Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
22 views

How would I securely connect to a smartphone?

I have got Ubuntu 14.04 LTS and a smartphone with no brand name of any kind. How do I connect the smartphone to my computer securely? The OS is unspecified. it looks like android. I am worried ...
1
vote
1answer
27 views

launch ipython but not like root

ipython is launched like root (UID); ok, but I need that after ipython cann't run and don't allow, script/code that can gain root privilegies. eg I launch ipython, ok the UID is root. And in my ...
95
votes
19answers
27k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
0
votes
0answers
10 views

How do I add an existing ubuntu user to a new domain?

Our organization is making some changes in their security model and they have created a domain server with which each machine would be linked. For this, they have created a new user on my laptop which ...
9
votes
3answers
429 views

sudo permission doesn't time out durring apt-get upgrade

Consider this: You type $sudo apt-get upgrade and get a list of things that need upgrading with a "Y\n" confirmation. before you can read the list, and type "Y" or "n", the phone rings, or your boss ...
1
vote
1answer
21 views

Locking down an apache server - Prevent '/' page from being visible to all

I first installed Apache as part of a ZoneMinder setup. I then added to the server with an ownCloud setup. All this is only accessible to LAN or to WAN-through-ssh and that part works great. I now ...
17
votes
2answers
5k views

Disable password access through SSH?

I'm setting up a server for backing up my desktop box remotely. I want to prevent remote password access to the server, permitting only users with private keys (AKA my desktop box) to access it. How ...
0
votes
0answers
24 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...
3
votes
3answers
3k views

CHOWN: What does “id -u” represent

I am working to get Mongodb running on a Ubuntu server install. In reviewing the instructions I needed to create a "\data\db" directory in the root drive. At which point I needed to alter the owner ...
0
votes
0answers
15 views

Jenkins jobs running on slaves [closed]

I would like to restrict where a job can be run based on the job labels but also based on the job name. Is that possible? Or even, check if the job name matches (in same way) with the job label
0
votes
2answers
150 views

Connect button grayed out in 802.1x authentication dialog

Since I upgraded to 15.04 I can't connect to our office wired network anymore since I can't press connect in the authentication dialog.
0
votes
1answer
14 views

Can I make the Windows folder require a password to access it? [Edit/change or add flder and data]

Recently, I was thinking that while running wine an application that contains a virus can inject into the windows folder. I don't know if this is possible, but it would be nice to make the Windows ...
2
votes
2answers
4k views

How to use rsync via ssh with rsa key passphrases?

How can I use rsync with passphrases? All googled "solutions" i found use passphrase-less keys which seems no real option. i am runnning 2 ubuntu servers 12.04.2 LTS.
3
votes
2answers
9k views

How do I check if someone accessed my computer?

I need to check the list of files accessed in my computer (ex: yesterday on particular time). Is it possible? Or I need to check whether anybody accessed my computer (when I left it unlocked) or ...
1
vote
2answers
67 views

OSSEC HIDS reports “Interface entered in promiscuous(sniffing) mode”

I have installed the latest version of OSSEC HIDS (2.8.1), and I keep now getting these email notifications from it: OSSEC HIDS Notification. 2015 Apr 08 11:26:17 Received From: ...
1
vote
2answers
34 views

Encrypt second hard disk with same password

I installed Ubuntu 14 LTS with disk encryption (selected during installation). I have two questions: 1- What is encryption algorithm of current encrypted disk? 2- I have a second hard disk and I ...
10
votes
2answers
1k views

What is a security update?

Why are some updates called Important security updates? How are they different from other updates? Is my system insecure, If I don't install them? How can there be very frequent security updates? ...
2
votes
3answers
15k views

Cannot create file/directory in home directory

I have a headless Ubuntu 12.10 server. I'm logged in as administrator via SSH. I cannot create a directory in my home directory: administrator@Leo:~$ cd ~ administrator@Leo:~$ mkdir Test mkdir: ...
0
votes
1answer
19 views

Stateful Packet Inspection on Ubuntu?

By default Ubuntu doesn't have open ports (exceptions: Avahi and dhcp). Assuming that my system is connected to the internet by direct way (no hardware firewall used): If I am sending a UDP packet to ...
0
votes
1answer
25 views

Block all but one ip address

I need to allow access to only one IP address and block the rest, so I wrote the following: sudo iptables -F sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables ...
-1
votes
0answers
7 views

why do I encounter multiple authentication requests after a restart [on hold]

why, after restarting Ubuntu 15.04,do i have to enter my password multiple times to authentication requests?
1
vote
1answer
32 views

Why ntpd needs an open port?

On my Ubuntu system I have activated the 'Time Synchronization via Internet'. Because of that the ntp daemon gets started. What I don't understand: Why needs ntpd an open UDP port 123? Actually, I ...
0
votes
0answers
7 views

Does installing WINE make a Ubuntu PC less secure? [duplicate]

Does anyone know if installing WINE on a Ubuntu PC make it more prone to security risks i.e. malware, virii, system security exploits, etc? I would like to know more about why it would or would not ...
0
votes
0answers
19 views

How do I compare my openssl version with non-ubuntu openssl versions?

I have an ongoing problem where every time an openssl vulnerability is found, the announcement documentation tells me what versions of openssl are safe -- but ubuntu doesn't actually use the same ...
0
votes
1answer
32 views

What does these logs means? (DHCPREQUEST)

I'm using Ubuntu 14.04 LTS as my OS. For safety purposes, I'm always checking the logs to see any strange thing. Today, I have found something that (probably) never happened to me: Jun 11 23:33:59 ...
6
votes
2answers
499 views

How to make my server email me when there are security updates?

There's obviously a way to check to see when an update is a security update. I often get greeted by a motd that says "there are N security updates." What I'd like to do is have my server email me a ...
1
vote
1answer
32 views

Suspected rootkit, what should I do?

I inherited ubuntu 12.4 server and I want to check it for possible rootkits/modifications. Is there a way to test all executable/library files for modification (test if currently installed files are ...
0
votes
1answer
46 views

Build web server from scratch [closed]

How to build the web server from scratch like installation of server,configuration of webserver,Security and performance management and troubleshooting. i also want to know how to setup router to ...
0
votes
0answers
90 views

java security prompt even with exception list

I'm trying to run an applet of a website, and a prompt pops up with "Application blocked by security Java" but I have this website on the exception list! I'm running ubuntu 14.04 and Java Version 8 ...
6
votes
4answers
823 views

Filesystem that gives an encrypted view of a directory—the inverse of EncFS

Currently I'm using EncFS to encrypt my directory "confidential" to ".encconfidential" and sync that encrypted directory using an online service (e.g. Dropbox, UbuntuOne etc). However my entire disk ...
2
votes
1answer
38 views

How to enable unhide in rkhunter

I have installed rkhunter with: sudo apt-get install rkhunter And even though I have enabled all test, when I run: sudo rkhunter --check --sk If I check in the log file, I see this about the ...
0
votes
2answers
54 views

How to stop administrative password change

It is extremely easy in Ubuntu to change the administrator password by using the recovery console and dropping to root. Is there any way to stop a root user from changing the administrative password?
0
votes
1answer
29 views

How to deal with this untrusted program

The program is IPFS. I do not fully trust the program, how should I keep it from making changes to my system outside of its designated folders?
0
votes
0answers
41 views

Password popup on USB unplug/replug “Authentication is required to change your own user data”

After upgrading from 14.04 to 14.10 when I unplug and re-plug a USB mouse (or switch keyboard/monitor/mouse with a KVM switch.) an authentication popup dialog appears asking for my password saying ...
0
votes
0answers
13 views

virtualization and security vis PCI DSS security

I have a couple questions about the effect of virtualization and the security of both the host and guest systems. The OS on both is Ubuntu server 14.04. I opted for use of Oracle's Virtualbox. I ...
0
votes
0answers
26 views

Failing PCI audit

I am Running Ubuntu 14.04.2 with Apache as a reverse proxy the server is fully patched and I am getting the following information when I use www.mynpcdata.net to scan the system. I have no idea if ...
3
votes
1answer
59 views

How to show all files created on a specific date

On 16/05/2015 at 17:18 I visited a malicious website. And I suspect a drive-by-download, so I want to check my machine to see since that time in order of creation which files have been created or ...
1
vote
1answer
50 views

What are the features in Snappy Ubuntu that make it more secure than the normal Ubuntu?

I am thinking of using Snappy Ubuntu for IoT application. Security is important in IoT. What is the difference between Snappy Ubuntu and the normal Ubuntu that makes Snappy more secure compared to ...
21
votes
3answers
2k views

What is the “Free software only” option when installing Ubuntu?

When installing Ubuntu, you get a Free software only option. Does that Free software only option mean Free as in beer or Free as in freedom? When I say free as in freedom, I mean FSF type of ...
0
votes
0answers
23 views

Do I have all the security benefits of Ubuntu if I install it on an android tablet?

Background: I will go traveling and need a small computer to check things, do banking, book flights and write. I want Ubuntu on it to have a secure, save and stable environment (as I have it on my ...
1
vote
2answers
258 views

How can I disable the Terminal Emulator for certain users?

How to prevent specific users from using the terminal emulator?! I make a trick by writing a script in .bashrc which request a user to enter a password to be able to use the terminal emulator. But ...
0
votes
0answers
12 views

Wireless network connection won't stay secured

I set my wireless connections with WPA & WPA2 Personal Security & a password. Every time I shut down & come back later those settings are gone & my network connection is unsecured ...
1
vote
2answers
61 views

What is this and how can this happen? Is this a security issue or can it be a virus?

From the last 3-4 days, my laptop has started becoming much laggy when I'm working on Android Studio or if it is just running in the background. So, today again I was working in Android Studio. My ...
0
votes
1answer
50 views

Ubuntu Phone prevent text messages from lock screen

On my Aquaris Ubuntu Phone, text messages quickly pop up on the lock screen. As I consider this a serious security issue, is it possible to hide any messages from the lock screen? Thanks for any ...
0
votes
1answer
21 views

How to exclude a specific folder from search in Synapse?

I added excluded folder to Security & Privacy settings and I followed this instructions but all of them seem to be working only when using Unity Dash search. Inside System and Home Dir. I could ...
4
votes
1answer
11k views

Can I install all the hacking tools of KALI on Ubuntu?

I want to know is there any way to install all hacking tools of kali on ubuntu 12.04 ? If yes then pls tell me how ? like sqlmap , nikto , john , aircrack-ng etc . Thanks.
2
votes
2answers
34 views

When would my application need to run with privileges?

One way of making sure an application is less prone to attack is to make sure it runs with the least privileges required (user mode preferred). I've only usually programmed for Windows using the .NET ...
1
vote
1answer
266 views

can windows virus affect Linux machine through wine? [duplicate]

When we use wine on Linux PC windows Virus can affect folders of wine? I think may be not; But I still Confuse about that. What is accurate answer? Wine is emulator of windows then some question ...
0
votes
1answer
893 views

Alternative Open Source software to GFI end point security

What are the GUI open source alternatives To GFI end point security for Windows? knowing that I'm using Ubuntu 12.04 64bit Thanks in advance...
1
vote
1answer
2k views

How to setup Squid Proxy Server on ubuntu 12.04 LTS?

I had tried using the Ubuntu wiki guidelines to set it up on test server, and it worked. Though I would appreciate if anyone can provide me with few other links as this time I am going to install it ...