Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

-1
votes
2answers
61 views

What is MAC spoofing in the internet connections manager and does it have any benefit in terms of security? [closed]

What is MAC spoofing in the internet connections and does it have any benefit in terms of security? What is the purpose of cloning the mac or spoofing it? Does it help protect against hackers at ...
1
vote
0answers
35 views

New System account created automatically [closed]

This is weird. Last night, I started to download a movie from a torrent site, and I fell asleep. When I woke up, the download was finished and There is another user account created in my system named ...
32
votes
1answer
1k views

How to find my lost Ubuntu laptop?

I am running Ubuntu on my laptop. In case if I lose my laptop or it gets stolen, is there any way to locate it? Do I have to install any application beforehand to find my laptop?
20
votes
5answers
10k views

Package denyhosts in Ubuntu Trusty Tahr is deleted: temporary or forever?

While doing a test-upgrade of our Ubuntu server to 14.04, I found that the package DenyHosts is no longer available. Installing it gives following error: apt-get install denyhosts Reading package ...
0
votes
2answers
144 views

Will support for 14.10 stop this year? [duplicate]

A month back I have transitioned from Windows to Linux and I have utopic installed in my system. No complaints till now! :D What I wanted to know was as this is not an LTS release, will I face ...
3
votes
1answer
2k views

CVE-2015-0235 How to update eglibc to 2.15-0ubuntu10.10

I followed these instructions and found that my glibc version was 2.15-0ubuntu10.9. How do I update it to 2.15-0ubuntu10.10? It is also mentioned here that services have to be restarted after the ...
0
votes
2answers
108 views

ubuntu antivirus [duplicate]

Why I need to use anti virus like clam-av clam-tk or commodo anti virus or any free anti virus in Ubuntu ? Note: if I've root login enabled.and I am running few windows programs inwine1.6. will ...
0
votes
0answers
30 views

How force Logcheck to report fail2ban bans?

I'm using Logcheck to take care of my logfiles and suspicous activites. I also installed fail2ban and get sometimes... I would like to be informed then fail2ban blocks an ip.. but logcheck is not ...
0
votes
0answers
31 views

Can't access IRC on WiFi

I had been away from Ubuntu for quite a while, but now I fully migrated to it, and I'm quite happy with it. However, after a year or so, when I tried to login to Freenode, I saw that I can not connect ...
0
votes
2answers
896 views

How to remove malware?

I use ubuntu 32 bit and chrome's infected with the softwareupdaterlp virus. I don't really know what steps I should take aside from resetting/re-installing chrome. Would really appreciate any tips on ...
1
vote
1answer
389 views

“Your Java version is out of date.” on Ubuntu 2014.04

With fully updated Ubuntu 2014.04, Firefox tells me: Your Java version is out of date. How to update Java? Typing java -version in a terminal tells me: java version "1.7.0_51" Java(TM) SE ...
0
votes
1answer
21 views

So I used fixubuntu as a privicy measure, what other precations should I take using Ubuntu Linux?

Yes, I just want a privacy preserving OS, I know it's not 100% possible but I'd like to get as close as I can. Thanks
2
votes
1answer
71 views

How can I prevent people to see what application(s) I have opened?

I don't want people to see what applications I have opened. I would like to be able to instantly hide the windows with a shortcut key combination, so I can save my work afterwards. I also want to hide ...
0
votes
1answer
85 views

How can I use public-key encryption for luks?

I have been running luks with the following commands: $ sudo dd if=/dev/urandom of=/keyfile bs=1024 count=4 $ sudo cryptsetup luksFormat /dev/XXX keyfile $ sudo cryptsetup luksDump /dev/XXX And it ...
0
votes
0answers
93 views

minimal data showing in auth.log

I have locked my server down and to help troubleshoot any holes, I look in the logs, especially auth.log. In the logs, it shows that there are attempts to log in but no data shows. I am not able to ...
28
votes
2answers
1k views

Should security updates always be installed?

We are a small shop, with no real sysadmin. So developers (Java EE) also try to maintain Ubuntu server 12.04. When I login a terminal and I see messages like: 6 packages can be updated. 6 updates ...
1
vote
2answers
278 views

How to backup encrypted home in encrypted form only?

I want to backup the encrypted home of a user who might be logged in at backup time. Which directories should I backup if I want to ensure that absolutely no plaintext data can be leaked? Are the ...
2
votes
0answers
102 views

How to config PORT KNOCKING on CSF ubuntu server and access it by linux?

I'm trying to run port knocking work on a CSF on a small VPS, i setup this: 1 - the result of csf first test ok 2 - TCP_IN = "53,80" TCP_OUT = "53,80,113,443" UDP_IN = "53" UDP_OUT = "53,113,123" ...
1
vote
2answers
77 views

SSD & Security & wipe Oh My

So SSD's are memory based, and therefore solid state, meaning that they have no mechanical parts like a a regular spinning hard drive. How does this affect the need to wash empty disk space and will ...
2
votes
2answers
1k views

Should I be worried about a possible threat?

I recently installed Ubuntu 12.10. I use Clamav and have scanned my system regularly for infections. Today it picked up a potential threat ...
1
vote
1answer
110 views

Are all PHP security upgrades backported to Ubuntu 12.04 until 2017

I recently came across an extension to a popular CMS that would not install on an Ubuntu 12.04 server, because PHP version 5.3 reached end of live. I was however under the impression that all security ...
2
votes
1answer
1k views

Ubuntu 12.04.5 LTS won't update libc6 to 2.15-0ubuntu10.10

In light of CVE-2015-0235, I set out to upgrade my Ubuntu Servers today. I have a 12.04.5 LTS server that refuses to update my libc6 package to the version that does not contain the vulnerability ...
0
votes
1answer
437 views

How to only install security updates [duplicate]

Is it possible to only install the security updates. If this is possible it needs to be done on several servers and ubuntu virtual machines (Manually in command line) . I already tried a few ...
3
votes
1answer
601 views

What is the 'libc gethostbyname buffer overflow' and how can I protect myself from it

Apparently there is a bug in the GNU C Library, that can cause a buffer overflow? What exactly is it, and how can i protect myself from it?! Reference: oss-security - Qualys Security Advisory ...
0
votes
0answers
119 views

How can I disable all locking in 14.10?

I don't want the machine to prompt for password on resume from suspend, I don't want the machine to lock after a certain period of inactivity. At the moment, I only want it to lock a) when it boots ...
5
votes
2answers
1k views

How to truly secure a hard-drive?

When I boot from an USB stick into my laptop I am able to mount and connect through chroot to the my hard drive and browse my files without a problem, while this has been something very very useful in ...
46
votes
5answers
61k views

How to encrypt individual folders?

Let's say that I have a folder, within my Documents folder, that has files I want no one to access without a password. Is there a way to lock down that folder so that it's password protected / ...
4
votes
2answers
1k views

Can ecryptfs-setup-private be made to use a 256 bit AES key (instead of the default 128 bit key length)?

ecryptfs-setup-private will by default use an AES 128 bit key. Can I make it use a 256 bit key (32 bytes key length)? Of course, I could do the whole process manually as described here: ...
18
votes
3answers
28k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
2
votes
1answer
29 views

Is there a way to tell which application last accessed your camera?

Is there an application which will tell me which programs have last accessed my camera?
0
votes
1answer
47 views

How to password-protect an individual folder

I have to password-protect two folders: folder A is on my computer's hard drive, and folder B is on an external hard drive. Regarding folder A: I have tried encrypting folder A using Cryptkeeper but, ...
0
votes
0answers
47 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
11 views

Why is Ubuntu only using SHA1 for WDE?

I'm wondering. In times where Hardware gets faster every week and all the NSA thingies about Snowden and such, why is Ubuntu still using Sha1 when encrypting the system over the GUI (the installer) I ...
0
votes
2answers
73 views

Is it safe to download and open files? [closed]

I understand that a virus and malware can exists in Linux. However, I have read a lot about how Linux is not vulnerable to viruses because of a variety of reasons. So does that mean that I can ...
5
votes
1answer
74 views

Is universe checked by the Ubuntu Security team?

I have a generall question regarding the Ubuntu universe repository. Does anybody know if they are checked by Ubuntu Security Team? Will they move or delete packages if any problem is encountered ...
0
votes
0answers
55 views

Asus K52Jr webcam notification LED always lit

I have been using Ubuntu 14.10 on my Asus K52Jr notebook for some time now, and this always bothered me. The webcam's LED is always lit (on Windows it only lights up if it's in use), and I'm concerned ...
0
votes
0answers
70 views

java security prompt even with exception list

I'm trying to run an applet of a website, and a prompt pops up with "Application blocked by security Java" but I have this website on the exception list! I'm running ubuntu 14.04 and Java Version 8 ...
4
votes
3answers
639 views

Where can I find the SHA256 hashes of Ubuntu images?

I'm trying to securely validate the hash of a downloaded ubuntu-11.04-alternate-amd64.iso but it seems I just can't find any. I found this site: https://help.ubuntu.com/community/UbuntuHashes but ...
0
votes
1answer
689 views

How to add user from apache user group in linux

The question is simple. How we can add user without root privileges (because www-data is very important for security)? For example adding user with root user: sudo adduser user group Without root ...
3
votes
3answers
2k views

Packet Sniffer found, what next?

After a download yesterday my computer crashed. I updated today and checked for rootkits. I found a packet sniffer eth0: PACKET SNIFFER(/sbin/dhclient[3966]) How can I remove this?
1
vote
1answer
65 views

ip forwarding enabled at every boot

Recently I noticed that cat /proc/sys/net/ipv4/ip_forward returns 1, something that is not recommended and I generally do not enable things I do not need that increase my attack vector. I thought, ...
1
vote
2answers
73 views

Can Port Forwarding to a Windows VM cause Security problems? [closed]

I have question. My physical host is Ubuntu 14.04. I installed Virtualbox with a Windows Server 2012 VM with IIS. I set port forwarding from my Ubuntu host to my vm. If my virtual Windows Server ...
2
votes
0answers
146 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
23
votes
2answers
32k views

How can I allow SSH password authentication from only certain IP addresses?

I'd like to allow SSH password authentication from only a certain subnet. I see the option to disallow it globally in /etc/ssh/sshd_config: # Change to no to disable tunnelled clear text passwords ...
0
votes
0answers
116 views

Migration from Truecrypt to LUKS

I am looking for an alternative for True-crypt which can be used both at the disk level and with portable media. Having installed Ubuntu 14.04 ticking 'with disc encryption' enabled, it works very ...
0
votes
1answer
134 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
7
votes
2answers
252 views

/var/log suspicious entries

For fun I tailed /var/log/auth.log (tail auth.log) and there were many of the following: sshd[16225]: Received disconnect from 203.100.83.32: 11: Bye Bye [preauth] The ip appears to be from ...
1
vote
1answer
68 views

New to Ubuntu-updates, security, on Acer Aspire One ZG5

All, I'm completely new to Ubuntu but am looking forward to working with it. I have an Acer Aspire One ZG5 (150?) from about 2008. From what I can gather, I should install 12.10 (this appears to be ...
2
votes
1answer
282 views

What are the possible threats if internal IP address is publicly revealed?

In many cases, people do not take enough care to remove their IP addresses from some output before posting it to help forums and Q&A sites like askubuntu. Considering one's IP address is revealed ...
0
votes
1answer
46 views

How to perform detail packet capture on Ubuntu firewall?

I've routed internet traffic of my other systems on this ubuntu linux system where I have configured packet forwarding. but still I am unable to get internet on other systems. Hence I want to ...