Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

1
vote
0answers
47 views

sudo apt-get update stuck at 100% [Waiting for headers]? [duplicate]

Here is the sample Hit http://security.ubuntu.com raring-security/main Translation-en Hit http://security.ubuntu.com raring-security/multiverse Translation-en Hit ...
5
votes
1answer
450 views

Seeking for a better solution to restrict access in GRUB2 menu

I just read that in certain situations you should also protect access to your GRUB2 menu by setting a password and may be refining acces by adding --unrestricted or --users as arguments to menuentries ...
1
vote
3answers
238 views

How to disable Bit Torrent Client

There is a lot of traffic generated by my Transmission Bit Torrent client which I don't use at all. I see that this application comes pre installed in Ubuntu 12.04. So, is there a way through which I ...
0
votes
1answer
39 views

how to stop administrative password change

It is extremely easy in ubuntu to change the administrator password by using the recovery console and dropping to root. Is there any way to stop a root user from changing the administrative password?
3
votes
1answer
124 views

What can a user do without sudo?

I'm setting up a server and want a user to only have access to his own files. I do a regular adduser command: sudo adduser username And give the user a password. Then I log in to it via ssh and see ...
1
vote
0answers
298 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
1
vote
0answers
82 views

How to unlock multiple encrypted partitions on boot?

I have two encrypted partitions sharing the same passphrase. I would rather not enter the password twice plus the login password. How can I unlock both partitions at once? Maybe even only enter one ...
0
votes
1answer
57 views

It is safe to include Kate in the sudoers so it can run sudo without password?

I want know if its as security problem when I add Kate in sudoers without pw? I think one must intercept my xserver session to make misuse of it. Or am I wrong?
3
votes
1answer
205 views

Does CVE-2012-0883 apply to Ubuntu?

Does the Apache vulnerability CVE-2012-0883 affect Ubuntu? Have tried searching for it at ubuntu.com but with no hits. I note that Ubuntu releases an Ubuntu Security Notice (USN) when it issues an ...
2
votes
5answers
4k views

Any real-time antivirus for Ubuntu?

Is there any real-time anti virus for Ubuntu? Which antivirus is good and in real-time (I mean that, if I try to open an infected file or go to a bad website, it stops it). I read a post in ...
2
votes
1answer
122 views

Can chmod 777 be a security risk on a personal machine?

Can 777 permissions increase security risk on an average Ubuntu single-user machine? How? What are other downsides of it? Thanks
0
votes
1answer
17 views

File specific privacy

How do I encrypt specific files with minimum fuss and bother? I have followed various instructions with more or less the same result; I end up with a folder named 'private'. I need a folder that I ...
1
vote
2answers
192 views

Unencrypted /boot partition can be infected from windows on dual-boot system?

I have dual-boot with windows 7 and ubuntu. /dev/sda1 ext4 (/boot) /dev/sda2 ntfs (windows partition) /dev/sda5 ext4 (root encrypted) I don't have any concern of adversaries gaining ...
0
votes
0answers
50 views

Can command cmp be used to compare a disc and an ISO?

My friend gave me a ubuntu live CD, for security reason I want to make sure the CD is safe to use. I have checked the sha256sum and md5sum of the CD, but then I heard they have vulnerabilities too. ...
3
votes
0answers
49 views

Is universe checked by the Ubuntu Security team?

I have a generall question regarding the Ubuntu universe repository. Does anybody know if they are checked by Ubuntu Security Team? Will they move or delete packages if any problem is encountered ...
1
vote
2answers
955 views

Ubuntu - apt-get not working behind restricted internet access

I have Ubuntu 12.04 64-bit boxes running in a company but they have internet browsing and firewalls for security. When I do apt-get update or install it fails. But I have a remote server which ip is ...
1
vote
3answers
64 views

What are CVE security updates and who issues them?

Just a couple quick questions. Hope a couple wise owls might be able to answer ; ) I used to apply updates through the terminal without any care, since I don't use any ppa's or use any untrusted ...
-1
votes
1answer
43 views

Can I trust 3rd party software?

I've begun to appreciate Ubuntu and the philosophy of open source software, and now I have a doubt about 3rd party software. Is it a bad idea to download them or can I trust every open source ...
0
votes
2answers
182 views

When will Ubuntu include Digital Certificates from Govt of India Root CA PKI CCA India 2007?

Ubuntu for all platforms (laptops+mobiles) must respect and contain Government of India's Root CA and CA Certificates and improve compliance with Indian IT Act 2000 (Cross Certification) and law ...
0
votes
1answer
267 views

How can Shared Memory be dangerous in server environments & how to secure it?

I just understand somewhat about what's the purpose of shared memory which is for faster exchange or use of data among several programs. But having seen a lot of people trying to or talking about ...
1
vote
3answers
129 views

Seeing all installed items on server and protecting server from malware

I've got a VPS running Ubuntu 12.04 - I'm not particularly well versed in server management, but can do basic CL stuff. We've got some third parties (from odesk) working on a web app for us that will ...
0
votes
1answer
199 views

Do some files downloaded from the internet have execute permission by default?

I noticed that some files downloaded from the internet have executing permission (e.g. Tor, Bit-torrent, Sync etc.) by default. Therefore the permission information is stored within the files itself, ...
0
votes
0answers
35 views

How can I improve my paxtest results?

I have AppArmor Installed, but I am willing to secure my system more, I ran a paxtest and I am not impressed by the results, how can I make my results better and make my linux system kill those stuff? ...
0
votes
1answer
282 views

basic security ubntu 12.04 LAMP server quesrions [closed]

I have a few questions about security on my ubntu 12.04 LAMP server (newbie) This is what I´ve done so far: Install and configure Firewall - ufw Secure shared memory - fstab SSH - Disable root ...
1
vote
1answer
369 views

Cannot remove script virus in Ubuntu [duplicate]

After I scan via clamav/clamtk, I found 1 possible threat that I cannot remove/quarantine. How to remove virus? Or Is this false positive? ...
1
vote
0answers
60 views

Can a weak Ubuntu user password be a risk for ONLINE security?

Can anyone gain an unauthorized remote access to my Ubuntu machine? Does having a strong user password really helps prevent this? Or firewall just doesn't let anyone in by default, regardless of the ...
10
votes
2answers
327 views

What security context software does Ubuntu use?

Does Ubuntu use SELinux by default and if not, how is security context managed? For example, allowing processes to run as root without security context can be a security risk. The help page about ...
1
vote
1answer
1k views

Does Ubuntu deliberately contaminate its binaries to help NSA? [closed]

A week ago asking this question of Microsoft or such would have got me labelled as paranoid, and asking this question about Ubuntu would have seemed plain stupid, bordering offensive. Then we found ...
3
votes
4answers
485 views

How to ensure Wine does not auto run .exe files?

I want to install Wine only for running a program, but I don't want to open any other Windows file (for security). Is it possible to ensure Wine does not execute .exe files automatically? Thank you.
0
votes
1answer
31 views

Are there any packages that do all the recommended configuration settings for a secured server environment?

I came across questions & articles like these: 1.) What Can Be Done To Secure Ubuntu Server? , 2.) How to prevent your website from getting hacked. which speak of many configuration settings for ...
3
votes
2answers
364 views

Which is a safe way to record Firefox passwords in Gnome Seahorse Keyring?

Searching for answers about ways to record Firefox passwords in Gnome Seahorse Keyring vault, I found severals possibilities: Firefox Gnome Keyring firefox addon from https://github.com/ in this ...
3
votes
1answer
333 views

Why is a group writable directory considered unsafe?

More specifically, why does libslack's daemon consider files that are being executed in a group writable directory to be "unsafe"? If you can give me an explanation of why group writable directories ...
1
vote
0answers
99 views

Good security setup in a LAMP environment

I have created a script to automate setting up my LAMP environment as well as installing some other software I find very helpful in coding. The script can be found here I only have one user "root" ...
1
vote
1answer
169 views

USB PAM login with SD Card

I am trying to set up a PAM login token. I want to use an SD card instead of a normal USB flash disk. When I run the pamusb-conf to set up a new device, with the SD card inserted, it says that there ...
1
vote
1answer
21 views

Is there any way to get CVE or USN ids that need to be installed?

I'm looking to pull in what CVE or USN ids that apply to a security update before doing them. Is there any way?
1
vote
1answer
412 views

Secure OpenERP Server

I use a Ubuntu 12.10 Desktop as a server 'only' for OpenERP 7.0. This OpenERP server is used by both, the team as well as clients. I've checked out posts that help someone secure a 'web-server' (i.e a ...
0
votes
1answer
146 views

Can the admin of a SSH server monitor internet traffic?

I use SSH Tunnelling + socks4/5 to browse securely, but a certain question came up in my mind, can the administrator of that SSH server monitor my traffic? like see which websites I am visiting, ...
2
votes
1answer
119 views

Dash icon does not work

Below is the contents in the ubuntu-software-center-desktop file. The Dash Home does not show the contents when it is opened up. The Icon is black and does not respond when you place your courser ...
2
votes
0answers
202 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
1
vote
0answers
374 views

fail2ban block retry count always changes

As title mentions clearly, fail2ban block retry count always changes. I set all retry counts to 3; but sometimes it blocks me after 6 or 7 retries. How can set its behavior a constant value? I added ...
2
votes
1answer
3k views

How to use rsync via ssh with rsa key passphrases?

How can I use rsync with passphrases? All googled "solutions" i found use passphrase-less keys which seems no real option. i am runnning 2 ubuntu servers 12.04.2 LTS.
0
votes
1answer
4k views

flashplayer security doubts

I am an Ubuntu newbie and I installed Ubuntu Desktop 12.04, 64 bit. As I noticed the Firefox is the actual version, but the Adobe Flashplayer was the 11.2 version which has, I guess, some security ...
0
votes
1answer
36 views

Acces to my PC from hostile Access Point

I connected to a Wifi access point that had cloned my SSID. I did not enter my ubuntu password during the connection, since I did not install anything. I just used Firefox for several minutes. Is ...
1
vote
0answers
127 views

Securing Amazon EC2 Ubuntu server

I'm about to launch a product I'm working on into alpha phase but before that I'd like to ask a bit about securing my Ubuntu server 64bit which is hosted at Amazon AWS EC2. The problem is my software ...
2
votes
2answers
61 views

PDF security problem

I'm looking for a program that allows me to export a document to PDF safely, so that other users can open it but can not copy or print its contents. While I used Windows I used PDF printers such as ...
0
votes
1answer
413 views

TKIP Encryption not visible

When I want to connecto to my AP whih uses Security type = WPA2 - Personal Encryption = TKIP There is no field I can enter TKIP encryption, I am asked only for Name, security type and Security key ...
0
votes
1answer
73 views

suspected security breach

for a few days now, i'm seeing automated .log files and folders on my home folder, they are recreated even after they are deleted, couldn't make sure the source of it... file --> ...
0
votes
1answer
383 views

Incoming ssh connections blocked

Hi some time back I asked this question and made a lot of changes to secure my system. Now I need to make a dummy account and give ssh access of this account to a friend. But I am unable to receive ...
2
votes
3answers
331 views

Are there any security suites available for Ubuntu? [duplicate]

I'm new to Ubuntu, but I've heard Linux, especially Ubuntu is an Virus Free OS. Still are there any security suites available for Ubuntu that could make it more secure? Or do I not need any extra ...
2
votes
2answers
44 views

is there some sort of all-purpose logging tool I can download as a package?

As in, a tool that will give me easy to read logging information all in one convenient place, divvied up into categories. Logs for say, ssh daemon, user logins/logouts and other activity, installed ...