Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
85 views

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption vulnerability) in Lubuntu 14.04 [duplicate]

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption) vulnerability in Lubuntu 14.04 and fix for the issue.
0
votes
0answers
7 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
18
votes
5answers
6k views

Is there a preinstalled or automatic firewall?

Does Ubuntu come with a preinstalled or automatic firewall? If not, do I need one? I've read some articles about the advantages of linux over other operating systems about security (no need to have ...
0
votes
0answers
19 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables
0
votes
1answer
421 views

Is fingerprint-gui a security hole?

I have a Thinkpad T440 on Ubuntu 14.04. I use fingerprint-gui to allow me to login and use sudo by swiping a fingerprint. The worrying part is that anyone can run the fingerprint-gui program to ...
21
votes
8answers
4k views

Where can I look for malware that may have been installed on my machine?

I want to analyze my ubuntu box to detect if it was been hacked. My question is: what are all the place where to look to discover if some malicious software are started ? The following is some kind of ...
0
votes
0answers
30 views

List only “security” related upgrades with apt-get upgrade

I'm interested in a shell command that can behave like apt-get dist-upgrade except only list/consider security related package upgrades. For example, limit it to packages in security.ubuntu.com or in ...
1
vote
1answer
38 views

restore patched bash to apt maintained

Last month I manually patched bash on a server running ubuntu 11.10 for the shellshock bug, as suggested in the comments here: What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I ...
0
votes
1answer
53 views

Ubuntu 14 home/personal use version of Windows Update or apt-get “Must Dos” for Security [closed]

What basic security measures should be taken for Ubuntu's distro for home/personal use. No apache or web server installed.
0
votes
1answer
249 views

Does Ubuntu 14.10 have the security fix for Shellshock bash exploit? [duplicate]

On the internet, I noticed there were Patches for the Shellshock vulnerability which is scaring me a lot. Does Ubuntu 14.10 have this automatically in it?
127
votes
5answers
93k views

What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?

Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
0
votes
0answers
19 views

Secure SSH Server from brute-force? [duplicate]

I'm just a newbie in Linux and recently got a VPS (Ubuntu 14.04 LTS Server). How can I secure its ssh server from brute-force attacks?
0
votes
1answer
76 views

Encryption [STANDARD] Ubuntu?

During the installation of Ubuntu I ticked the encrypt system and encrypt home folder boxes. But I have heard that it is foolish to encrypt the home folder when I already have encrypted my system. So ...
1
vote
1answer
10k views

ShellShock - bash already updated?

I'm trying to fix this new ShellShock bug on my PC (running Ubuntu 14.04). From what I've gathered, the simplest way to do this is to just update bash via the terminal (I've tested my system for the ...
0
votes
1answer
42 views

Samba - Windows Network

I was recently checking my network and realized Samba was installed. When I go to "browse network" in the file explorer I see that there is "windows network" and my home folder is located inside. My ...
55
votes
1answer
6k views

Can I make the webcam take a picture when an incorrect password is entered?

I am using a laptop . I was thinking to have a support in my Ubuntu machine. When an incorrect password is entered, a picture is taken later revealing who has been trying to gain access. I have ...
0
votes
0answers
136 views

how to install mod_security apache2.4

I was looking at my logs yesterday, when I saw a bot roaming folders I have in my robots.txt file. I tried to block it with a rule in my UFW firewall, but this did not keep them out. So then I was ...
0
votes
0answers
11 views

Restrict users ports

How could I go about restricting specific users access to ports based on a whitelist based system. I heard it can be done with SELinux (I do have it installed), but I haven't been able to work out ...
3
votes
2answers
841 views

How do I set up USB security key based authentication?

Is it possible to get Ubuntu to lock and unlock itself, if a particular USB stick is attached? For example; I sit down at my laptop; I plug the USB stick in and the system unlocks and presents ...
0
votes
1answer
224 views

shellshock vulnerability and super user

can shellshock vulnerability execute somehow commands with superuser permissions? And if yes, from where/how? It is possible to be executed commands from cgi yes, but is it possible to get executed ...
3
votes
1answer
378 views

ClamAV found infected files on Ubuntu server, what do I do now?

I checked the Ubuntu server using the command clamscan -r. I don't know whether or not the files were cleaned or deleted. This is a screenshot of the results: I'd like to know if these files still ...
1
vote
0answers
100 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
1k views

How do I know if my system is vulnerable to the ShockShell vulnerability? [duplicate]

The recently discovered ShockShell vulnerability affects many Linux and Mac systems, because they are using the vulnerable BASH shell. How do I know if I am vulnerable to this attack and how do I ...
2
votes
2answers
268 views

CVE-2014-6271 over ssh example attack?

I've been reading about the CVE-2014-6271 bug on lots of pages, but I'm still not able to understand how exactly is it possible to exploit it over ssh. From all I've read, I couldn't find an example ...
4
votes
2answers
3k views

CVE-2014-6271 bash patch trouble

I have a Ubuntu [EDIT] 12.04.4 LTS server that is vulnerable to the recent bash remote executable exploit. Ubuntu says they have released a patch here. I have run a sudo apt-get update && ...
2
votes
2answers
131 views

What dangers have the Apt bugs security holes (USN-2348-1) caused?

Just recently 4 bugs in the Packet Manager Apt (the main in Ubuntu) has been discovered. Especially bad for 12.04 LTS as 4 security holes have been found there. My question is to what dangers have ...
0
votes
0answers
277 views

How do I upgrade from 12.10 on a DigitalOcean droplet?

The recent ShellShock exploit has prompted me to upgrade my Ubuntu 12.10 server, as I cannot upgrade bash on it (I receive 404 errors on apt-get-update (somebody else with a similar issue)). I opened ...
1
vote
0answers
353 views

How to Patch for Shellshock [duplicate]

So, in light of this closed thread, and this article, how can we patch for the shellshock bug/exploit/vulnerability for currently supported Ubuntu versions? 13.10 and 14.04?
9
votes
5answers
45k views

Get root access for copying files to /usr/share/…?

To be short, I want to copy a folder to a location /usr/share/screenlets/.... in Ubuntu 10.04 system. I tried by logging in as root from terminal giving su. I even changed my user account type to ...
0
votes
0answers
40 views

rootkit hunter found suspect files

I recently run rkhunter and found 9 suspect files detected, why curl ,dpkg show warnings as shown in the image below what should i do to remove those warnings?
0
votes
0answers
195 views

rkhunter root kit warnings

After installing and running rkhunter I received a number of warnings. I followed the instructions here (as much as was relevant): ...
2
votes
0answers
61 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
1
vote
2answers
264 views

What's the status of encfs?

Is the encfs project no longer maintained? It seems the last update 1.7.4 was released on November 18 2010. In a security audit several weaknesses have been identified, but no updates have since been ...
0
votes
0answers
171 views

How to avoid chrome store password in seahorse?

I am very concerned about the unencrypted passwords saved by chrome in seahorse. This equipment is shared and used by several people, so any user with the root password can change my user password ...
36
votes
2answers
39k views

How to create a restricted SSH user for port forwarding?

ændrük suggested a reverse connection for getting an easy SSH connection with someone else (for remote help). For that to work, an additional user is needed to accept the connection. This user needs ...
0
votes
1answer
437 views

how to verify that sbin/init isn't infected?

for sometime chkrootkit has been showing sbin/init as being infected with SuckIt rootkit. early this year when the warning first appeared a quick google search indicated that it was most likely a ...
1
vote
2answers
346 views

How to access locked hard drive?

I have a hard drive with an old 12.04 server install and a data partition on it. I have the hard drive hooked up to my current desktop using a usb to sata adapter with external power supply. I am on ...
0
votes
1answer
23 views

How do I report an Ubuntu Software Center “Listing” problem?

How do you report a possible security risk to users in Ubuntu Software Center? There is two game apps in the Ubuntu Software Center called "Karts" and "Kart 1000..." Both: - Listed as free - But the ...
0
votes
0answers
37 views

Ubuntu 14.04 installation permission denied from HDD & external HDD

Title is self explanatory sadly; had no luck after getting past the security (for now) and the same from my Samsung external HDD Desperate trying to get this to work but no luck except on a virtual ...
1
vote
0answers
17 views

What kind of access flash has to our systems?

It seems like there is major security issue found in flash every other week or so. There was another one just yesterday. This and being closed source, I can't help but wonder, what kind of access it ...
0
votes
0answers
10 views

Questions about how malwares might operate under wine [duplicate]

a recent scan by clamav found that a few exe files in the WINE directory are infected with a trojan (called Ratnim?). A have a few specific questions on what a windows malware can do under linux. 1) ...
52
votes
2answers
63k views

How do I keep track of failed SSH log-in attempts?

I'd like to see if somebody has been trying to log-in by brute-force into my Ubuntu 12.04 server over SSH. How can I see if such activities have been taking place?
1
vote
0answers
133 views

Blocking HTTP requests without Host header using mod_security2

In my Apache configuration, I want to allow only Host header based vhosts. That is, I'd like to block any traffic by IP address only. I have mod_security2 installed, but I am only using the default ...
0
votes
1answer
111 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
0
votes
0answers
19 views

Ubuntu servers protection

Here is my needs : i need to protect data from being stolen on servers and Those servers are not physically secured. First i just wanted to base security solution on root password protection but ...
1
vote
1answer
556 views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
0
votes
1answer
24 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
99 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
0
votes
0answers
169 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
3
votes
4answers
293 views

Using NX Server Securely?

Recently, I built a computer running Ubuntu and gave it away to a relative. I'm willing to give them IT support for free, but they live 50 miles away. The Solution? A NX Server. I setup the Node, ...