Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
2answers
308 views

wget security.ubuntu.com not working on ubuntu

We are able to use wget for other URLs, such as google.com, but wget security.ubuntu.com not working and giving output: Resolving security.ubuntu.com (security.ubuntu.com)... 91.189.92.200, ...
-1
votes
1answer
41 views

How to accept only essential security updates?

sometimes i am getting problem in software updates. So i would like to get only essential security updates and also need to make it as default. Please let me know is there any way to sort out that?
1
vote
1answer
52 views

Terminal message “Access control disabled”

Every time I open up the terminal the message access control disabled, clients can connect from any host pops up in the first line. Then the terminal behaves as usual, no errors at all. But this ...
1
vote
1answer
66 views

Confused about the security of ubuntu (Linux)

Assume I have a laptop with ubuntu installed and two users abc and root. Both users are password protected. It is possible to reset root password using live CD or USB using chroot which would mean ...
0
votes
0answers
25 views

There doesn't seem to be a decent guide for Stealth could someone either write one or point me to one?

Stealth Integrity Scanner I'm very interested in being able to setup an IDS and this one seemed like it was really cool and worth while and fairly underrated. I've not really found much on what a ...
1
vote
0answers
1k views

SSH connection failing since I changed server port number

Yesterday I changed the default ports on the server from 22 to 1993 then restarted but now I can't connect at all. I used ssh -i keyname.pem ubuntu@remotehost to connect then sudo vi ...
1
vote
1answer
46 views

Is it possible to setup a root like user for global read only access?

I'm hoping to give a security scanner a user that can read everything but not change or execute anything. Is this possible and if so how?
1
vote
0answers
22 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
0
votes
0answers
28 views

How do you set up a systemwide read only user for a security scanner

I'm hoping to play with STEALTH https://apps.ubuntu.com/cat/applications/precise/stealth/ It suggests the creation of a read only access user that the integrity scanner can use to access its target ...
0
votes
1answer
63 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
1
vote
1answer
41 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
1
vote
0answers
36 views

What is the difference between security.ubuntu.com and archive.ubuntu.com? [duplicate]

The various releases have a -security channel in archive.ubuntu.com. How does that channel differ from the security.ubuntu.com? If I have to set up a local mirror, how does security.ubuntu.com come ...
14
votes
6answers
4k views

Does spyware exist for ubuntu?

Someone I know said he had put spyware on my computer. Is he talking crap? I've been using Ubuntu 12.04 for nearly 3 years now and I've never seen any type of spyware, remote keyloggers or RATS ...
0
votes
1answer
167 views

How can I make my WiFi hotspot secure?

I just created a wifi hotspot with an adaptor, and it says that it uses WEP security. I may be mistaken, but isn't WEP security not really secure? How can I make it more secure, such as WPA or ...
2
votes
1answer
964 views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
-1
votes
2answers
63 views

Security updates for old-releases

I know that I should upgrade to a newer supported Ubuntu version if possible, but: if you have no possibility to upgrade (for reasons not important here) you have to use the old-releases archive from ...
1
vote
1answer
1k views

lightdm failed to start session; user folder requesting Gnome

We're migrating some old 10.10 users on Gnome to 14.04 using Unity. When they log on, however, the lightdm greeter complains "Failed to start session." /var/log/lightdm/lightdm.log notes: ...
0
votes
1answer
60 views

Possibility that ubuntu machine infected by FTP malware

I know that this question might be duplicated but here is what happened. Our web server got attack by injecting the spam links into server script file (Web server running ...
1
vote
1answer
890 views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
0
votes
1answer
39 views

Ubuntu 13.10 end of support

13.10 ends support today, I want to do a clean install of 14.04.1,but it arrives next week,is it highly risk to wait fot 14.04.1 one week with 13.10 no supported? Thanks.
2
votes
0answers
133 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
48 views

Moving away from ROOT user

I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really. However I found out that since the day they got their VPS everything, ...
25
votes
1answer
1k views

How to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?
25
votes
6answers
2k views

How can I confirm that the binaries in my Ubuntu are from the source code it should be from?

Like 99% of users, I install Ubuntu from ready-made binaries. How can I verify myself that those binaries are in fact from the original source code from Ubuntu? It would be good to verify that ...
1
vote
0answers
84 views

install ubuntu on a hardware AES encrypted flash drive

I couldn't find the answer to my question after hours of search. I hope someone can help me out. I would like to install ubuntu on a flash drive. I followed to standard instructions for installing ...
1
vote
0answers
47 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
0
votes
1answer
377 views

Restrict user access to /proc and /sys

I have one big problem: setfacl does not seem to work for /proc and /sys, but I would like to restrict one specific users rights and I do not find it acceptable for that user to read stuff like ...
3
votes
0answers
87 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
2
votes
1answer
935 views

Sudo is also user login password - why? how to change?

When installing Ubuntu I can create a user with an encrypted folder, what I always do. Now after the installation the login password for this user is also the sudo password. Is that how it should be? ...
0
votes
2answers
310 views

How to store network-manager settings in home

I'm using Ubuntu 14.04 with the network-manager. It stores all Information about wireless networks, VPNs, ... in /etc/NetworkManager/system-connections and I was just wondering why... I thought the ...
0
votes
1answer
480 views

Is fingerprint-gui a security hole?

I have a Thinkpad T440 on Ubuntu 14.04. I use fingerprint-gui to allow me to login and use sudo by swiping a fingerprint. The worrying part is that anyone can run the fingerprint-gui program to ...
4
votes
1answer
950 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from this wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully with ...
0
votes
1answer
50 views

Ubuntu virtual machine guest-only internet

Disconnecting internet is a great security advise but i want to check my emails. is that possible to use Ubuntu as host without internet connection while in a guest OS in Virtualbox is able to browse ...
1
vote
4answers
3k views

cryptsetup - LUKS vs. Truecrypt [closed]

this question may already been made but I'd like to know how secure LUKS / cryptsetup is compared to TrueCrypt. What is the advantage and what is the disadvantage?
1
vote
2answers
494 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
0
votes
1answer
28 views

Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?

My title pretty much says it all: Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?
0
votes
1answer
406 views

Ubuntu 14 - unable to use sudo echo to overwrite files [duplicate]

For ubuntu 12.04 bash scripts, I used to be able to run commands like the example below to overwrite files: sudo echo 'line1 line2 line3' > /etc/some/config/file.conf Ever since Ubuntu 14.04, ...
3
votes
1answer
2k views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
1
vote
1answer
4k views

changed permitrootlogin to no, but I can still login as root

I just created a new server (VM) and I setup SSH, I can login fine. I created another user account, added it to the admin group and sudo works fine. Now I want tried to disable the root login, so I ...
0
votes
1answer
60 views

Unknown Micropohne can hear unknown person (weird)

I tried to capture a video using webcam and VLC. On Menu I select "open capture device". VLC then presents my webcam and 4 audio devices named hw:0,0, hw:0,2, hw:1,0 and hw:10. Because I don't know ...
1
vote
0answers
29 views

Why isn't Bastille in Ubuntu 14.04 [duplicate]

Bastille is missing from the Ubutnu 14.04 universe repository. The main question - what should I do to replace the security provided by Bastille? There must be a reason it was removed so how do I ...
1
vote
0answers
285 views

I am unable to generate a gpg key through the keyring program

Whenever I try to generate a gpg key through the system's GPG program, it asks for my name, email, and password then everything except for the GPG program's main window disappears. Upon using gpg ...
-2
votes
3answers
256 views

Penetration and Security of ubuntu operating system and it's working

I was reading about ubuntu and linux systems that they are immune to malware and virus attacks due to their well managed and good architecture. So the question is how much secure a ubuntu system is ...
-1
votes
1answer
163 views

How do I remove GPG private keys from memory? [closed]

When I do the following: gpg --decrypt somefile.pgp I see a graphical dialog come up asking me for the passphrase for my private GPG key. After that, subsequent runs don't require a passphrase, as ...
-1
votes
1answer
45 views

rpm -q --verify --nouser --nogroup --nomode --nomtime PACKAGENAME

What is equivalent to following line in Ubuntu / Debian world ? Note: I have original .deb files and i want to check which files differs from original zimbra-*.deb for Z in $(rpm -qa | grep ...
0
votes
1answer
28 views

Why is each security update file size so large?

The 'Software Updater' just asked me to download a security update which has a filesize of 62MB. And these updates are quite frequent. My questions are: Why are they this big, if, by the frequency ...
5
votes
3answers
8k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
0
votes
2answers
716 views

Is it safe to alias rm to safe-rm?

We are happy to use safe-rm as a replacement to rm, but is it considered safe to alias it? e.g. alias rm='safe-rm'
-1
votes
1answer
53 views

Problem to current security

I have install ubuntu in my lap . But after restarting my lap there is a message that " ubuntu has blocked by current securty policy" what can i do?
0
votes
1answer
97 views

How to temporarily block network access to root user?

Just want to temporarily block network access sometimes, even to the root user. How can I do this?