Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
19 views

Ubuntu server File copy detect

I have a customer who has experienced data file theft (copied filed) is there software or a way to detect this copying of multiple files Or do i have to write something?
0
votes
1answer
27 views

Keyboard / usb detachment alert?

I'm in a fun security-battle with a co-worker, where we each try to attach each others system in order to send out an email to all other co-workers in which they are invited to come and have a sweet ...
1
vote
1answer
54 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
2
votes
2answers
72 views

Is it possible to restrict a program from reading anything outside what they need?

I understand that running programs as a non-root user is done in order to restrict the programs from writing system files, which prevents malware from compromising the system security. But in most ...
3
votes
2answers
195 views

How to make firefox ask for master password only when trying to show passwords

I have set up a master password on firefox and the browser asks for it at unexpected time. Not every time in the start (so it isn't useful to "lock" the browser. Someone may auto-login to a website ...
1
vote
1answer
33 views

ODD update possible hacking? [closed]

I installed the latest Ubuntu 32 bit version yesterday, then pulled up terminal and ran apt-get update this didnt work so I ran sudo apt-get install update eventually it worked but it downlanded ...
0
votes
1answer
29 views

Are there DNS leaks with the system proxy setting?

I'm using a system-wide proxy to browse the Internet. Are there any DNS leaks with that?
1
vote
0answers
72 views

tcpd[3674]: connect from unknown (unknown) - Am I being hacked?

Earlier today I had 7 tcpd processes on my server running at 100% cpu for a long period of time. Looking into syslog I found a lot of lines like this: tcpd[11447]: connect from unknown (unknown) ...
0
votes
1answer
51 views

Using 12.04 LTS network manager mixing up login and wifi passwords

I've been using 12.04LTS on my laptop for a while now, with automatic security patches etc. etc. I use wired ethernet at work, and wifi at home. Until recently both worked seamlessly and without any ...
0
votes
0answers
78 views

Ubuntu for the paranoid

Would it be possible to create an encrypted installation and use an SD card (or I can make a hardware key with a UART converter+microprocessor and keyboard. 1 key=1 password) as the decryption HW key ...
-1
votes
1answer
26 views

Information and updates [closed]

I would like to know what are the first steps for a new user of ubuntu. What is most useful for an inexperienced user of Linux, mainly one that arrived from Windows. Is it important to use the ...
-1
votes
2answers
73 views

What is MAC spoofing in the internet connections manager and does it have any benefit in terms of security? [closed]

What is MAC spoofing in the internet connections and does it have any benefit in terms of security? What is the purpose of cloning the mac or spoofing it? Does it help protect against hackers at ...
1
vote
0answers
44 views

New System account created automatically [closed]

This is weird. Last night, I started to download a movie from a torrent site, and I fell asleep. When I woke up, the download was finished and There is another user account created in my system named ...
1
vote
2answers
268 views

Will support for 14.10 stop this year? [duplicate]

A month back I have transitioned from Windows to Linux and I have utopic installed in my system. No complaints till now! :D What I wanted to know was as this is not an LTS release, will I face ...
0
votes
0answers
67 views

Using seahorse generated password files from command-line

Seahorse (aka Passwords and Keys) is a pretty cool application for general password management. It stores the keys in ~/.local/share/keyrings/. Is there some way for me to easily read/modify this ...
1
vote
2answers
86 views

Home folders accessible to other users and should not be, how to fix?

Why are my home folders accessible by other users on the same system by default? I understand that I can change the permission of the home folders but want to know why this happened? I have done ...
0
votes
2answers
115 views

ubuntu antivirus [duplicate]

Why I need to use anti virus like clam-av clam-tk or commodo anti virus or any free anti virus in Ubuntu ? Note: if I've root login enabled.and I am running few windows programs inwine1.6. will ...
0
votes
0answers
39 views

How force Logcheck to report fail2ban bans?

I'm using Logcheck to take care of my logfiles and suspicous activites. I also installed fail2ban and get sometimes... I would like to be informed then fail2ban blocks an ip.. but logcheck is not ...
0
votes
0answers
51 views

Can't access IRC on WiFi

I had been away from Ubuntu for quite a while, but now I fully migrated to it, and I'm quite happy with it. However, after a year or so, when I tried to login to Freenode, I saw that I can not connect ...
0
votes
1answer
24 views

So I used fixubuntu as a privicy measure, what other precations should I take using Ubuntu Linux?

Yes, I just want a privacy preserving OS, I know it's not 100% possible but I'd like to get as close as I can. Thanks
2
votes
1answer
76 views

How can I prevent people to see what application(s) I have opened?

I don't want people to see what applications I have opened. I would like to be able to instantly hide the windows with a shortcut key combination, so I can save my work afterwards. I also want to hide ...
0
votes
0answers
97 views

minimal data showing in auth.log

I have locked my server down and to help troubleshoot any holes, I look in the logs, especially auth.log. In the logs, it shows that there are attempts to log in but no data shows. I am not able to ...
0
votes
2answers
2k views

How to remove malware?

I use ubuntu 32 bit and chrome's infected with the softwareupdaterlp virus. I don't really know what steps I should take aside from resetting/re-installing chrome. Would really appreciate any tips on ...
0
votes
3answers
636 views

How can I have a Very secure Ubuntu Desktop system [closed]

How can I have a Very secure Ubuntu Desktop system and where is the best place online to learn about hardening Linux, not just Ubuntu?
1
vote
1answer
168 views

Are all PHP security upgrades backported to Ubuntu 12.04 until 2017

I recently came across an extension to a popular CMS that would not install on an Ubuntu 12.04 server, because PHP version 5.3 reached end of live. I was however under the impression that all security ...
0
votes
1answer
2k views

How to only install security updates [duplicate]

Is it possible to only install the security updates. If this is possible it needs to be done on several servers and ubuntu virtual machines (Manually in command line) . I already tried a few ...
2
votes
1answer
2k views

Ubuntu 12.04.5 LTS won't update libc6 to 2.15-0ubuntu10.10

In light of CVE-2015-0235, I set out to upgrade my Ubuntu Servers today. I have a 12.04.5 LTS server that refuses to update my libc6 package to the version that does not contain the vulnerability ...
3
votes
1answer
629 views

What is the 'libc gethostbyname buffer overflow' and how can I protect myself from it

Apparently there is a bug in the GNU C Library, that can cause a buffer overflow? What exactly is it, and how can i protect myself from it?! Reference: oss-security - Qualys Security Advisory ...
3
votes
1answer
3k views

CVE-2015-0235 How to update eglibc to 2.15-0ubuntu10.10

I followed these instructions and found that my glibc version was 2.15-0ubuntu10.9. How do I update it to 2.15-0ubuntu10.10? It is also mentioned here that services have to be restarted after the ...
0
votes
0answers
137 views

How can I disable all locking in 14.10?

I don't want the machine to prompt for password on resume from suspend, I don't want the machine to lock after a certain period of inactivity. At the moment, I only want it to lock a) when it boots ...
1
vote
2answers
94 views

SSD & Security & wipe Oh My

So SSD's are memory based, and therefore solid state, meaning that they have no mechanical parts like a a regular spinning hard drive. How does this affect the need to wash empty disk space and will ...
0
votes
4answers
66 views

can someone remotely access your ubuntu user account on your computer if they steal your ubuntu username and password

I would like to know if it is possible for someone who steals your ubuntu username and password to remotely access your ubuntu user account on your computer and even see what you are doing when you ...
2
votes
1answer
32 views

Is there a way to tell which application last accessed your camera?

Is there an application which will tell me which programs have last accessed my camera?
0
votes
1answer
58 views

How to password-protect an individual folder

I have to password-protect two folders: folder A is on my computer's hard drive, and folder B is on an external hard drive. Regarding folder A: I have tried encrypting folder A using Cryptkeeper but, ...
0
votes
0answers
66 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
13 views

Why is Ubuntu only using SHA1 for WDE?

I'm wondering. In times where Hardware gets faster every week and all the NSA thingies about Snowden and such, why is Ubuntu still using Sha1 when encrypting the system over the GUI (the installer) I ...
0
votes
2answers
86 views

Is it safe to download and open files? [closed]

I understand that a virus and malware can exists in Linux. However, I have read a lot about how Linux is not vulnerable to viruses because of a variety of reasons. So does that mean that I can ...
0
votes
0answers
73 views

Asus K52Jr webcam notification LED always lit

I have been using Ubuntu 14.10 on my Asus K52Jr notebook for some time now, and this always bothered me. The webcam's LED is always lit (on Windows it only lights up if it's in use), and I'm concerned ...
0
votes
0answers
93 views

java security prompt even with exception list

I'm trying to run an applet of a website, and a prompt pops up with "Application blocked by security Java" but I have this website on the exception list! I'm running ubuntu 14.04 and Java Version 8 ...
0
votes
1answer
1k views

How to add user from apache user group in linux

The question is simple. How we can add user without root privileges (because www-data is very important for security)? For example adding user with root user: sudo adduser user group Without root ...
1
vote
1answer
89 views

ip forwarding enabled at every boot

Recently I noticed that cat /proc/sys/net/ipv4/ip_forward returns 1, something that is not recommended and I generally do not enable things I do not need that increase my attack vector. I thought, ...
1
vote
2answers
84 views

Can Port Forwarding to a Windows VM cause Security problems? [closed]

I have question. My physical host is Ubuntu 14.04. I installed Virtualbox with a Windows Server 2012 VM with IIS. I set port forwarding from my Ubuntu host to my vm. If my virtual Windows Server ...
2
votes
0answers
208 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
0
votes
0answers
131 views

Migration from Truecrypt to LUKS

I am looking for an alternative for True-crypt which can be used both at the disk level and with portable media. Having installed Ubuntu 14.04 ticking 'with disc encryption' enabled, it works very ...
1
vote
1answer
300 views

How to run an application on a sandbox? [duplicate]

I'm interested in running Skype on a sandbox. I don't want to use a virtual-machine however, since it's overkill just for a program. I don't need Skype's video or voice capabilities to work, chat ...
1
vote
1answer
78 views

New to Ubuntu-updates, security, on Acer Aspire One ZG5

All, I'm completely new to Ubuntu but am looking forward to working with it. I have an Acer Aspire One ZG5 (150?) from about 2008. From what I can gather, I should install 12.10 (this appears to be ...
0
votes
1answer
57 views

How to perform detail packet capture on Ubuntu firewall?

I've routed internet traffic of my other systems on this ubuntu linux system where I have configured packet forwarding. but still I am unable to get internet on other systems. Hence I want to ...
2
votes
1answer
45 views

Will creating a directory inside a system directory with 777 permission cause security vulnerability?

Can creating directories with 777 permission inside system directories cause any security weakness? For example, say I open a directory called Custom inside /usr/share/backgrounds/ and give it 777 ...
0
votes
1answer
130 views

Ubuntu 14.04 and 14.10 Can't login to some secure website logins

I can generally google to find solutions to problems I have with Ubuntu, but this one has me stumped. I have been using Ubuntu 14.04 for several months, on this computer. I use Chrome as my primary ...
2
votes
3answers
509 views

How can I tell if a CVE has been fixed in Ubuntu's repositories?

Today a couple of buffer overflows in NTP were announced 1, 2. It looks like updating my system to fix these issues is in order. How can I find out if they have been fixed in the Ubuntu ...