Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
132 views

mysterious files and possible virus on ubuntu 12.04.2 server

IT services at my institution discovered our server sending out SPAM emails and flagged it as compromised. Further investigations suggest that it is indeed infected with a virus. For instance, there ...
0
votes
0answers
45 views

OpenPGP smart card fails after card reinsertion

I am expirimenting with an OpenPGP smart card. Things work great except for the following: Plug in smart card and turn on computer "gpg --card-status" shows the card Everything works as it should ...
2
votes
1answer
2k views

How to secure postfix on Ubuntu Server

I am setting up a new VPS server with LEMP. The only piece missing now is the mail server. Do I need to do something special to make it secure? or it is already secured when the installation is ...
0
votes
0answers
21 views

NIC in Monitor mode used by two program simultaneously

Presently I am designing sniifer that is uses NIC in monitor mode but side by side I am also using wireshark ( for which also NIC in monitor mode ). So both this program using monitor mode ...
8
votes
5answers
3k views

Rename /etc/passwd and /etc/shadow for security reasons [closed]

I have a server. My server is secure, but let's imagine a good hacker that enter in. He can now look into /etc/passwd and /etc/shadow. I would like to rename that files /etc/passwd to something like ...
0
votes
2answers
2k views

How can I scan for possible viruses on my Ubuntu system? [duplicate]

I think I may have a virus. How would I go about checking for a virus and how can I protect my computer from any other virus? Please give detailed answer as I'm still learning about Ubuntu.
1
vote
2answers
146 views

Am I under attack?

When I checked my log viewer, I noticed that ufw is blockng many ips that I'm not familiar with! I have only three computers in my local network at the time when I was checking my log viewer I was ...
10
votes
2answers
135 views

Are all Ubuntu update download servers HTTP only?

In Update Manager's software sources, the option exists to choose a download server and protocol like shown below. Do all updates download via HTTP only? And if HTTPS (or SFTP) aren't supported, why ...
2
votes
1answer
753 views

Virus detected with ClamTK (Possible infection?)

I did a routine scan of my system, with ClamTK. The the anti-virus reported 3 detections. The names of the three detections are: 1.[PUA.Phishing.Bank] 2.[PUA.Phishing.Bank] 3.[PUA.Script.Packed-1] ...
0
votes
0answers
7 views

comparing certificates in firefox

I need to compare the google-mail certificates of firefox browser while connecting to the google-mail server (its a demand cause i'm building a customized system for my clients) i know firefox does it ...
1
vote
0answers
2k views

How to setup Squid Proxy Server on ubuntu 12.04 LTS?

I had tried using the ubuntu wiki guidelines to set it up on test server, and it worked. Though I would appreciate if anyone can provide me with few other links as this time I am going to install it ...
4
votes
1answer
253 views

Web server atacks

I have a server (vps) to use as a repository and testing (gitlab and redmine) server. However apache crashed, seeing the /var/log/apache2/error.log have many errors of this type: [Fri Jan 31 ...
0
votes
0answers
17 views

Are Key files for repositories fetched over HTTPS?

I'm connecting to the internet through a public internet connection. I want to know if some one can do a MITM attack and give wrong Keyfiles when I update and upgrade. The difference here would be ...
0
votes
0answers
16 views

is it possible to to use ssmtp with PSAD

I have been searching online and I haven't seen yet a way to use PSAD with the simple ssmtp. I would be grateful if anyone can share a link or shed a light on configuration. I believe it will be an ...
0
votes
0answers
19 views

is denyhost central database stored locally?

I was tasked to write a security policy to apply to any ubuntu server we deploy at a client's site. Knowing how some of the corporate are restrictive on what resource is available to what box on their ...
1
vote
2answers
51 views

Network Information for Theft Prevention

I haven't seen much of this around, and I'm not a network expert/sysadmin, so I need some advice. I have a laptop that I'd like to "protect" against theft (this is really a game more than a real ...
3
votes
1answer
169 views

Found a hidden port . . . what now?

I ran rkhunter and found an open hidden port. How do I close a port that is not listed with the netstat or fuser command? It is hidden from these which is why it was flagged. Aside from blocking the ...
0
votes
0answers
18 views

How do I grant UFW manage access to a particular user?

I would like to allow a particular user the permission to run "ufw allow" (or equivalent). Ideally without giving that user the ability to run other privileged commands, or give firewall authority to ...
25
votes
1answer
792 views

How to find my lost Ubuntu laptop?

I am running Ubuntu on my laptop. In case if I lose my laptop or it gets stolen, is there any way to locate it? Do I have to install any application beforehand to find my laptop?
0
votes
1answer
49 views

Is it possible to create a locked down 'dumb terminal' with ubuntu?

My company has a large amount of document review work that must be done manually by temp workers. The work is done on our website, accessible via VPN only. We are planning to just show scanned images ...
6
votes
1answer
82 views

Disallow user access to microphone

Blacklisting a kernel module would disable the microphone for all users. I have set up a restricted user, who should not be able to use the microphone. The restricted user should, however be able to ...
1
vote
3answers
165 views

How can I create a hardened Virtualbox image for PenTesting?

As a serious security researcher, I'm looking for an answer to securing a ubuntu installation against unwanted intrusion. This should include how I can: log and alert remote connection attempts Log ...
3
votes
1answer
4k views

Ubuntu - saying your security settings have blocked an application from running with an out-of-date version of java

I have this new problem since 2014 begin. I cant remotely login to this enterprise network for giving them support. Its keep showing this new error. How to fix it please? EDIT:
0
votes
2answers
4k views

How to install up-to-date virus scanner ClamAv in 12.04? [duplicate]

ClamAV is in the official security software repositories from Canonical, but on running freshclam, it reports: ClamAV update process started at Tue Jan 21 10:31:59 2014 WARNING: Your ClamAV ...
0
votes
1answer
2k views

How to get Avast! Running on Ubuntu 13.10

I know in the current time, anti-virus isn’t exactly needed for Linux,however I still wish to install some form of protective layer. I had previously downloaded a .deb for the installation of Avast! ...
11
votes
1answer
254 views

Strange POST requests to my Ubuntu server - am I in trouble?

I have an Ubuntu Server 12.04 installed on a VM. This server has apache2-mpm-prefork and libapache2-mod-php5 installed. I was looking through the logs and recently came across these rather ...
0
votes
1answer
49 views

Ubuntu One-related question - How to share files securely?

I have procrastinated this question a lot because I know it is a complex and a "crossover". That's why I have hesitated if to ask it here, on Ask Ubuntu, or somewhere else, let's say, Freelancer or ...
3
votes
2answers
5k views

Help! My server has been hacked - .IptabLes and .IptabLex in /boot [closed]

I'm running a Ubuntu 6.06 dapper server and it has been hacked. I'll admit up front here that I'm a programmer and not a system administrator so even though I've worked with Unix/Linux for years my ...
1
vote
1answer
202 views

What is a TCP wrapper and how do I use it? [closed]

What is a "TCP wrapper", and how can I use it to improve system security?
1
vote
1answer
35 views

Unsecured desktop sharing

Can anyone advise me of the best way to get around mongrel hackers. I came home to find my mouse pointer merrily moving across the screen, opening disgusting web pages and what looked like trying to ...
6
votes
3answers
706 views

How safe is it to transfer sensitive information over Tor Browser Bundle on a restricted network?

I am using the Tor Browser Bundle in Ubuntu from a client machine on a restricted network. In part, I do this because it appears that TBB's native encryption allows me to bypass certain network ...
0
votes
1answer
129 views

is adobe flash player plugin installer marked as “important security update”?

Why is adobe flash player plugin installer marked as "important security update"? Is security really compromised if one does not install that?
1
vote
1answer
91 views

How vulnerable are you by installing a desktop on Ubuntu Server? [duplicate]

I've read around that installing an Ubuntu desktop on top of an Ubuntu Server provides security holes and performance issues. But I can't find anywhere as to describe what security holes would develop ...
2
votes
1answer
374 views

How to protect my PC from netcut users? (ARP spoof)

In my campus, some people they are using netcut in Windows and they are blocking us not to use Internet. Since I am a Ubuntu user, I can't install neither nutcut nor netcut-defender to protect and ...
0
votes
3answers
392 views

do i need an antivirus?will mcafee work on ubuntu? [duplicate]

i want to know if mcafee anti virus and firewall will work on ubuntu 12.04.3 if not what is recommended. i have noticed web pages locking and reporting FBI Virus, if ubuntu is safe how does my browser ...
2
votes
1answer
127 views

Is it necessary to have a Firewall in Ubuntu?

I was wondering if a Firewall could give some more security, and if yes which one would you recommend.
1
vote
0answers
41 views

How to disable Pointer Obfuscation on 12.04

I am working on a security project for school and need to overflow a buffer, I therefore need to overwrite the eip, but for some reason I can't. The A's that I overwrite the buffer with are spread all ...
1
vote
1answer
27 views

Key security fixes - pace of adoption into 12.04 LTS

I would like to ask about how quickly security issues are dealt with in the 12.04 disti. I am recently using GnuPG on my 12.04 box and am concerned that the following security fix / most up to date ...
0
votes
0answers
275 views

vmware player bridged does not work when on vpn

The problem I am having now is I vpn off from my job to a vpn provider. I then load my kali linux vm and connect to the vpn my security labs. I can run scans, enumerations etc. The problem is when I ...
0
votes
0answers
215 views

Unknown failed password logs

I decided to install steam on ubuntu 12.04 from the official repo. However after the installation(which required me to enter my password a second time in a terminal to install required updates) I ...
1
vote
1answer
38 views

Security measures for Thunderbird and Pidgin

I want to install Thunderbird and Pidgin. Is it safe to give passwords in these applications. Please tell me what security measures should be taken while using these kinds of applications.
3
votes
2answers
215 views

Is enabling TRIM on an encrypted SSD a security risk?

I recently installed Ubuntu 13.10 on an SSD drive using the "encrypt the new Ubuntu installation for security" option. I wanted to enable TRIM, so was following the guide provided here. One step says ...
2
votes
1answer
88 views

Default resource cap on root user

I happened to see that on my Ubuntu 12.04 some resources of the root user is capped. I have not capped anything explicitly and my limits.conf as far as root user is concerned is empty. Here is the ...
1
vote
1answer
62 views

Is there a way to encrypt my files without full disk encryption

I want to encrypt my files and folders without full disk encryption and encrypted volumes. Can anyone help me?
0
votes
1answer
50 views

How can I check if an Apport report does not contain any sensitive information?

I know the crash reports are stored at /var/crash. But can I do something to check that the report does not contain any sensitive information? Where can I find the list of reports that I or other ...
0
votes
0answers
44 views

Secure a samba print server in 12.04

I set up a sambda server on my router, and can access it with ubuntu. I installed the following applications to see the share: $ sudo apt-get install samba samba-common system-config-samba ...
0
votes
1answer
100 views

How can I disable the Terminal Emulator for certain users?

How to prevent specific users from using the terminal emulator?! I make a trick by writing a script in .bashrc which request a user to enter a password to be able to use the terminal emulator. But ...
0
votes
2answers
81 views

How can ending process introduce security risk?

I get this message when ending tasks in System Monitor: I understand ending processes will remove data in memory and break its current session, but how can ending a process create a security risk?? ...
3
votes
3answers
2k views

What do sapd, skysapd, sksapd, and ksapd do?

Does anyone know what sapd, skysapd, sksapd, ksapd do? Are they viruses? I tried clamav it didn't recognized them as viruses. I also realized that my /etc/rc.local has multiple copies of this: ...
2
votes
2answers
222 views

UFW and firewall

So I recently installed ubuntu and I have been working with it no problem.While browsing through the security guides (specifically: https://wiki.ubuntu.com/BasicSecurity) I noticed this: "enable the ...