Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
0answers
112 views

Tiger: `rtm` is listening on socket XXXX

On my Ubuntu serve 12.04 LTS, Tiger is reporting a lot of stuffs like this: OLD: --WARN-- [lin002i] The process `rtm' is listening on socket 60404 (UDP) on every interface. NEW: --WARN-- [lin002i] ...
0
votes
0answers
39 views

Uninstall core fonts leads to install of Flash?

I was installing ubuntu-restricted-extras and the install didn't finish, I got a warning that the core fonts and something else were not installed properly. So I uninstalled, but didn't like that it ...
-4
votes
3answers
270 views

Can someone please clear up the haziness regarding security in Ubuntu and the other recognised distros?

I was using Ubuntu, but after updating to 14.04 LTS the Unity Desktop did not perform particularly well. So after research, I switched to Xubuntu, a recognised version of Ubuntu running the Xfce ...
1
vote
1answer
35 views

Some way to block access to certain directories for tech support?

I'm about to ship my laptop to tech support and I started thinking, I don't want them going through my downloads or family photos, etc, however they require the administrator password. The problem ...
1
vote
1answer
59 views

File access control mechanism in Ubuntu 13.10

Can someone tell me where I can find detailed description about file access control mechanism used in Ubuntu 13.10 desktop. I already tried Ubuntu documentation, thank you.
0
votes
1answer
98 views

Software center shows that Google Docs has been installed [closed]

I made a Gmail to message the owners of a blog I follow because some of their recent posts seemed like personal attacks. After I messaged them I have no reply and they deleted my disqus post on their ...
0
votes
2answers
318 views

When will Flash Player 11.2.202.356 security update will be available

Adobe Systems released emergency security updates for Flash Player in order to fix a vulnerability that has been exploited in attacks against users since earlier this month. Software center provides ...
2
votes
0answers
121 views

How can I use a Verbatim Secure'n'Go USB key?

I have purchased a 4Gb USB key from Verbatim. How can I use it under Ubuntu? I do not need the "secure data" feature, and have still not saved anything on it, so formatting at low level would be OK. ...
0
votes
1answer
48 views

How do you connect to a network that IS broadcasting but DOES NOT have an SSID?

I have access to the MAC address and signal strength. He's not jamming my network, but he is bridging my wireless network. I want to connect to his network and figure out what he's doing. Any advice ...
0
votes
1answer
61 views

Preventing Déjà Dup from attempting a backup when out of my network

I’ve set Déjà Dup to back up daily to my home network’s Synology NAS (by WebDAV, if you’re curious). The problem is that my laptop comes with me to many places. My laptop does not seem to realise ...
1
vote
2answers
550 views

How can I stop my server being an “open DNS resolver”?

This morning I got a letter from my ISP saying that my Ubuntu Server (13.10) can be used as an "open DNS resolver". They propose 3 possible solutions to fix this problem: Limit access to recursive ...
0
votes
0answers
1k views

Create x11vnc password file with both admin and viewonly password on 12.0.4LTS

Using Ubuntu 12.0.4 LTS and need to enable x11vnc access with admin and viewonly access based on which vnc password is supplied. The x11vnc server gets started out of /etc/lightdm/start via: ...
4
votes
1answer
109 views

Kernel security settings

What is the right security setting for the net.ipv4.conf.all.secure_redirects option in sysctl.conf? Here it sets to 1 and Here sets to 0. Is net.ipv4.conf.default.secure_redirects related to ...
3
votes
1answer
99 views

Juju security model issues

What plans are there to extend the security model in Juju? We see two significant issues with the current model - no internal firewalling within an environment, and the inability to expose ports to ...
0
votes
0answers
25 views

Ubuntu Repository Security [duplicate]

I notice that Ubuntu repositories is not HTTPS, all links in /etc/apt/source.list in http links. This is a peace of my repository links: deb http://archive.ubuntu.com/ubuntu saucy main restricted ...
0
votes
1answer
26 views

Can I secure a webpage with something other than username/password

I want to secure a webpage, but I want something better than username and password. Is there any public key style authentication for a webpage? I'm not concerned with the usability / convenience of a ...
0
votes
1answer
52 views

LOIC to work in ubuntu

i have been wondering on using LOIC(Low Orbit Ion Cannon) in ubuntu,but the problem is will it work in ubuntu 13.10 because LOIC is developed in .Net. how to get LOIC working in ubuntu?
0
votes
1answer
109 views

Remove SUID/GUID bits

SUID and SGID files on system are a potential security risk, and should be monitored closely. Is there any file in ubuntu server that recommended to remove SUID/GUID bits from it?
3
votes
1answer
430 views

basic security tools and packages that should be installed on a public facing web server

I'm a newbie in this world and I do not have a lot of knowledge about how security works on Linux systems. I recently created a droplet on DigitalOcean with Ubuntu 13 and I've been setting it up by ...
0
votes
2answers
58 views

Security Objectives [closed]

New to Linux New to Ubuntu Objective: Better understanding security Ubuntu 12.04 LTS Hello, I am going through the security guide on Ubuntu documentation, and I am getting demotivated fast. I ...
0
votes
0answers
152 views

What does the Heartbleed bug mean for Ubuntu? Is Ubuntu not as secure as I thought? [duplicate]

I hope this question isn't closed for being subjective because I think there is a correct answer somewhere, even if it's a wiki-style explanation answer. One reason for using open source software for ...
0
votes
0answers
37 views

SELlinux security domains

I am studying SELinux, but I can't find any clear definition for security domains. What is a security domain and what is its difference with security context?
1
vote
1answer
147 views

Ubuntu security: “antivirus” in official statement?

I use current (and vanilla) Ubuntu in a work environment. (It is, in the main, a Windows-orientated outfit.) A question has come up about antivirus, and I see this on the official Ubuntu website: ...
3
votes
0answers
63 views

How to auto restart services when you get security updates?

That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected ...
10
votes
2answers
10k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...
0
votes
1answer
50 views

Are pre-releases not getting security updates? [closed]

I got a new computer a couple of weeks before the expected Trusty release date, so to save my the trouble of first installing Precise and then upgrading, I installed Trusty Final Beta. Now I see that ...
4
votes
2answers
2k views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v ...
136
votes
6answers
101k views

How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?

As of today, a bug in OpenSSL has been found affecting versions 1.0.1 through 1.0.1f (inclusive) and 1.0.2-beta. Since Ubuntu 12.04, we are all vulnerable to this bug. In order to patch this ...
0
votes
0answers
155 views

Security Antivirus [duplicate]

brand new to ubuntu...I know there is way less virus problems then windows, however, is the security within the OS enough or do you suggest Antivirus program also (this is assuming the individual is ...
2
votes
1answer
5k views

Fingerprint reader driver for Validity Sensors Fingerprint scanner

prakhar@pr3d4tOr:~$ lsusb -s 001:003 -v Bus 001 Device 003: ID 138a:0018 Validity Sensors, Inc. Fingerprint scanner Couldn't open device, some information will be missing Device Descriptor: bLength ...
0
votes
1answer
205 views

Ubuntu 12.04.4 x64 - How to disable SSH daemon

I've read in this thread that running the SSH daemon with root privileges enabled by default is a potential path for malware infections: How to deal with malware on my laptop? How can I check ...
2
votes
1answer
58 views

Security benefits to force users to change their password at first login

When I consider chage command, I found that I can force users to change their password at first login with following command: $ sudo chage -d 0 <user-account> Has this work any security ...
0
votes
0answers
21 views

New user only RWX one directory

So, I read this: Is it possible to create users that can only use one directory? I would like to make it where my newly created user "kevin" (to keep in theme with the referenced post) cannot RWX in ...
1
vote
2answers
63 views

Reusing old passwords

pam_cracklib module is capable of consulting a user's password "history" and not allowing them to reuse old passwords. What security risk is in reusing old passwords? If this work is useful, how many ...
0
votes
2answers
61 views

unnecessary accounts in ubuntu

It is recommended in hardening process that remove unnecessary accounts. What security problem exist with unnecessary user account? Are there recommended user accounts that should be removed?
12
votes
1answer
624 views

How to deal with malware on my laptop?

I am fairly certain that my Ubuntu 13.10 laptop is infected with some sort of malware. Every once in a while, I find a process /lib/sshd (owned by root) running and consuming lots of cpu. It is not ...
0
votes
0answers
39 views

full disk asymmetric encryption

Wondering if there's a protocol and open source program for full-disk, asymmetric encryption. Something like, encrypting the keys into the start of the disk (using AES/something stronger) and then ...
4
votes
1answer
532 views

Is having Lubuntu 12.04 a security risk?

I have a computer with Lubuntu 12.04 installed. Since unlike Ubuntu 12.04 Lubuntu is not LTS, I will not get Lubuntu updates. However, I am still getting updates (I guess these are the general Ubuntu ...
2
votes
1answer
73 views

Encrypted Lock Screens?

I really like the disk encryption to secure my funds, but my problem is I practically never have my computer off. I live a very busy life and shutting it down totally every night is entirely ...
0
votes
0answers
13 views

I've lost my secuity password [duplicate]

I've lost the main password to my computer and can only boot from C.D how do I reset it to access my computer from itself?
1
vote
0answers
14 views

What auditing information is available for Universe repository software packages?

I understand that the "Masters of the Universe" (MOTUs) are responsible for packaging and reviewing/checking software that goes into the Universe repository, but there seems to be no formal process ...
0
votes
0answers
26 views

Read CPU serial, boot kernel only on match

I have been advised to come to you here. I'd like to bind a kernel to a specific CPU's serial number on a Raspberry Pi. The serial number is available at runtime to userland through /proc/cpuinfo and ...
2
votes
1answer
3k views

linux command to prevent dos attack by using netstat and iptables

I want to DROP more than 200 requests per ip to prevent ddos attack. this is command that i used to detect requests count per ip : netstat -alpn | grep :80 | awk '{print $5}' |awk -F: '{print ...
3
votes
3answers
404 views

Should Ubuntu users be concerned about “Operation Windigo”?

Should desktop users of Ubuntu (and other Linux distros) be concerned about the malware-infection drive described as "Operation Windigo"? What threat does it pose to us immediately and are there any ...
3
votes
1answer
73 views

How to launch program on lock and close it on unlock [duplicate]

Have siblings who like to "play" with my laptop by waking it from suspension and then typing random keys on the keyboard into the password field. Afterwards, they always deny it. I plan to install ...
1
vote
0answers
110 views

Why has Ubuntu One Music Store not renewed its security certificate? [closed]

I have been trying to download music from the Music Store but Firefox tells me the security certificate expired two days ago so it won't let me. Is this something they might not realise, i.e., do ...
2
votes
1answer
128 views

What are the possible threats if internal IP address is publicly revealed?

In many cases, people do not take enough care to remove their IP addresses from some output before posting it to help forums and Q&A sites like askubuntu. Considering one's IP address is revealed ...
0
votes
1answer
171 views

How To Install Djigzo on Ubuntu?

Can any one provide step by step configuration to install Djigzo? Djigzo Website.
3
votes
1answer
114 views

Disable logon prompt show hostname

Per default the login prompt shows %hostname% login:. I don't want anybody with console access to see the hostname of the server that easily. How to get rid of the hostname there?