Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
388 views

Is Ubuntu 15.10 safe for an Ubuntu beginner? [closed]

I have been using Windows for my entire life and I have recently wanted to move to Ubuntu. Unfortunately, I have Windows 8.1 installed and I don't want to uninstall it because I still want to use it ...
0
votes
0answers
197 views

recommendation for anti-keylogger software for linux

is there a recommendation for software or a method for anti-kelogger for linux something like KeyScrambler for windows
1
vote
1answer
161 views

keyboard input meathods (ibus?) crashed, and icons randomly rearranging

Well, I got another issue, and it's this: One day, a mysterious window randomly popped up after a while after login, and after doing some basic stuff and using Kazam, I rebooted, and my icons began ...
0
votes
1answer
73 views

Hamachi is able to ignore firewall

Hello I recently installed Hamachi and Haguichi. I created a network and my friend joined. So I hosted a game and the port was 1100, I think, but the problem is that he was able to join althrough I ...
0
votes
0answers
36 views

Protection against infected ISP

Today I faced a scary situation. I visited some websites and there was many ads popping up which warned me that something is wrong. I started my investigation and find out that some javascript files ...
0
votes
0answers
14 views

Ubuntu internal IP Proxy for security testing

I'm creating an public API, but it should only listen to certain IP's. Ofcourse localhost is one of them for development purposes, but I want to write unit / integration tests that should fail if the ...
1
vote
0answers
15 views

How to upgrade rkhunter from source files? [duplicate]

Due to the fact that the maintainers of rkhunter don't want to backport important security updates in for some reason, I will need to upgrade it myself. So I need to upgrade it to this version, but as ...
0
votes
0answers
16 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
0
votes
1answer
144 views

Vulnerability in Apache 2.4.12 Wiley 5.10

Security scan revealed following vulnerabilities in fully patched and updated 5.10 Wiley distro: CVE-2015-0253 CVE-2015-0228 CVE-2015-3185 Apache Security confirm 2.4.12 is vulnerable here. ...
1
vote
1answer
88 views

Opening True Crypt volumes and files. 14.x

I have two drives in my computer. One boots Win7 the other Ubuntu 14. I have external USB drives with banking and other data that are encrypted with truecrypt. I don't want to use BitLocker and have ...
4
votes
1answer
162 views

How to secure myself from the libpng buffer overflow in png_set_PLTE security bug?

As of today, there is a security bug affecting the libpng library. The severity with this is, that the library is used by huge amount of projects: browsers, music players, games, Linux Distro's. ...
1
vote
1answer
37 views

Why is `last` showing so many logins in one second? Did I got hacked?

When I ran last into the terminal, I found this: roundduc pts/0 :0 Sun Nov 15 16:47 still logged in roundduc :0 :0 Sun Nov 15 16:46 still logged ...
1
vote
0answers
66 views

Security update on Ubuntu 14.04

When ever I run Software Updater, I get the following security update option User space IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator However I cannot select this update and after ...
1
vote
1answer
61 views

Some strange users

something going wrong here. Here is my htop screenshot. I didn't launch any firefox or firefox plugins. In fact I've just deleted firefox at all. Here is my /etc/passwd $ cat /etc/passwd ... guest-...
0
votes
0answers
144 views

need to apply unstable security patch for ssh (1:6.6p1-2ubuntu1) on 14.04

I am running ubuntu 14.04 as a proxy server. It has failed PCI scan due to CVE-2014-2653. I see there is a patch for this, but it is listed as unstable. I'm not sure how to apply this patch to the ...
0
votes
0answers
27 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
1
vote
0answers
53 views

Java Security overriding whitelist

I'm running 15.04 on a custom build and Java Security is giving me fits. I need to run apps from a specific site that keep throwing a security error. No problem, I go into the control panel and ...
1
vote
1answer
52 views

Alright Ubuntu community, I have a few questions [closed]

I have a few questions. To be honest, I am in love with this community. The support here is awesome. So, I am 14, and I am thinking of getting Ubuntu, due to it being free, even for future versions. ...
0
votes
0answers
34 views

lock screem ins't activating

my sceen saver activates, and the lock screen doesn't lock the screen or something. here are the settings: I am using Ubuntu 15.10 Mate, and I want the screen to lock after some time idling, as in I'...
0
votes
0answers
88 views

Security issue: output from “netstat -a” with no internet connection

Strange things happen. Started my laptop with only the power-cord plugged in. Started the terminal and typed "netstat -a". Got the following: Active Internet connections (servers and established) ...
0
votes
0answers
113 views

Is there any way to map Ubuntu package name to CPE/USN/CVE?

I have list of packages from multiple Linux systems. From Ubuntu boxes I get them by using dpkg. Because I have it in form of large string (one per device) I'm using regex to get precise package ...
0
votes
0answers
37 views

How to not respond to arp requests by an attacker ? how to prevent tuxcut attack?

how to protect my ubuntu from tools like tuxcut ? someone in my lan is cutting off my internet connection and it seems i can do nothing about it tuxcut protect doesnt work.is there a way to prevent ...
5
votes
2answers
3k views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
0
votes
1answer
196 views

How to install iptables in Ubuntu

I tried to install the Linux firewall iptable but it did not work I tried sudo apt-get install iptable and that did not work.
0
votes
0answers
52 views

Building a grsec patched kernel for 15.10

I would like secure kernel. I tried adapting the guide at https://wiki.ubuntu.com/Kernel/BuildYourOwnKernel without luck. Is there a proper step by step guide for doing this? Thank you.
0
votes
1answer
566 views

How to update ntpd to the latest version to patch the latest vulnerability?

This week a new attack on the Network Time Protocol Daemon (ntpd) was demonstrated, see this paper. This could potentially wreak havoc with my HTTPS website or other time sensitive services I am ...
1
vote
1answer
167 views

Unable to generate unattended OpenPGP keys with GnuPG

I am trying to generate unattended OpenPGP keys without passphrase to automatically deploy secure files on servers. When generated manually all goes fine (using gpg --no-permission-warning --homedir ....
1
vote
1answer
198 views

Missing Security & Privacy after upgrade

After a successful upgrade from Vivid 15.04 to Wiley 15.10 everything is working 100% fine. But I discovered I am missing the "security & privacy" option in system settings. It doesnt appear in ...
2
votes
1answer
159 views

What's the best way to avoid getting hacked by anyone, e.g. governments or other criminals? [closed]

I don't know if you've all heard/read about the software from companies such as "hacking team", see e.g. the remote control system: https://wikileaks.org/spyfiles/files/0/31_200810-ISS-PRG-...
0
votes
0answers
205 views

Manage passwords in Chromium --> security risk?

I realized that in Chromium (and also Chrome) for Linux it is possible to see all saved passwords in clear text. That seems a bit strange to me... after a short research I found out that it is not ...
0
votes
0answers
120 views

Connecting to eduroam with CA certs

I have been around on every forum I could find and nothing helped me. I'm running Linux Mint 17.2 Cinnamon and I cannot figure out how to connect my computer for the life of me. I have tried this ...
1
vote
1answer
92 views

security risk of changing user in nginx server

I am planning to set up a server on a spare computer. I plan to use Ubuntu server 14.04 with nginx and php. I know that it is generally safe not to run a server as root user but is it ok if I set it ...
0
votes
1answer
78 views

Ubuntu keeps asking me for Gmail passworld

I'm using Ubuntu 15 and everything was fine till i decided to use evolution. Evolution failed to connect to Gmail and since then it asks me to enter my password for my Google account. according to ...
0
votes
0answers
18 views

How to make denyhosts handling tuple username-IP?

I would like to add a user to restricted-usernames file in the same time as denyhosts adds its IP to hosts.deny. Also, when Denyhosts purges a host, I would like to remove this username from ...
1
vote
0answers
33 views

WiFi does not connect anymore after libgcrypt

I am a total beginner in Ubuntu. I am using Ubuntu 15.04 and everything was working fine, until I tried to install Spotify. This required the installation of libgcrypt11, which was succesfull. ...
0
votes
0answers
18 views

My pid just jumped from 2000 to 4000

In resent days i noticed that if I do #ps aux there is a gap in my id #s. It started that i needed to kill my citrix receiver very often (due to lack of acceptance of Linux systems on my work network),...
0
votes
0answers
206 views

Non-root user SFTP & /var/www/html permissions

So I set up a new Ubuntu 14.04 server with Wordpress and I've created a non-root user admin1 and set up certificate based authentication. I'll be using Secure FTP/SFTP content up to the server as ...
23
votes
5answers
2k views

How important is the sudo password?

I know that the sudo password protects my computer from being locally hacked by someone having physical access to it (edit : actually, it doesn't). My password is strong enough for that purpose, but I ...
0
votes
0answers
16 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
1
vote
0answers
149 views

Scanning with ClamAV returns 10820 errors - Infected Joomla site with Trojan Iframe.MA

My server seems to have been infected with a Trojan. I run a Ubuntu 14.04.3 LTS When I approach one of the sites on my server my windows eset scanner blocks the link. Throwing a "Trojan Iframe....
0
votes
1answer
124 views

How to check security on Ubuntu

Today while I was trying to install a new software via software center, my password stopped working, that was strange for me after that situation I tried searching askubuntu.com to reset my user ...
12
votes
2answers
494 views

I can get into my administer account on my Ubuntu without typing in the password how do I disable it?

I have a password on my Ubuntu computer, but if I just click the arrow next to login I can get into my account. I want to disable this, because my brothers have gone on and I don't want them to. Also, ...
2
votes
2answers
104 views

Can I create a panic button in Ubuntu?

In case I'm ever raided or realise that I'm being spied upon whilst using my computer, is there a way in Ubuntu I can have a pre-set 'panic button' or series of keys that can log me out or secure my ...
0
votes
1answer
159 views

Is TOR breaking TLS for e-mail transport encryption to collect user credentials (security hole)?

EHLO response from mail server for starting encrypted TLS protocol when connecting to SMTP to send mail appears modified from STARTTLS to AUTH PLAIN when sent through tor instead of plain TCP. In ...
-1
votes
2answers
258 views

How does usermod allow you to bypass sudo?

My team had a show-n-tell recently and I presented my findings on Docker. I explained how you can install Docker with: curl -sSL https://get.docker.com/ | sh I then explained that, with this ...
1
vote
0answers
64 views

NoScript syncing?

I have just noticed that after firing up my browser (after a NoScript update) I am getting strange reports of syncing in association with NoScript: When selecting Copy from the right-click menu on ...
3
votes
1answer
102 views

Does passing passwords as plain text arguments reduce WiFi network security?

This app uses the command line to create a WiFi access point with this command: create_ap wlan0 eth0 MyAccessPoint and you can also make a WPA + WPA2 network with this command: create_ap wlan0 ...
0
votes
1answer
67 views

Can console be suspended and ask for a password on wakeup?

Although I suspect that this is not currently possible, I would just like to ask because it would be something very useful in my opinion. Because when I close my lid and I am in the GUI my computer ...
2
votes
0answers
38 views

Files created in Ubuntu are given permissions to “Everyone” in Windows by default

I switch between Ubuntu and Windows7 workstations. I created a new text file in Ubuntu with some passwords and logins. Saved the file on an external drive. Now in Windows when I select the file the ...
62
votes
6answers
9k views

How to secure my laptop so that hacking by physical access is not possible?

I messed up my system earlier, I was greeted with a black screen, when booting in to Ubuntu. When I started up my laptop, I selected the recovery option from the grub menu, and chose fallback at root ...