Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
20 views

Why is root the owner of my Desktop in Ubuntu 14.04?

When I am in my home folder there is a padlock on my Desktop icon. In properties there is written that root is the owner of Desktop and consequently I can't put anything on my Desktop. I have ...
7
votes
2answers
3k views

Google Authenticator for Desktop (lightdm or gdm plugin)

There has a been a similar question, but that's not exactly what I want. I'd like to know if there is a plugin, or add-on, for lightdm or gdm that allows me to authenticate using my password AND ...
0
votes
0answers
50 views

Why does pinging/nmapping spy.no-ip.biz return localhost? [on hold]

I just want to know is going on? user@******:~$ ping spy.no-ip.biz PING spy.no-ip.biz (127.0.0.1) 56(84) bytes of data. 64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.090 ms 64 bytes ...
-2
votes
2answers
27 views

Security updates for old-releases

I know that I should upgrade to a newer supported Ubuntu version if possible, but: if you have no possibility to upgrade (for reasons not important here) you have to use the old-releases archive from ...
0
votes
1answer
33 views

Ubuntu 13.10 end of support

13.10 ends support today, I want to do a clean install of 14.04.1,but it arrives next week,is it highly risk to wait fot 14.04.1 one week with 13.10 no supported? Thanks.
2
votes
6answers
5k views

How do I encrypt/decrypt file within gedit?

In the previous version of Ubuntu (eg: maverick, natty), I used to do a: sudo apt-get install gedit-plugins seahorse to have the ability to encrypt/decrypt file within Gedit after enabling the ...
0
votes
1answer
20 views

Possibility that ubuntu machine infected by FTP malware

I know that this question might be duplicated but here is what happened. Our web server got attack by injecting the spam links into server script file (Web server running ...
11
votes
3answers
3k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
38
votes
9answers
22k views

How to harden an SSH server?

What measures can/should I take to make sure that security around my SSH server is absolutely impermeable? This will be community wiki from the start, so lets see what people does to secure their ...
-1
votes
0answers
57 views

Still dealing with a hacker. Now dealing with clear XSS clickjacking in chromium [on hold]

I don't need people that don't believe me. I've been dealing with a hacker for a very long time. A hacker who has a hate blog dedicated to me. I've submitted complaints to IC3 but no one's ever gotten ...
0
votes
1answer
22 views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
1
vote
0answers
26 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
9
votes
3answers
23k views

How to disable IPv6 permanently?

How can we disable IPv6 system wide via terminal commands? I've read editing /etc/modprobe.d/aliases and replacing: alias net-pf-10 ipv6 with: alias net-pf-10 off alias ipv6 off Is this safe ...
1
vote
0answers
14 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
1
vote
1answer
21 views

Moving away from ROOT user

I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really. However I found out that since the day they got their VPS everything, ...
26
votes
1answer
1k views

how to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?
4
votes
2answers
3k views

Disable interactive SSH at user-level

I connect to a server I don't control via SSH. I use public key access and don't need to be able to connect with a keyboard-interactive password. I would like to disable keyboard-interactive access ...
1
vote
2answers
918 views

Should I be worried about a possible threat?

I recently installed Ubuntu 12.10. I use Clamav and have scanned my system regularly for infections. Today it picked up a potential threat ...
18
votes
2answers
1k views

Why should I trust the “System program problem detected” dialog?

This always shows up a few minutes after I log in: I have no idea what it is. If I click Report problem, it asks for my password: This is exactly what I would do if I wanted to steal someone's ...
23
votes
6answers
2k views

How can I confirm that the binaries in my Ubuntu are from the source code it should be from?

Like 99% of users, I install Ubuntu from ready-made binaries. How can I verify myself that those binaries are in fact from the original source code from Ubuntu? It would be good to verify that ...
1
vote
1answer
55 views

Security bug when switching user account

I face the following security issue on Ubuntu 12.04, Classic desktop. There we have 6 user accounts on the machine. One user logs on. Ok. Then a second user is using the User switcher logs in as well. ...
2
votes
2answers
42 views

is there some sort of all-purpose logging tool I can download as a package?

As in, a tool that will give me easy to read logging information all in one convenient place, divvied up into categories. Logs for say, ssh daemon, user logins/logouts and other activity, installed ...
13
votes
2answers
17k views

How can I allow SSH password authentication from only certain IP addresses?

I'd like to allow SSH password authentication from only a certain subnet. I see the option to disallow it globally in /etc/ssh/sshd_config: # Change to no to disable tunnelled clear text passwords ...
1
vote
0answers
18 views

install ubuntu on a hardware AES encrypted flash drive

I couldn't find the answer to my question after hours of search. I hope someone can help me out. I would like to install ubuntu on a flash drive. I followed to standard instructions for installing ...
0
votes
4answers
3k views

fail2ban or denyhosts to block invalid username login attempts

Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have: [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
0
votes
0answers
16 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
0
votes
1answer
35 views

Restrict user access to /proc and /sys

I have one big problem: setfacl does not seem to work for /proc and /sys, but I would like to restrict one specific users rights and I do not find it acceptable for that user to read stuff like ...
0
votes
0answers
58 views

My grandmother's computer has malware [on hold]

So, my grandmother can barely use the Internet. I placed a link to Netflix right on her desktop. That's all she ever does on the thing (no ads on Netflix). My siblings (always not caring what they ...
8
votes
2answers
4k views

What does “pts/” in the output of w mean?

When I run w - to see who is logged on and what they are doing, i see this: USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user tty7 :0 08:14 10:32m ...
71
votes
8answers
33k views

How to delete file(s) in secure manner?

Is there a way to make sure that a deleted file can not be recovered? As you know, deleting a file by pressing shift-del or using trash doesn't mean that file is gone forever. It resides somewhere ...
2
votes
1answer
50 views

Sudo is also user login password - why? how to change?

When installing Ubuntu I can create a user with an encrypted folder, what I always do. Now after the installation the login password for this user is also the sudo password. Is that how it should be? ...
0
votes
0answers
11 views

Are Ubuntu upgrades signed or encrypted?

When you download updates from the standard Software Updater (which I'm assuming is just a graphical front-end for apt), are these updates signed or encrypted between the server and the user, or are ...
0
votes
0answers
16 views

Want to know how how secure my system is with current settings

My system is at kernel 3.15.2 Mainline. I have Enabled the firewall with all ports closed. I have very strong passwords set for BIOS, Drive Encryption, and login SSH is Disabled. I have installed ...
2
votes
1answer
3k views

How to use rsync via ssh with rsa key passphrases?

How can I use rsync with passphrases? All googled "solutions" i found use passphrase-less keys which seems no real option. i am runnning 2 ubuntu servers 12.04.2 LTS.
1
vote
3answers
207 views

cryptsetup - LUKS vs. Truecrypt

this question may already been made but I'd like to know how secure LUKS / cryptsetup is compared to TrueCrypt. What is the advantage and what is the disadvantage?
-1
votes
0answers
180 views

Strange behavior on ubuntu

I have been having a recurring problem with my PC, I eventually installed Ubuntu hoping it would solve my issues but it does not seem to. I believe I was the victim of a PNP attack to my router if ...
0
votes
2answers
37 views

How to store network-manager settings in home

I'm using Ubuntu 14.04 with the network-manager. It stores all Information about wireless networks, VPNs, ... in /etc/NetworkManager/system-connections and I was just wondering why... I thought the ...
79
votes
18answers
15k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
0
votes
0answers
15 views

are ubuntu software center mirrors safe? [duplicate]

Could the admin of a mirror server/ isp attach a trojan into or fake a package? It's all my question. This sentence is just spam. You don't need to read. Why it is difficult to post a question here. ...
0
votes
0answers
58 views

Is fingerprint-gui a security hole?

I have a Thinkpad T440 on Ubuntu 14.04. I use fingerprint-gui to allow me to login and use sudo by swiping a fingerprint. The worrying part is that anyone can run the fingerprint-gui program to ...
1
vote
1answer
57 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from the Arch wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully ...
0
votes
0answers
27 views

Why do I have to keep entering my password when using sudo? [duplicate]

When I use ec2, whenever I enter sudo I never have to enter a password. I have my own VM server now and I created a user using this command when I was a root: usermod -a -G sudo deploy So now when ...
0
votes
1answer
17 views

Ubuntu virtual machine guest-only internet

Disconnecting internet is a great security advise but i want to check my emails. is that possible to use Ubuntu as host without internet connection while in a guest OS in Virtualbox is able to browse ...
1
vote
1answer
49 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
0
votes
1answer
21 views

Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?

My title pretty much says it all: Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?
0
votes
1answer
101 views

How To Install Djigzo on Ubuntu?

Can any one provide step by step configuration to install Djigzo? Djigzo Website.
0
votes
1answer
37 views

Ubuntu 14 - unable to use sudo echo to overwrite files [duplicate]

For ubuntu 12.04 bash scripts, I used to be able to run commands like the example below to overwrite files: sudo echo 'line1 line2 line3' > /etc/some/config/file.conf Ever since Ubuntu 14.04, ...
-1
votes
0answers
19 views

Zimbra DelegateAuthRequest

Since a time, i suspect some of zimbra admin users use backend to spy other users accounts with the "see mail" button. In zimbra log, when some admin user log in to a common user, looks like this: ...
1
vote
1answer
165 views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
0
votes
0answers
40 views

Is Enabling UPnP in Transmission Worth the Security Risk?

I'm wondering if enabling UPnP so that Transmission can select a random port on start worth the security risk. I am not asking if having a listening port is worth the risk but instead is it worth the ...