Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

5
votes
1answer
1k views

Chkrootkit says “Searching for Linux/Ebury - Operation Windigo ssh… Possible Linux/Ebury - Operation Windigo installetd”, should I be worried?

I recently ran sudo chkrootkit and this was one of the results: Searching for Linux/Ebury - Operation Windigo ssh... Possible Linux/Ebury - Operation Windigo installetd In my research on ...
3
votes
1answer
664 views

ClamTK Anti Virus will not run on Ubuntu 15.10

I have a laptop running Ubuntu 15.10. To protect myself, I have tried downloading and installing ClamTK. It does this without giving any error messages but it doesn't open. I tried on a second ...
3
votes
0answers
66 views

Is Hardenubuntu.com legit? [closed]

Hey all So I was looking around for methods of hardening ubuntu server and came across hardenubuntu.com. I was wondering if you the community could tell me if the advice in this site seems legit and ...
2
votes
2answers
83 views

clean install, but with boot loader installed onto USB drive

I'm starting a new job that requires full drive encryption for me to use my own computer. My new job will require telecommuting so I have to try to meet my new bosses security or I have to learn ...
-3
votes
2answers
471 views

I visited a hacked website! Should I be worried? What should I do now?

I am concerned about the security when I run Ubuntu without an anti-virus and visit a hacked website. I feel that this question then should be asked here and not anywhere else. I can't seem to ...
0
votes
1answer
51 views

What is the difference between transactional updates in Snappy and the normal Ubuntu updates?

https://developer.ubuntu.com/en/snappy/ The snappy approach is faster, more reliable, and lets us provide stronger security guarantees for apps and users — that’s why we call them “snappy” ...
4
votes
0answers
230 views

OpenJDK, IcedTea security settings

I am a beginner Linux user. From my knowledge the system uses OpenJDK and IcedTea only when I connect to a SAP IDES server through SAP GUI JAVA adding a string in it to connect to that server. I use ...
0
votes
0answers
40 views

sata,usb, ps/2 packets sniffer wanted

TL;DR. I've had a hardware virus on my Windows systems on my network. I've brought a clean computer, installed Ubuntu and plugged in infected HDD and usb keyboard. Computer refused to boot ...
1
vote
2answers
991 views

Can Ransomware effect the Linux OS? [closed]

Recently, The Hacker News stated the following: Ransomware threat has emerged as one of the biggest threats to internet users in recent times. Typically, a Ransomware malware encrypts all files on ...
0
votes
4answers
142 views

Production-ready, hardened edition of Ubuntu Server?

By default, Ubuntu Server is not very secure: Automatic security updates are not enabled The 'ufw' firewall is not enabled SSH key-based logins have to be explicitly created and so on... For my ...
0
votes
2answers
49 views

Is there any need of antivirous program such as microsoft windows? [duplicate]

Microsoft windows needs an anti virus program to protect system from virus and other programs which are harmful for the system. Is there any need of such type program for Ubuntu OS? If not then why?
0
votes
1answer
115 views

How to confine WINE apps using a chroot jail?

I have read the SecuringWine page on WINE official website, and one of the things it says you can do to increase security is: One can run wine inside a chroot jail. So what exactly is a "chroot ...
7
votes
1answer
909 views

Will a Virus or Malware inside a User Account or Guest Account Affect the Entire Ubuntu System?

When I started out with Linux, and while studying the file structure and access permissions of Linux systems, a thought formulated in my mind, that as long as you operate only within your less ...
0
votes
2answers
100 views

Passing encrypted password in mount command

I am trying to cron a simple 4 line bash script to backup a folder which requires me to mount the NAS folder for which I have to provide the password. Which is a big NO , Is there a way to pass the ...
0
votes
2answers
173 views

Kernel live-patching in kernel 4?

According to Linux 4 release documentation, live-patching of kernel code is now possible in Linux 4. Does Ubuntu 15.10 Wily support these live in-RAM patches without rebooting? Do I need to do ...
4
votes
1answer
57 views

Why is ssh-agent running? Should it be?

Recently I've noticed a process called 'ssh-agent' running on my computer. It's only been there for a week or so, but it's never been there before. According to system monitor, the process running is ...
0
votes
0answers
26 views

Trouble creating/using snort rules in terminal

I have some troubles with getting Snort rules to run. I'm using snort 2.6.9. When I run Snort, the following error is given; Initializing rule chains... ERROR: /etc/snort/rules/(1) Unknown rule type ...
0
votes
2answers
45 views

remote accessing linux system

I would like to access my Linux system's command shell remotely. The system runs at home behind a router which connects it to the internet. I was thinking I could forward a port on the router to the ...
0
votes
0answers
179 views

OpenVPN, IPv6 and DNS Leaks in Ubuntu 14.04

I have been trying to set up a secure connection using OpenVPN but I've been running into some issues with DNS leaks. Basically, I have no problems getting the VPN service up and running using ...
4
votes
3answers
825 views

Safety of Dual Boot

I have a laptop that has both windows 7 and Ubuntu with a shared drive (so I a can share files between the operating systems). I use Windows 7 when I want to use a special program. I like to keep ...
5
votes
2answers
216 views

How to trace the IP of a Tox user?

I am a user of Tox, my client is qTox (if that makes any difference), and I was just reading their FAQs section when I came across these sections: How does Tox Protect My Privacy? Tox ...
0
votes
1answer
380 views

Is Ubuntu 15.10 safe for an Ubuntu beginner? [closed]

I have been using Windows for my entire life and I have recently wanted to move to Ubuntu. Unfortunately, I have Windows 8.1 installed and I don't want to uninstall it because I still want to use it ...
0
votes
0answers
155 views

recommendation for anti-keylogger software for linux

is there a recommendation for software or a method for anti-kelogger for linux something like KeyScrambler for windows
1
vote
1answer
130 views

keyboard input meathods (ibus?) crashed, and icons randomly rearranging

Well, I got another issue, and it's this: One day, a mysterious window randomly popped up after a while after login, and after doing some basic stuff and using Kazam, I rebooted, and my icons began ...
0
votes
1answer
56 views

Hamachi is able to ignore firewall

Hello I recently installed Hamachi and Haguichi. I created a network and my friend joined. So I hosted a game and the port was 1100, I think, but the problem is that he was able to join althrough I ...
0
votes
0answers
35 views

Protection against infected ISP

Today I faced a scary situation. I visited some websites and there was many ads popping up which warned me that something is wrong. I started my investigation and find out that some javascript files ...
0
votes
0answers
13 views

Ubuntu internal IP Proxy for security testing

I'm creating an public API, but it should only listen to certain IP's. Ofcourse localhost is one of them for development purposes, but I want to write unit / integration tests that should fail if the ...
1
vote
0answers
15 views

How to upgrade rkhunter from source files? [duplicate]

Due to the fact that the maintainers of rkhunter don't want to backport important security updates in for some reason, I will need to upgrade it myself. So I need to upgrade it to this version, but as ...
0
votes
0answers
16 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
0
votes
1answer
124 views

Vulnerability in Apache 2.4.12 Wiley 5.10

Security scan revealed following vulnerabilities in fully patched and updated 5.10 Wiley distro: CVE-2015-0253 CVE-2015-0228 CVE-2015-3185 Apache Security confirm 2.4.12 is vulnerable here. ...
1
vote
1answer
70 views

Opening True Crypt volumes and files. 14.x

I have two drives in my computer. One boots Win7 the other Ubuntu 14. I have external USB drives with banking and other data that are encrypted with truecrypt. I don't want to use BitLocker and have ...
4
votes
1answer
152 views

How to secure myself from the libpng buffer overflow in png_set_PLTE security bug?

As of today, there is a security bug affecting the libpng library. The severity with this is, that the library is used by huge amount of projects: browsers, music players, games, Linux Distro's. ...
1
vote
1answer
36 views

Why is `last` showing so many logins in one second? Did I got hacked?

When I ran last into the terminal, I found this: roundduc pts/0 :0 Sun Nov 15 16:47 still logged in roundduc :0 :0 Sun Nov 15 16:46 still logged ...
1
vote
0answers
65 views

Security update on Ubuntu 14.04

When ever I run Software Updater, I get the following security update option User space IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator However I cannot select this update and after ...
1
vote
1answer
56 views

Some strange users

something going wrong here. Here is my htop screenshot. I didn't launch any firefox or firefox plugins. In fact I've just deleted firefox at all. Here is my /etc/passwd $ cat /etc/passwd ... ...
0
votes
0answers
123 views

need to apply unstable security patch for ssh (1:6.6p1-2ubuntu1) on 14.04

I am running ubuntu 14.04 as a proxy server. It has failed PCI scan due to CVE-2014-2653. I see there is a patch for this, but it is listed as unstable. I'm not sure how to apply this patch to the ...
0
votes
0answers
22 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
1
vote
0answers
44 views

Java Security overriding whitelist

I'm running 15.04 on a custom build and Java Security is giving me fits. I need to run apps from a specific site that keep throwing a security error. No problem, I go into the control panel and ...
1
vote
1answer
52 views

Alright Ubuntu community, I have a few questions [closed]

I have a few questions. To be honest, I am in love with this community. The support here is awesome. So, I am 14, and I am thinking of getting Ubuntu, due to it being free, even for future versions. ...
0
votes
0answers
34 views

lock screem ins't activating

my sceen saver activates, and the lock screen doesn't lock the screen or something. here are the settings: I am using Ubuntu 15.10 Mate, and I want the screen to lock after some time idling, as in ...
0
votes
0answers
78 views

Security issue: output from “netstat -a” with no internet connection

Strange things happen. Started my laptop with only the power-cord plugged in. Started the terminal and typed "netstat -a". Got the following: Active Internet connections (servers and established) ...
0
votes
0answers
108 views

Is there any way to map Ubuntu package name to CPE/USN/CVE?

I have list of packages from multiple Linux systems. From Ubuntu boxes I get them by using dpkg. Because I have it in form of large string (one per device) I'm using regex to get precise package ...
0
votes
0answers
33 views

How to not respond to arp requests by an attacker ? how to prevent tuxcut attack?

how to protect my ubuntu from tools like tuxcut ? someone in my lan is cutting off my internet connection and it seems i can do nothing about it tuxcut protect doesnt work.is there a way to prevent ...
5
votes
2answers
3k views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
0
votes
1answer
168 views

How to install iptables in Ubuntu

I tried to install the Linux firewall iptable but it did not work I tried sudo apt-get install iptable and that did not work.
0
votes
0answers
46 views

Building a grsec patched kernel for 15.10

I would like secure kernel. I tried adapting the guide at https://wiki.ubuntu.com/Kernel/BuildYourOwnKernel without luck. Is there a proper step by step guide for doing this? Thank you.
0
votes
1answer
425 views

How to update ntpd to the latest version to patch the latest vulnerability?

This week a new attack on the Network Time Protocol Daemon (ntpd) was demonstrated, see this paper. This could potentially wreak havoc with my HTTPS website or other time sensitive services I am ...
1
vote
1answer
122 views

Unable to generate unattended OpenPGP keys with GnuPG

I am trying to generate unattended OpenPGP keys without passphrase to automatically deploy secure files on servers. When generated manually all goes fine (using gpg --no-permission-warning --homedir ...
1
vote
1answer
167 views

Missing Security & Privacy after upgrade

After a successful upgrade from Vivid 15.04 to Wiley 15.10 everything is working 100% fine. But I discovered I am missing the "security & privacy" option in system settings. It doesnt appear in ...
2
votes
1answer
138 views

What's the best way to avoid getting hacked by anyone, e.g. governments or other criminals? [closed]

I don't know if you've all heard/read about the software from companies such as "hacking team", see e.g. the remote control system: ...