Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

3
votes
2answers
252 views

Email on failed login attempt?

I was wondering if it is possible to set it up in such a way that on a failed login Ubuntu will send me an email? And of course if the computer is not connected to the internet when the attempt occurs,...
0
votes
3answers
80 views

Is sudo's bruteforce protection really helpful?

In this question: Why is there a delay when entering a wrong password? it appears that there is a 1-2 seconds timeout in sudo once it is given a wrong password in order to make cracking attempts more ...
0
votes
0answers
52 views

How to check if Ubuntu Touch device is really new?

I just got a new BQ Aquarius E4.5 Ubuntu Edition from the shop. However: Battery was totally discharged (0%) I was not asked to perform initial configuration After I installed terminal, output of "...
4
votes
3answers
1k views

How can I tell if a CVE has been fixed in Ubuntu's repositories?

Today a couple of buffer overflows in NTP were announced 1, 2. It looks like updating my system to fix these issues is in order. How can I find out if they have been fixed in the Ubuntu repositories,...
2
votes
2answers
35k views

How can I scan for possible viruses on my Ubuntu system? [duplicate]

I think I may have a virus. How would I go about checking for a virus and how can I protect my computer from any other virus? Please give detailed answer as I'm still learning about Ubuntu.
0
votes
0answers
19 views

Is it possible to run services with limited privileges?

I have a home server with some web and database services running (nodejs, postgres, neo4j). Later I intend to add a vpn server, so I will be able to access the services from the office. As far as I ...
3
votes
1answer
773 views

What is the 'libc gethostbyname buffer overflow' and how can I protect myself from it

Apparently there is a bug in the GNU C Library, that can cause a buffer overflow, how can I protect myself from it?! Reference: oss-security - Qualys Security Advisory CVE-2015-0235 - GHOST: glibc ...
0
votes
1answer
45 views

A buffer-overflow vulnerability in the GNU C Library

I came across this article by PC world informing about some serious vulnerability discovered by Google and Redhat a couple of days before, i am using Ubuntu latest version, and it's up-to-date, do i ...
0
votes
0answers
14 views

Vulnerability check for glibc Security Issue: glibc getaddrinfo stack-based buffer overflow [duplicate]

A security problem with getaddrinfo in GNU’s glibc was reported by Google Engineers How can I check if my systems are affected? (using ubuntu 14.04 LTS) How to fix this issue?
0
votes
0answers
24 views

Fake SSID's showing up in nm-applet

I've started noticing fake SSID entries showing up in the network manager applet under Ubuntu. These apparent base stations don't really exist (othe devices can't see them when they scan for WiFi ...
0
votes
2answers
40 views

How to encrypt hard disk? [closed]

Can I encrypt hard disks? If yes, then how? Can it be used for any individual drive or I will have to encrypt all at once?
0
votes
1answer
37 views

Can an infected USB infect my PC through sudo and/or home?

Can an infected USB infect my PC through sudo and/or home if it is under sudo (like cleaning it with sudo sgdisk --zap-all dev/sdb, sudo dd if=/dev/zero of=/dev/sdb, or even looking/changing ...
0
votes
0answers
47 views

Can ubuntu security updates restart services started via supervisord?

When unattended-upgrades install security patches for services like mysql, nginx or ssh, automatic demon restarts would get triggered. Will the same happen if I am running them via supervisord?
0
votes
1answer
72 views

How easy is it to get Linux.Ekoms.1?

I read about this malware, one of the biggest specimens of malware on the Linux news right now. How easy is it to get? Paranoia has gotten the better of me. According to the sites I visited, it is ...
0
votes
0answers
36 views

firefox on ubuntu triggers huge download in the background

I am using ubuntu 14.04.02, and firefox 44.0.2. Recently I noticed, my downloads were going really high but I never downloaded anything. After step by step debugging, I could find that the moment I ...
5
votes
1answer
5k views

How do I enforce a password complexity policy?

I need to configure an Ubuntu server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one special ...
0
votes
0answers
15 views

Automatic security upgrades, unattended-upgrades, and controlling when it does it

I have a linux server running a java app. The vendor indicates that 99+% of the time that one of their customers gets hacked, it's because they haven't installed JDK security upgrades in months. I'm ...
32
votes
9answers
14k views

How can I encrypt data in Ubuntu One or Dropbox?

I'd love to use Ubuntu One or Dropbox features, like file storage and so on, but I don't want anyone else to access my data, USA Patriot act etc.. I want things to be encrypted so that the only place ...
1
vote
0answers
64 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
3
votes
1answer
33 views

Security risks with fakeroot?

Is there a security risk having fakeroot installed on my system? I can't find much more than was is provided in the manpage.
15
votes
2answers
716 views

How can I further secure my system using 2 factor authentication?

The title pretty much says it. I have been hearing more about 2 factor authentication, one-time passwords, hard-tokens, and other improved security features. With the decreasing security of using just ...
1
vote
1answer
29 views

Ubuntu Mozilla Security, do I need this? General questions

I was searching for info on enabling/disabling javascript in firefox, some pages I need to have it function and without the java they're broke. I came across this and was wondering is this something ...
-1
votes
2answers
169 views

How to edit /etc/default/ntpdate and prevent ntpdate from ever running without uninstalling

Since both ntpd and ntpdate rely on ntp servers, and since the Ubuntu repos have yet to complete an update of ntp to 4.2.8p4 (the version recommended by ntp researchers), I expect this means that both ...
7
votes
2answers
7k views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v https://...
45
votes
4answers
22k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
0
votes
0answers
30 views

Restricting the Number of IP/TCP Connection Request Per Second Using Ubuntu Sever

I know what type internet connection my machines have and how much CPU/RAM they are using. So Is it possible to restrict the accepting number of IP/TCP connections per second at the OS level, before ...
4
votes
1answer
18k views

Restrict SSH Access to Specific IP for User

My /etc/ssh/sshd_config file has a line like: AllowUsers jim@11.22.33.456 If I want to allow jim to use another IP addresses, how do I specify it? Does it take the form of a comma separated list? ...
5
votes
3answers
6k views

ClamAV: PUA.Win.Exploit.CVE_2012_0110 FOUND (/usr/share/mime/mime.cache)

I recently scanned my system with (I am running the latest version of ClamAV and my definitions are up-to-date): sudo clamscan -r --detect-pua --infected --bell / And this one was of the results: /...
0
votes
0answers
22 views

Run file when USB device inserted

I want to implement a strict policy of nobody being able to insert any USB device into my laptop. If someone inserts a memory stick, keyboard, light etc... into any USB PORT (while the computer is ...
50
votes
2answers
29k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...
1
vote
1answer
93 views

With secure boot disabled, is there long term vulnerability to malicious code (on 14.10 and 15.04/Win multiboot setups)?

In a nutshell: is it really a good safe idea to leave Secure Boot disabled? I have two laptops with LinuxMint,Xuntu, Ubuntu 14&5 Win 10 and Win 8.1 between them. Grub 2 works fine with /,/boot ...
1
vote
0answers
13 views

Securing a port in ubuntu with username and password

I have Elasticsearch running on 9200 port.I want to secure it and I dont want others to access the data stored in the index in ElasticSearch. How do I secure the port and limit its access using ...
89
votes
1answer
203k views

How do I scan for viruses with ClamAV?

I installed ClamAV via Terminal (Ctrl+Alt+T) with: sudo apt-get install clamav but how can I scan for viruses?
0
votes
0answers
26 views

encfs reset settings to standard

I do not correctly identify the customizations when it first installs. Encrypted data is now not displayed. How to reset the settings to standard?
2
votes
2answers
383 views

Should I use use .htaccess to secure Wordpress, or can I use the virtual host config file? [closed]

I`m using apache2 on ubuntu 11. I want to secure my wordpress site with .htaccess rules, but I understand that it is preferable to put the rules in the apache config file (httpd.conf). If I ...
56
votes
6answers
27k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
9
votes
3answers
9k views

Google Authenticator for Desktop (lightdm or gdm plugin)

There has a been a similar question, but that's not exactly what I want. I'd like to know if there is a plugin, or add-on, for lightdm or gdm that allows me to authenticate using my password AND ...
0
votes
4answers
59 views

What is the reasoning behind hiding characters when entering the sudo password?

When entering the sudo password, the • characters are hidden. Apparently the • are omitted for better security. They seem secure enough to me, and I don't see why they're not used. I think I'm ...
-1
votes
2answers
80 views

Is firefox safe to use on Ubuntu/Linux? [closed]

While using Firefox on Ubuntu, I frequently run into warnings from various sites (recent examples: when checking gmail, www.hitrecord.org), that inform me that I am using an outdated/unsupported ...
0
votes
0answers
37 views

UFW ACCEPT Problem

I'm having problem with UFW. If i block like whole /24 network becouse lots of bruteforcing etc. coming from China / Korea or somewhere. They still get to open ports. If i have, lets say port 443 ...
15
votes
3answers
1k views

Unsupported Ubuntus - is it safe to continue with them?

I'll try to be as clear as I can about this, hoping to get clear answers. I have Ubuntu Studio 15.10, which is not an LTS version, and will only be supported till July 2016. Does that mean there ...
0
votes
1answer
60 views

istartsurf on chomium

A few days ago I noticed that I'd got the istartsurf malware in Chromium on my Ubuntu laptop despite being careful of which software I'm installing, but anyway. So I reinstalled Ubuntu on my laptop ...
32
votes
14answers
15k views

Why is there no option to login as root?

Why does Ubuntu not allow the GUI users to login as root at the time of system start up like administrator in Windows? Why they are restricting us to login only through the terminal?
-1
votes
1answer
40 views

Of what help is SE linux to me?

i am new to Linux. I have heard about SE linux ... how does it work with Ubuntu and what can i do with it?
0
votes
0answers
34 views

NTP question on ntpdc -c peers

I just started learning networking. I recently installed ntp on Ubuntu 14.04 running in Virtualbox on OS X. I was just trying to understand how it works. so when I executed ntpdc -c peers command in ...
16
votes
2answers
5k views

New Zero-day exploit reportedly found affecting Linux/Android (CVE-2016-0728)

Russia Today reports (20 January 2016) that there is a new zero-day exploit that has been discovered affecting Linux and all Linux-based OSes for computers and phones. What is the deal; how does it ...
1
vote
2answers
145 views

Auto unlock keyring on auto login without leaving password unencrypted

So I keep getting this unlock keyring popup when I login to Ubuntu automatically. There is a fix here: How can I stop being prompted to unlock the 'default' keyring on boot? I have been googling ...
6
votes
2answers
1k views

How do I allow a user to only run the apt-get update command with sudo?

I cannot figure out how to allow a user (in this case test) to only be able to run the apt-get update command with the sudoers file. When ever I try to add the user and then test it out it still does ...
1
vote
0answers
21 views

How to only allow a file to be opened or executed by certain application(s)?

Let's say that I've got a security application (or something which I just don't want any old application or user to have access to because it is very important and if the wrong guys had access to it ...
0
votes
1answer
80 views

A question about the last security update for Ubuntu (“ATTENTION: Due to an unavoidable ABI change…”) [duplicate]

I'm subscribed to the Ubuntu Security Notes, so everytime that I receive an e-mail, a new update is avalable. But in the last update, they wrote something in the end that I coudn't undertand much, so ...