Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

61
votes
6answers
8k views

How to secure my laptop so that hacking by physical access is not possible?

I messed up my system earlier, I was greeted with a black screen, when booting in to Ubuntu. When I started up my laptop, I selected the recovery option from the grub menu, and chose fallback at root ...
0
votes
0answers
33 views

How to fix Faq-O-Matic fom.cgi XSS security issue

I hope someone can help me. I ran a security check against my server and it gave me a security warning about Faq-O-Matic. I need to find a way to fix this security error. I have googled and lots of ...
3
votes
0answers
110 views

After editing root .bashrc Unable to login even with tty1-6 and drop to prompt command from recovery mod

I have had the worse two weeks started with Ubuntu 12.04 , and updating to 14.04 had problem , just after a good luck of successfully installing brand new ubuntu 14.04 I now got the nightmare again ...
1
vote
0answers
34 views

Is there a deadman's switch feature in Ubuntu?

Is there a function in Ubuntu or that can be added that would create a deadman's switch? In effect, I would like to have a feature that, when I'm working on a specific sensitive file, periodically ...
0
votes
2answers
44 views

Why do I no longer receive any security updates?

I haven't received any security updates this past week. How do I check in terminal if everything is updating correctly?
1
vote
1answer
50 views

“allow executing file as program” box was already marked in the files I downloaded

I learned that, in order to install a program, one should make the downloaded file executable by going to its properties and marking the "allow executing file as program" box. I understand this as a ...
0
votes
0answers
85 views

SNORT - configuration to use it with VPN

my all network traffic goes trough VPN. Status of ufw: Default: deny (incoming), deny (outgoing), disabled (routed)/ ALLOW OUT Anywhere on tun0. snort.conf - http://pastebin.com/rvyYcCke ...
0
votes
0answers
94 views

OpenVPN Disconnects every 60 minutes and asks to login again

I am running Ubuntu 14.04. I have installed openvpn. I use the vpn by enabling it thru the terminal with Sudo openvpn (filename), then I login and it connects fine. I have noticed that it will ...
1
vote
1answer
102 views

Prevent pdf file's content from modifying

How can I create a read-only pdf file in Ubuntu?
3
votes
1answer
785 views

freeradius refuses to start because it says OpenSSL is vulnerable

I work with Ubuntu 14.04 and I can't start the freeradius deamon (freeradius-server-3.0.9). I have this error that I cannot solve: Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 ...
0
votes
0answers
24 views

Do I need to install antivirus on my linux system? [duplicate]

Am new to kubuntu and this is my first post in this forum. Do I need to install antivirus on my linux system? I hear people say linux-base is more secure than windows. Does that mean I should not ...
0
votes
1answer
51 views

Only allow websites to use already installed fonts and not download their own in Firefox

I have read a lot lately about fonts being malicious, and as a website can just download its own custom font onto your machine so that it can use it, it could exploit something with this and do ...
0
votes
1answer
67 views

Have I compromised my security because of unpacking an installation archive?

I'm NOT a technical person. I use only Ubuntu 14.04 lts on my computer, no other OS. Today I downloaded a package called 'Tor browser bundle' (tor-browser-linux64-5.0.2_en-US.tar.xz) from Tor-website ...
0
votes
1answer
129 views

Lock the position of desktop icon 14.03

I was wondering if there is a way to prevent a user from moving a desktop icon but it still be usable? I am on ubuntu 14.03 32 bit. Any help wnd suggestions are appreciated. Thanks.
6
votes
4answers
538 views

Check security mode of connected Wi-Fi network

How do I check the security mode of the connected Wi-Fi network, using the command-line interface? I want to know whether the current Wi-Fi connection is protected with WPA, protected with WEP, or is ...
2
votes
2answers
454 views

How to enable Secure Boot without issue?

I read here that it is essential to have Secure Boot enabled: However I find that when I enable Secure Boot, it changes it so that systems can boot with UEFI boot, but not Legacy, it also disables ...
1
vote
1answer
88 views

how to scan my wifi connection?

I used to do it with SoftPerfect Wifi Guard, but 1.0.6 new version isn't allowed for Linux and I can't find previous version 1.0.5. The target is identify all devices connected into my wireless ...
0
votes
1answer
59 views

istartsurf on chomium

A few days ago I noticed that I'd got the istartsurf malware in Chromium on my Ubuntu laptop despite being careful of which software I'm installing, but anyway. So I reinstalled Ubuntu on my laptop ...
0
votes
0answers
37 views

Locked down guest account [duplicate]

I need to setup a computer so a user can surf the internet and that's it. I want an admin account to make changes, apply updates, ect. I would like the guest account to be locked down with no access ...
1
vote
1answer
174 views

Is Ubuntu spyware (referring to article by Richard Stallmann)? [duplicate]

I received a link to the article "Ubuntu Spyware: What to do?" by Richard Stallmann which advises the reader not to use or recommend Ubuntu for several reasons: It does not meet all four freedoms of ...
0
votes
0answers
13 views

Best way to secure a virtualised ubuntu running apache 2

I do front end web development for clients and have a local webserver that acts as my production/staging ground I have a Windows 7 machine that has Ubuntu installed within a virtual box, Ubuntu is ...
1
vote
0answers
23 views

Challenge-response local user login

Is it possible in Ubuntu, or in any Debian based distro, to use Digital Signatures with a Challenge-response setting for local user login(I don't mean ssh), instead of a password ? Storing the key on ...
0
votes
0answers
24 views

It it safe to keep a PamUSB enabled usb drive always connected?

I'm wondering if it's safe to the usb drive always connected, some program could sudo without my permission. It there a way to receive some notifications about pamusb's authentications? Thanks in ...
0
votes
0answers
331 views

Possible security issue? (syslog connect messages)

I was just looking through my syslog and noticed theese lines repeating over and over almost endlessly: Aug 25 16:52:56 xxx-xxx-xxx-xxx postfix/smtpd[9572]: connect from ...
1
vote
2answers
73 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
0
votes
1answer
55 views

compiz screen lock can be bypassed by `metacity --replace`, how to protect against it?

While compiz is running, open a terminal and type: sleep 10;metacity --replace now lock your screen and wait, you will see compiz end and metacity comes in, in an unlocked state. What I expected was ...
0
votes
0answers
65 views

logrotate broken after security breech

I downloaded a PDF which evidently had Linux malware, which executed when I ran the PDF through firefox, or atril, Im not sure which. I figured it out shortly after running clamav, and I believe ...
0
votes
4answers
368 views

Is “Ubuntu Server 14.04.3 LTS + LAMP” production-ready? [closed]

Installing a fresh copy of Ubuntu Server 14.04.3 LTS and then: $ sudo apt-get update $ sudo apt-get upgrade $ sudo apt-get install lamp-server^ Is this configuration production-ready in terms of ...
0
votes
1answer
95 views

files where break-in attempts are logged

Ubuntu Server with Apache, hosting multiple websites and mail-servers. Besides /var/log/auth.log, are there other places where break-in attempts are logged? Context: I used to have a lot of break-in ...
6
votes
2answers
631 views

how to find out the address pool for DDOS Attack IP addresses

Of recent I have been experiencing DDOS attacks against my mail server with a series of IP addresses. I have been blocking these IP addresses one by one using the firewall. The process was and is ...
0
votes
2answers
50 views

Problem with Login password [duplicate]

when ever I'm logging in, I have set a login password for my account but it is logging in automatically with out asking me for a password. Please tell me what I can do to get rid of this problem.
0
votes
0answers
11 views

What programs the USN covers? (besides Ubuntu)

I'm using Ubuntu 14.04 LTS, and I'm always taking some looks into the USN (Ubuntu Security Notices), and when there's something new, I make sure to install the patch as fast as possible. But today, I ...
0
votes
0answers
92 views

Webcam light ON suspiciously

Today after I just finished my skype chat with my parents, I noticed that my webcam light was on. I closed skype and then classes all browsing or internet related applications but it was still on. I ...
-2
votes
1answer
626 views

Is Ubuntu really more secure than Windows? [closed]

For years I am considering Ubuntu (or any Linux distribution) far secure than Windows. But when I read Most vulnerable operating systems and applications in 2014 I couldn't believe it. That's why I ...
0
votes
2answers
39 views

Is there a way to make your computer automatically lock the screen?

Just wanted a way to have my computer lock if I walk away from it it and forget to lock it manually.
0
votes
0answers
21 views

How to prevent people from using 'ro recovery nomodeset' [duplicate]

I really need a way to protect my grub menu from being attack by students who know to go to grub menu press 'e' and then change splash to ro recovery nomodeset. How do I protect that page from ...
0
votes
0answers
9 views

soft security camera webcam for the ubuntu (like iSpy for win) [duplicate]

have ubuntu security camera like iSpy of Windows?
-2
votes
1answer
865 views

Norton Products (on Ubuntu/Linux) [duplicate]

Do I need to use an anti-virus software with Ubuntu such as Norton?
0
votes
2answers
158 views

How can I prevent Firefox from accessing files outside of its .config directory?

A vulnerability in Firefox was disclosed today that allows an attacker to execute JavaScript in a "local file context", giving them access to the file system. In the wild, this was used to scan the ...
0
votes
0answers
106 views

LUKS encryption + USB dongle keyfile = if not plugged, disallow passphrase prompt?

My laptop is LUKS-encrypted. I put boot & keyfile on a USB dongle: if the dongle is not plugged at boot, you cannot enter linux. But when I dont plug the USB dongle (which contain the keyfile), ...
0
votes
1answer
46 views

How to block the use of apps from other users

How would I go about not allowing none-administrative users from using applications that I don't them to? I'm new to configuration files so please give me step-by-step instructions so that I don't ...
0
votes
0answers
67 views

Configuring strong firewall rules

How to configure strong firewall settings via ufw? All inbound settings set to deny and only specific outbound ports to be allowed. Will the following be good enough? ...
1
vote
2answers
101 views

SSH session alway active, what is it? Should I close it?

I've been trying to setup a server-> client local network with x2go. I have it working, sort of... but I don't know much about networking, SSH, etc -- so it's been a steep learning curve. I'm ...
0
votes
0answers
27 views

How do I lock specific apps from users?

I want to be able to lock down apps from my 'student' user and don't know, like I said in earlier post please give step by step instructions to do this. Thank you.
0
votes
1answer
40 views

heavy write to disk activity as soon as I turn on computer

Can someone tell me if something nefarious is going on? I recently had to wipe my drive (losing all my data) and do a reinstall. So, I've been using the new 15.04 for 3 weeks without incident. But I ...
0
votes
0answers
158 views

LUKS encryption, switch from passphrase to keyfile

Using LUKS encryption, I set it during the Ubuntu installation. I entered a passphrase. But now I want to use a keyfile and I dont manage to find the right process to. How can I make the switch ...
4
votes
1answer
126 views

Which unattended-upgrades system takes precedence and how?

I've just run into an answer that has made me question how the unattended upgrade system works. There seem to be at least two systems on my computer: unattended-upgrades with ...
2
votes
1answer
82 views

Security: Automatic updates - automatic or not?

I am using kubuntu 14.04.2 I have updates set to download and update automatically for where there are security updates - yet the security update for Adobe Flash was not automatically installed when ...
2
votes
1answer
106 views

Ubuntu 14.04 LTS Security?

[Ubuntu 14.04 on 2014 Retina MacBook Pro 15" using rEFInd] (ThomasW's Why is everybody so concerned about etc/passwd? link addresses my initial comments about accessibility to passwd and other files, ...
0
votes
2answers
30 views

Recovery ubuntu encrypted home

If someone gets physical access to my pc, mounts my ubuntu and changes my user password (e.g. in the shadow file). Will he be able to log into my account and decrypt my (encrypted) /home partition? ...