SOCKS5 proxy (hoping to integrate native encryption options (4096 bit GPG encrypted exchange for the 256 bit AES communications cypher) because I'm bored and need something to do). When ...
1
vote
1answer
321 views

Prevent Skype resolvers getting your IP on Ubuntu

I am running Skype version 4.3.0.37 on Ubuntu 14.10, and I know that on the Windows version there is an option to only allow direct connections to your machine through Skype for Skype contacts, which ...
1
vote
2answers
46 views

how to prevent sudo from executing a non root file?

I want to prevent sudo from executing files not owned by root. so, to allow sudo run such file, I want the file to be: chown root:root filename chmod go-w filename Is it possible to limit sudo ...
18
votes
4answers
23k views

Which free VPN providers support Ubuntu?

Can't find any free VPN provider for Ubuntu. I tried looking into old questions but they seem to be outdated.
0
votes
1answer
123 views

linux detect interface promiscuous mode in my network

how can detect and get the name or mac adress or ip adress of any device in my network that the mode of its interface is promiscous script python. I need help, thanks.
3
votes
3answers
286 views

Why do I have new and strange networks (_not wifi_) in my network manager? 14.04

Ok, so I updated my system to 14.04 last week (running on a Dell XPS13 ultrabook- but I'm not a developer, not particularly technically minded). Some strange things happened with network manager. ...
0
votes
1answer
46 views

make my machine invisible for ping [duplicate]

I search solution to pevent my machine form the attack arp poisoning. I believe to make my device invisible for this haker If they want to ping my machine they have any reply. I don't khnow how I ...
0
votes
0answers
15 views

Is it true that all of updates are pgp signed?

Is it true that all of updates (auto-updates) are pgp-signed so hackers cant replace them by some type of attacks? Also does a pgp-signed downloaded soft from Muon Software Center and Ubuntu Software ...
7
votes
4answers
17k views

What rules to use for UFW?

I've decided to enable the UFW that comes with Ubuntu just to make my system even more secure (especially after watching a video of a person whose computer actually got infected!), and I've enabled ...
1
vote
0answers
65 views

Initramfs suddenly speaks IPv6 but no SSH login

I have been running a configuration with an encrypted root partition and network unlock via Dropbear in initramfs for some time on my Utopic Xubuntu Mediacenter. Since I am actively using IPv6 to ...
0
votes
1answer
112 views

why does not IPv6 (RFC 4941) privacy work?

I've followed instructions on https://docs.menandmice.com/pages/viewpage.action?pageId=6361024 It simply does not work, I have no Ipv6 starting with 2001::: , only the same as before. ...
-1
votes
2answers
37 views

Help with an assignment please [closed]

I have 2 questions I'm having trouble finding info for. Q1 what are names of 2 main editions for ubuntu? Q2 name 4 security features for ubuntu.
2
votes
1answer
973 views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
40
votes
1answer
120k views

How do I scan for viruses with ClamAV?

I installed ClamAV via Terminal (Ctrl+Alt+T) with: sudo apt-get install clamav but how can I scan for viruses?
1
vote
1answer
1k views

Why there is no password to root under Recovery Mode?

I am trying to understand this situation... Today I got a problem with de sudoers file since I modified and got problem whit this modification. So the only way to solve the problem was to modify the ...
0
votes
0answers
308 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
0
votes
0answers
14 views

webapps control and transparency review

there is a lack of information about this, most people just want to disable, for example what Amazon WebApp is doing ? does add referrals cookies ? does it sends any data like mouse pointer ...
1
vote
2answers
496 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
1
vote
1answer
297 views

How to run an application on a sandbox? [duplicate]

I'm interested in running Skype on a sandbox. I don't want to use a virtual-machine however, since it's overkill just for a program. I don't need Skype's video or voice capabilities to work, chat ...
0
votes
1answer
148 views

Macbuntu noobslab security

Is this site safe? Being sort of a security nut, im Wondering if it is safe to install Macbuntu theme, and icon pack from noobslab.com.I have would not be installing any of the other things (lightdm, ...