Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
352 views

Should I install non-repository software as root or as my user?

What is the right way of installing programs that are not available in repositories: should my user own the binaries and keep them in ~/bin/, or should root own the binaries and keep them in, say, ...
0
votes
1answer
65 views

Some doubt about root password

I was looking for installing a LAMP in my personal PC but I can't create folders in /var/www so i run this little script in my console: sudo passwd -l root And I don't know if this an issue ...
4
votes
2answers
167 views

Will my data be safe if my laptop is stolen when there is FDE and auto-login?

My SSD supports Full Disk Encryption (FDE). I have enabled FDE and set a password in BIOS. In case my laptop is stolen or lost, I want nobody to be able to get my data. Is it now secure to allow ...
20
votes
3answers
783 views

What automated intrusion notification/detection setup is good for home desktop use?

I've been using Linux for quite a while now and I always feel the need to have a passive software / script setup which can alert me of any suspicious network activities like scans, failed login ...
1
vote
1answer
179 views

Is it worth uninstalling the GUI to lower the attack surface of my Ubuntu server?

I note that there are similar questions on how to remove the GUI from an Ubuntu install, so I know the technique, I'm just wondering is it worth doing? To explain, I have a Ubuntu server hosting ...
4
votes
2answers
2k views

how to install KeePassX 2.0 Alpha on ubuntu

On the KeePassX site there is only a Linux version 0.4.3 for download. how can I install the latest version on Ubuntu? The problem is, that Version 0.4 is basically unmaintained. see: ...
4
votes
2answers
212 views

Is the lock screen secure enough to prevent “Mallory” from accessing the encrypted drive?

I use truecrypt to encrypt one of my drives and I would want to leave the computer running processes that use information of that drive while I'm not home, I've tried suspending it but everything ...
1
vote
1answer
26 views

Turning computer on log?

Is there a way to find out when my computer was turned on even if user was not successful on logging in?
2
votes
0answers
115 views

Prevent that TrueCrypt gets Administrator rights

If I try to open a TrueCrypt drive, TrueCrypt asks me for my administrator-password (also when I am a normal user). I know, that i can prevent this password-asking by editing the sudoers file = giving ...
6
votes
2answers
201 views

How can I be sure that the updated packages are not compromised?

When trying to install tmux I get an error that Untrusted packages could compromise your system's security, similar to the situation in this thread. I ran aptitude update and the package installed ...
1
vote
0answers
20 views

How to allow non-admin users to use Software Center and update the system? [duplicate]

I want to configure a laptop for someone who is not a technical person. I want her to be able to: install software from the Software Center uninstall software update the system install printer ...
2
votes
0answers
684 views

Unable to fork: Cannot allocate memory

frequently getting 'fork: Cannot allocate memory' when running commands over ssh. I have 64Gb of RAM and usually 1~2Gb free. swap is more than 8gb free Ubuntu version:"Ubuntu 12.04.2 LTS" Desktop ...
1
vote
1answer
405 views

Setup firewall: ask user to allow new incoming/outgoing traffic?

I'm using Ubuntu 12.10 and as I know there is already a firewall on any ubuntu system. It's ufw and because I like fancy gui stuff I can use gufw, that's very nice. Now I would like to configure this ...
0
votes
0answers
68 views

Where to download md5sum.txt for distro with applied security updates

I am looking for a way to find out if specific files are genuine. md5sum.txt should be on the ISO-CD but I didn't find a location to download it seperately for the current version. The system is a ...
2
votes
1answer
535 views

Help needed to fix security issues discovered using Nikto on Ubuntu server 12.10

What can be done to mitigate theses security issues found by Nikto on all our Ubuntu servers version 12.10? OSVDB-2799: /cgi-915/dose.pl?daily&somefile.txt&|ls|: DailyDose 1.1 is vulnerable ...
-1
votes
1answer
551 views

How can I prevent the hacking of my wired and wireless networks by tools like feedingbottle? [closed]

I am network administrator and I am always worried about network security as I know people use different techniques of hacking to penetrate wireless and wired networks. Recently I came to about ...
2
votes
2answers
315 views

Using linux/ubuntu to combat windows flash drive malware?

I had asked this question on ITSecurity @ Stack Exchange also. There may not be may linux distro users in ITSec, but obviously there are many here. So, I think that it might be appropriate to put that ...
0
votes
3answers
2k views

fail2ban or denyhosts to block invalid username login attempts

Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have: [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
2
votes
2answers
265 views

Need help for locking down linux desktop

Good morning all. So I work with a disabled guy and he has a computer. This guy asked for assistance, I put windows xp on his computer and I discovered that he loves deleting files (he managed to ...
2
votes
4answers
575 views

I can not password protect logging into my account

When I start up Ubuntu, I see the login screen. I have my account and a guest account as the choices. When I choose my account by clicking on it, I automatically get logged in with out being required ...
8
votes
2answers
458 views

What if NO update, security or otherwise is ever installed? [duplicate]

I am in need of expert advice: Our system admin who is new to Ubuntu in particular and *nix in general is reluctant to install any updates. His view is what if after installing updates the system ...
1
vote
1answer
76 views

What are all possible ways to login into an Ubuntu system?

I am running Ubuntu 12.10 on my laptop and I would like to make a set up such that without a login password, no one would be able to login into my system. Currently it seems that one can, quite ...
2
votes
0answers
262 views

How can I add an SSL client certificate/key globally in Ubuntu?

I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
3
votes
1answer
424 views

Is the key acquired from running gpg --export-secret-key encrypted or cleartext?

How to share one PGP key on multiple machines details how to export your gpg secret key into a file with gpg --export-secret-key -a > secretkey.asc. What the answer does not state is whether the ...
5
votes
4answers
3k views

Autoexec.bat equivalents for Ubuntu that run with root privelidges?

On Ubuntu there must be several "autoexec.bat" equivalents as I can see files like rc.local which seem to do very little because the comments in the file says it doesn't work by default and I tried ...
0
votes
0answers
45 views

Allow Users to do just shy of everything Root can do

I would like to setup individual instances of Ubuntu 12.04 for a variety of users that I want to be able to install software form the Ubuntu Software Center from GUI but not to see or change a file or ...
2
votes
1answer
63 views

How do I know if an app is safe to use?

Is there any reliable way to know if something that you install is safe? There are virus scanners like clamtk, but those only seem to focus on Windows files. Should I be concerned about viruses / ...
1
vote
2answers
710 views

Should I be worried about a possible threat?

I recently installed Ubuntu 12.10. I use Clamav and have scanned my system regularly for infections. Today it picked up a potential threat ...
0
votes
2answers
1k views

IP cam viewer for Vonnics DVR Ubuntu

I am trying to view the output from my Vonnics DVR security system. It works from a Windows program that came with the system, I-phones and my Android based phone. The only Windows computer is my ...
5
votes
4answers
369 views

How to protect Ubuntu12.10 from Viruses, Spywares, Spamware and Intruders?

I have been using Windows OS for a long time and there i needed to install a separate Anti virus Program (included with firewall, anti spam) etc.. With my mentor's recommendation, I have replaced ...
2
votes
1answer
173 views

How can I monitor/control applications making network connections?

I found out about nethogs and iftop the other day, and ran them. I was surprised to see some applications running daemons I didn't know about. It's fine now that I know about them, but I'd like to be ...
2
votes
1answer
115 views

What features should I check on my VPS in order to have a secure box?

I have a VPS with Ubuntu 12.10 server edition, an I connect to it from public/university. I host some web applications on it. I have always been concerned with security issues. What features is needed ...
4
votes
1answer
384 views

I (stupidly) left my laptop logged in, can I find out what was done while I wasn't there?

I am acutely aware I may be overly paranoid here. I left my laptop unattended by myself (I trusted a friend who was beside it). He assures me it was not touched. When I returned I was still logged ...
47
votes
8answers
3k views

What are the risks of NOT using a firewall (home computer)?

Since a password is required to be a superuser (to install and modify programs), what are the risks to not use a firewall under Ubuntu ? More particularly if I am using a NAT router ?
0
votes
1answer
211 views

Which kernel does 12.10 require?

Earlier this week Software Updater installed linux-image 3.5.0.26 which caused my 2 systems to become extremely unstable. I have locked in Grub the version I'm using to 3.5.0.24. Today Software ...
1
vote
1answer
54 views

Is there a patch for vulnerability in recent Linux kernels that offers root rights

An error in the handling of special netlink messages in the Linux kernel can allow a user to surreptitiously gain root privileges. To read the rest of the article, please click the following ...
0
votes
1answer
279 views

Best Practices for Monitoring Log Files

What are the best practices for monitoring log files on a single Ubuntu Server (LAMP)? Are there any specific "go-to" files that should be watched? I use fail2ban to monitor failed logins, but am ...
0
votes
1answer
3k views

Restrict SSH Access to Specific IP for User

My /etc/ssh/sshd_config file has a line like: AllowUsers jim@11.22.33.456 If I want to allow jim to use another IP addresses, how do I specify it? Does it take the form of a comma separated list? ...
3
votes
1answer
97 views

How do I ensure that security updates are installed on Juju machines?

It seems that security updates and other package updates are not automatically installed in Juju nodes. I assume that they are installed at installation of new Juju machines, or that the installation ...
2
votes
1answer
278 views

Enabling TCP MD5 signatures in 12.04?

After running a NeXpose scan of one of my servers, I'm getting notice that TCP MD5 signatures may not be enabled. I've looked all over the net and from what I can see this feature should be enabled ...
1
vote
1answer
227 views

Can I change user in the Unity interface without having to type password when changing back?

First of all, let me emphasize that I am talking about my home computer that I use for personal use. I have two accounts in Ubuntu: one for me, one for my wife. We don't use separate accounts to ...
4
votes
3answers
221 views

Will this sudo rule allow a user to update the system and nothing more?

I want to design a sudo rule that will allow the user ricardo to update the system using aptitude, but prevent him from using sudo to run any other command (he's a problem user). Are there any ...
1
vote
1answer
911 views

eth0: PACKET SNIFFER(/sbin/dhclient

Im new to Ubuntu and would like help please, I ran ProShield and got this error - eth0: PACKET SNIFFER(/sbin/dhclient I ran the following programs below and nothing came up as far as I can see. ...
1
vote
1answer
198 views

Can Mal/JavaJar-B infect an Ubuntu/Linux OS?

I've just read about the Mal/JavaJar-B malware that is apparently capable of attacking OS X computers via a security hole in Java. I've also heard a few people mention that it can also affect Linux ...
4
votes
1answer
159 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
4
votes
1answer
1k views

Do these log entries recorded an intrusion to the server?

Here are log entries I found in auth.log. What does + ??? mean? And was there an unauthorized access? Feb 11 07:48:32 tts-server su[31265]: Successful su for www-data by root Feb 11 07:48:32 ...
2
votes
0answers
197 views

How can I check the checksum of an installed deb package against the same package in the repository?

Suppose someone got root access to my machine and replaced some files, e.g. Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable Warning: ...
2
votes
0answers
89 views

How to inject or know if my wireless card is injectable

what ways or methods exist to know if a wireless card is injectable or can be injected (Packet injection). Answers should not include recommending me to use another OS that is not the official Ubuntu ...
45
votes
1answer
4k views

Can I make the webcam take a picture when an incorrect password is entered?

I am using a laptop . I was thinking to have a support in my Ubuntu machine. When an incorrect password is entered, a picture is taken later revealing who has been trying to gain access. I have ...
1
vote
1answer
46 views

Security bug when switching user account

I face the following security issue on Ubuntu 12.04, Classic desktop. There we have 6 user accounts on the machine. One user logs on. Ok. Then a second user is using the User switcher logs in as well. ...