Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
1answer
36 views

Why is `last` showing so many logins in one second? Did I got hacked?

When I ran last into the terminal, I found this: roundduc pts/0 :0 Sun Nov 15 16:47 still logged in roundduc :0 :0 Sun Nov 15 16:46 still logged ...
1
vote
0answers
65 views

Security update on Ubuntu 14.04

When ever I run Software Updater, I get the following security update option User space IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator However I cannot select this update and after ...
1
vote
1answer
56 views

Some strange users

something going wrong here. Here is my htop screenshot. I didn't launch any firefox or firefox plugins. In fact I've just deleted firefox at all. Here is my /etc/passwd $ cat /etc/passwd ... guest-...
0
votes
0answers
133 views

need to apply unstable security patch for ssh (1:6.6p1-2ubuntu1) on 14.04

I am running ubuntu 14.04 as a proxy server. It has failed PCI scan due to CVE-2014-2653. I see there is a patch for this, but it is listed as unstable. I'm not sure how to apply this patch to the ...
0
votes
0answers
26 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
1
vote
0answers
50 views

Java Security overriding whitelist

I'm running 15.04 on a custom build and Java Security is giving me fits. I need to run apps from a specific site that keep throwing a security error. No problem, I go into the control panel and ...
1
vote
1answer
52 views

Alright Ubuntu community, I have a few questions [closed]

I have a few questions. To be honest, I am in love with this community. The support here is awesome. So, I am 14, and I am thinking of getting Ubuntu, due to it being free, even for future versions. ...
0
votes
0answers
34 views

lock screem ins't activating

my sceen saver activates, and the lock screen doesn't lock the screen or something. here are the settings: I am using Ubuntu 15.10 Mate, and I want the screen to lock after some time idling, as in I'...
0
votes
0answers
82 views

Security issue: output from “netstat -a” with no internet connection

Strange things happen. Started my laptop with only the power-cord plugged in. Started the terminal and typed "netstat -a". Got the following: Active Internet connections (servers and established) ...
0
votes
0answers
110 views

Is there any way to map Ubuntu package name to CPE/USN/CVE?

I have list of packages from multiple Linux systems. From Ubuntu boxes I get them by using dpkg. Because I have it in form of large string (one per device) I'm using regex to get precise package ...
0
votes
0answers
35 views

How to not respond to arp requests by an attacker ? how to prevent tuxcut attack?

how to protect my ubuntu from tools like tuxcut ? someone in my lan is cutting off my internet connection and it seems i can do nothing about it tuxcut protect doesnt work.is there a way to prevent ...
5
votes
2answers
3k views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
0
votes
1answer
181 views

How to install iptables in Ubuntu

I tried to install the Linux firewall iptable but it did not work I tried sudo apt-get install iptable and that did not work.
0
votes
0answers
52 views

Building a grsec patched kernel for 15.10

I would like secure kernel. I tried adapting the guide at https://wiki.ubuntu.com/Kernel/BuildYourOwnKernel without luck. Is there a proper step by step guide for doing this? Thank you.
0
votes
1answer
495 views

How to update ntpd to the latest version to patch the latest vulnerability?

This week a new attack on the Network Time Protocol Daemon (ntpd) was demonstrated, see this paper. This could potentially wreak havoc with my HTTPS website or other time sensitive services I am ...
1
vote
1answer
147 views

Unable to generate unattended OpenPGP keys with GnuPG

I am trying to generate unattended OpenPGP keys without passphrase to automatically deploy secure files on servers. When generated manually all goes fine (using gpg --no-permission-warning --homedir ....
1
vote
1answer
181 views

Missing Security & Privacy after upgrade

After a successful upgrade from Vivid 15.04 to Wiley 15.10 everything is working 100% fine. But I discovered I am missing the "security & privacy" option in system settings. It doesnt appear in ...
2
votes
1answer
144 views

What's the best way to avoid getting hacked by anyone, e.g. governments or other criminals? [closed]

I don't know if you've all heard/read about the software from companies such as "hacking team", see e.g. the remote control system: https://wikileaks.org/spyfiles/files/0/31_200810-ISS-PRG-...
0
votes
0answers
183 views

Manage passwords in Chromium --> security risk?

I realized that in Chromium (and also Chrome) for Linux it is possible to see all saved passwords in clear text. That seems a bit strange to me... after a short research I found out that it is not ...
0
votes
0answers
108 views

Connecting to eduroam with CA certs

I have been around on every forum I could find and nothing helped me. I'm running Linux Mint 17.2 Cinnamon and I cannot figure out how to connect my computer for the life of me. I have tried this ...
1
vote
1answer
85 views

security risk of changing user in nginx server

I am planning to set up a server on a spare computer. I plan to use Ubuntu server 14.04 with nginx and php. I know that it is generally safe not to run a server as root user but is it ok if I set it ...
0
votes
1answer
72 views

Ubuntu keeps asking me for Gmail passworld

I'm using Ubuntu 15 and everything was fine till i decided to use evolution. Evolution failed to connect to Gmail and since then it asks me to enter my password for my Google account. according to ...
0
votes
0answers
18 views

How to make denyhosts handling tuple username-IP?

I would like to add a user to restricted-usernames file in the same time as denyhosts adds its IP to hosts.deny. Also, when Denyhosts purges a host, I would like to remove this username from ...
1
vote
0answers
33 views

WiFi does not connect anymore after libgcrypt

I am a total beginner in Ubuntu. I am using Ubuntu 15.04 and everything was working fine, until I tried to install Spotify. This required the installation of libgcrypt11, which was succesfull. ...
0
votes
0answers
18 views

My pid just jumped from 2000 to 4000

In resent days i noticed that if I do #ps aux there is a gap in my id #s. It started that i needed to kill my citrix receiver very often (due to lack of acceptance of Linux systems on my work network),...
0
votes
0answers
193 views

Non-root user SFTP & /var/www/html permissions

So I set up a new Ubuntu 14.04 server with Wordpress and I've created a non-root user admin1 and set up certificate based authentication. I'll be using Secure FTP/SFTP content up to the server as ...
23
votes
5answers
2k views

How important is the sudo password?

I know that the sudo password protects my computer from being locally hacked by someone having physical access to it (edit : actually, it doesn't). My password is strong enough for that purpose, but I ...
0
votes
0answers
15 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
1
vote
0answers
140 views

Scanning with ClamAV returns 10820 errors - Infected Joomla site with Trojan Iframe.MA

My server seems to have been infected with a Trojan. I run a Ubuntu 14.04.3 LTS When I approach one of the sites on my server my windows eset scanner blocks the link. Throwing a "Trojan Iframe....
0
votes
1answer
103 views

How to check security on Ubuntu

Today while I was trying to install a new software via software center, my password stopped working, that was strange for me after that situation I tried searching askubuntu.com to reset my user ...
12
votes
2answers
492 views

I can get into my administer account on my Ubuntu without typing in the password how do I disable it?

I have a password on my Ubuntu computer, but if I just click the arrow next to login I can get into my account. I want to disable this, because my brothers have gone on and I don't want them to. Also, ...
2
votes
2answers
96 views

Can I create a panic button in Ubuntu?

In case I'm ever raided or realise that I'm being spied upon whilst using my computer, is there a way in Ubuntu I can have a pre-set 'panic button' or series of keys that can log me out or secure my ...
0
votes
1answer
147 views

Is TOR breaking TLS for e-mail transport encryption to collect user credentials (security hole)?

EHLO response from mail server for starting encrypted TLS protocol when connecting to SMTP to send mail appears modified from STARTTLS to AUTH PLAIN when sent through tor instead of plain TCP. In ...
-1
votes
2answers
233 views

How does usermod allow you to bypass sudo?

My team had a show-n-tell recently and I presented my findings on Docker. I explained how you can install Docker with: curl -sSL https://get.docker.com/ | sh I then explained that, with this ...
1
vote
0answers
61 views

NoScript syncing?

I have just noticed that after firing up my browser (after a NoScript update) I am getting strange reports of syncing in association with NoScript: When selecting Copy from the right-click menu on ...
3
votes
1answer
100 views

Does passing passwords as plain text arguments reduce WiFi network security?

This app uses the command line to create a WiFi access point with this command: create_ap wlan0 eth0 MyAccessPoint and you can also make a WPA + WPA2 network with this command: create_ap wlan0 ...
0
votes
1answer
62 views

Can console be suspended and ask for a password on wakeup?

Although I suspect that this is not currently possible, I would just like to ask because it would be something very useful in my opinion. Because when I close my lid and I am in the GUI my computer ...
2
votes
0answers
35 views

Files created in Ubuntu are given permissions to “Everyone” in Windows by default

I switch between Ubuntu and Windows7 workstations. I created a new text file in Ubuntu with some passwords and logins. Saved the file on an external drive. Now in Windows when I select the file the ...
62
votes
6answers
9k views

How to secure my laptop so that hacking by physical access is not possible?

I messed up my system earlier, I was greeted with a black screen, when booting in to Ubuntu. When I started up my laptop, I selected the recovery option from the grub menu, and chose fallback at root ...
0
votes
0answers
38 views

How to fix Faq-O-Matic fom.cgi XSS security issue

I hope someone can help me. I ran a security check against my server and it gave me a security warning about Faq-O-Matic. I need to find a way to fix this security error. I have googled and lots of ...
3
votes
0answers
136 views

After editing root .bashrc Unable to login even with tty1-6 and drop to prompt command from recovery mod

I have had the worse two weeks started with Ubuntu 12.04 , and updating to 14.04 had problem , just after a good luck of successfully installing brand new ubuntu 14.04 I now got the nightmare again ...
1
vote
0answers
37 views

Is there a deadman's switch feature in Ubuntu?

Is there a function in Ubuntu or that can be added that would create a deadman's switch? In effect, I would like to have a feature that, when I'm working on a specific sensitive file, periodically ...
0
votes
2answers
44 views

Why do I no longer receive any security updates?

I haven't received any security updates this past week. How do I check in terminal if everything is updating correctly?
1
vote
1answer
54 views

“allow executing file as program” box was already marked in the files I downloaded

I learned that, in order to install a program, one should make the downloaded file executable by going to its properties and marking the "allow executing file as program" box. I understand this as a ...
0
votes
0answers
104 views

SNORT - configuration to use it with VPN

my all network traffic goes trough VPN. Status of ufw: Default: deny (incoming), deny (outgoing), disabled (routed)/ ALLOW OUT Anywhere on tun0. snort.conf - http://pastebin.com/rvyYcCke pulledpork....
0
votes
0answers
109 views

OpenVPN Disconnects every 60 minutes and asks to login again

I am running Ubuntu 14.04. I have installed openvpn. I use the vpn by enabling it thru the terminal with Sudo openvpn (filename), then I login and it connects fine. I have noticed that it will ...
1
vote
1answer
119 views

Prevent pdf file's content from modifying

How can I create a read-only pdf file in Ubuntu?
3
votes
1answer
998 views

freeradius refuses to start because it says OpenSSL is vulnerable

I work with Ubuntu 14.04 and I can't start the freeradius deamon (freeradius-server-3.0.9). I have this error that I cannot solve: Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 ...
0
votes
0answers
24 views

Do I need to install antivirus on my linux system? [duplicate]

Am new to kubuntu and this is my first post in this forum. Do I need to install antivirus on my linux system? I hear people say linux-base is more secure than windows. Does that mean I should not ...
0
votes
1answer
54 views

Only allow websites to use already installed fonts and not download their own in Firefox

I have read a lot lately about fonts being malicious, and as a website can just download its own custom font onto your machine so that it can use it, it could exploit something with this and do ...