Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
146 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
0
votes
0answers
332 views

How to avoid chrome store password in seahorse?

I am very concerned about the unencrypted passwords saved by chrome in seahorse. This equipment is shared and used by several people, so any user with the root password can change my user password ...
0
votes
1answer
1k views

how to verify that sbin/init isn't infected?

for sometime chkrootkit has been showing sbin/init as being infected with SuckIt rootkit. early this year when the warning first appeared a quick google search indicated that it was most likely a ...
0
votes
1answer
29 views

How do I report an Ubuntu Software Center “Listing” problem?

How do you report a possible security risk to users in Ubuntu Software Center? There is two game apps in the Ubuntu Software Center called "Karts" and "Kart 1000..." Both: - Listed as free - But the ...
0
votes
0answers
40 views

Ubuntu 14.04 installation permission denied from HDD & external HDD

Title is self explanatory sadly; had no luck after getting past the security (for now) and the same from my Samsung external HDD Desperate trying to get this to work but no luck except on a virtual ...
1
vote
0answers
17 views

What kind of access flash has to our systems?

It seems like there is major security issue found in flash every other week or so. There was another one just yesterday. This and being closed source, I can't help but wonder, what kind of access it ...
1
vote
0answers
172 views

Allow one process access to /dev/uninput without completely compromising security

Steam In-Home-Streaming was turned back on the other day. This allows you to play games being rendered on one computer on another computer (commonly playing games on a TV/Media Centre that are being ...
0
votes
0answers
14 views

Questions about how malwares might operate under wine [duplicate]

a recent scan by clamav found that a few exe files in the WINE directory are infected with a trojan (called Ratnim?). A have a few specific questions on what a windows malware can do under linux. 1) ...
1
vote
0answers
213 views

Blocking HTTP requests without Host header using mod_security2

In my Apache configuration, I want to allow only Host header based vhosts. That is, I'd like to block any traffic by IP address only. I have mod_security2 installed, but I am only using the default ...
1
vote
2answers
525 views

What's the status of encfs?

Is the encfs project no longer maintained? It seems the last update 1.7.4 was released on November 18 2010. In a security audit several weaknesses have been identified, but no updates have since been ...
0
votes
1answer
404 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
0
votes
0answers
21 views

Ubuntu servers protection

Here is my needs : i need to protect data from being stolen on servers and Those servers are not physically secured. First i just wanted to base security solution on root password protection but ...
1
vote
1answer
1k views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
1
vote
2answers
734 views

How to access locked hard drive?

I have a hard drive with an old 12.04 server install and a data partition on it. I have the hard drive hooked up to my current desktop using a usb to sata adapter with external power supply. I am on ...
0
votes
1answer
31 views

make services request permission to open ports?

Is there a way to make services request permission to open ports? Basically to start up with all ports closed, as root so services will have to request permission to open them?, and you can decide to ...
0
votes
1answer
134 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
-1
votes
0answers
305 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
1
vote
2answers
40 views

Is this a security risk/concern?

According to: http://wiki.secondlife.com/wiki/Linux_Viewer#Installing_and_Running The Second Life Linux client entirely runs out of the directory you have unpacked it into - no installation step ...
-1
votes
0answers
296 views

Nessus SNMP security warning

I ran a Nessus scan on my Ubuntu 14.04 machine. I received the following: High: SNMP Agent Default Community Name (public) Description: It is possible to obtain the default community name of the ...
0
votes
1answer
1k views

Connect to my College's WPA from Ubuntu 14.04 LTS [duplicate]

I have Ubuntu 14.04 LTS, and am running it on a Sony Vaio VGN-CR12OE. It is the only operating system. I am trying to connect to my college's WPA WiFi. My settings for this WiFi connection are as ...
0
votes
2answers
6k views

What do LISTEN and ports mean in netstat? [closed]

I have been monitoring my system lately and I have found some strange things are running on my system. Can anyone please explain what they are and why same program use several processes? Output of ...
1
vote
2answers
206 views

Do logins by the gdm (or lightdm) user in auth.log mean my system is breached?

Please look at this auth.log (from Ubuntu 14.04) I have provided and tell me who this gdm user is and why there are all these unauthenticated logins? I am freaked out; please help! Here's the ...
1
vote
1answer
50 views

How do you detect file changes

Since Linux is vulnerable to a number of similar vulnerabilities as windows. I'm trying to find a daemon that catalogs and alerts me/user of any and all file changes as well as file additions. Is ...
2
votes
1answer
45 views

How to prevent data from being written into a directory?

Or: How to make a directory write protected, for all users until unlocked again?
1
vote
2answers
64 views

What lines should be commented out in my sources.list file?

I have just updated from Ubuntu 12.04 to 14.04 last weekend. I haven't downloaded any extra programs as of yet. I checked my sources.list file and it has the following lines in it: deb ...
1
vote
2answers
96 views

What should I do to avoid my roommate from changing my password through using system recovery mode .?

He did this last time when I left my laptop at room. Opened the system recovery mode from advanced Ubuntu options and changed the password using 'passwd usrname ' command.Is there anything I can do ...
0
votes
1answer
343 views

Are there really security risk when running Wine? [duplicate]

I remember reading somewhere that since Wine's job is to pretty much emulate Windows so that you can run Windows programs, it puts a risk on your Linux machine since Windows Viruses can also run ...
0
votes
1answer
54 views

I have some questions about Firewall [closed]

So I am pretty new to Linux (With the exception of Android), and being use to the old ways of Windows pretty much all I had to do for Firewall was turn it on and forget about it. However with Ubuntu ...
1
vote
2answers
398 views

Don't remember PGP passphrase until end of session [duplicate]

To use my PGP key I always have to enter my passphrase. But as it happens, I have to unlock the key only once for every session. The desired behaviour would be, that I have to unlock the key each time ...
0
votes
2answers
321 views

wget security.ubuntu.com not working on ubuntu

We are able to use wget for other URLs, such as google.com, but wget security.ubuntu.com not working and giving output: Resolving security.ubuntu.com (security.ubuntu.com)... 91.189.92.200, ...
-1
votes
1answer
46 views

How to accept only essential security updates?

sometimes i am getting problem in software updates. So i would like to get only essential security updates and also need to make it as default. Please let me know is there any way to sort out that?
1
vote
1answer
54 views

Terminal message “Access control disabled”

Every time I open up the terminal the message access control disabled, clients can connect from any host pops up in the first line. Then the terminal behaves as usual, no errors at all. But this ...
1
vote
1answer
67 views

Confused about the security of ubuntu (Linux)

Assume I have a laptop with ubuntu installed and two users abc and root. Both users are password protected. It is possible to reset root password using live CD or USB using chroot which would mean ...
1
vote
0answers
1k views

SSH connection failing since I changed server port number

Yesterday I changed the default ports on the server from 22 to 1993 then restarted but now I can't connect at all. I used ssh -i keyname.pem ubuntu@remotehost to connect then sudo vi ...
1
vote
1answer
47 views

Is it possible to setup a root like user for global read only access?

I'm hoping to give a security scanner a user that can read everything but not change or execute anything. Is this possible and if so how?
1
vote
0answers
22 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
0
votes
1answer
75 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
1
vote
1answer
43 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
1
vote
0answers
36 views

What is the difference between security.ubuntu.com and archive.ubuntu.com? [duplicate]

The various releases have a -security channel in archive.ubuntu.com. How does that channel differ from the security.ubuntu.com? If I have to set up a local mirror, how does security.ubuntu.com come ...
14
votes
6answers
4k views

Does spyware exist for ubuntu?

Someone I know said he had put spyware on my computer. Is he talking crap? I've been using Ubuntu 12.04 for nearly 3 years now and I've never seen any type of spyware, remote keyloggers or RATS ...
0
votes
1answer
172 views

How can I make my WiFi hotspot secure?

I just created a wifi hotspot with an adaptor, and it says that it uses WEP security. I may be mistaken, but isn't WEP security not really secure? How can I make it more secure, such as WPA or ...
2
votes
1answer
1k views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
-1
votes
2answers
65 views

Security updates for old-releases

I know that I should upgrade to a newer supported Ubuntu version if possible, but: if you have no possibility to upgrade (for reasons not important here) you have to use the old-releases archive from ...
1
vote
1answer
1k views

lightdm failed to start session; user folder requesting Gnome

We're migrating some old 10.10 users on Gnome to 14.04 using Unity. When they log on, however, the lightdm greeter complains "Failed to start session." /var/log/lightdm/lightdm.log notes: ...
0
votes
1answer
62 views

Possibility that ubuntu machine infected by FTP malware

I know that this question might be duplicated but here is what happened. Our web server got attack by injecting the spam links into server script file (Web server running ...
1
vote
1answer
1k views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
0
votes
1answer
39 views

Ubuntu 13.10 end of support

13.10 ends support today, I want to do a clean install of 14.04.1,but it arrives next week,is it highly risk to wait fot 14.04.1 one week with 13.10 no supported? Thanks.
2
votes
0answers
151 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
50 views

Moving away from ROOT user

I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really. However I found out that since the day they got their VPS everything, ...
25
votes
1answer
1k views

How to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?