Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
9 views

SFTP security: Can't verify the identity of an IP

When I connect to sftp://10.116.202.136 via Nautilus, I receive this message: Can't verify the identity of “10.116.202.136 (10.116.202.136)”. This happens when you log in to a computer the first ...
21
votes
6answers
33k views

GUI for iptables?

I would like to secure my server and it seems that IPtables is one of the first steps. Unfortunately editing the rules in a terminal is a bit complicated and dangerous (those who ever did an iptables -...
0
votes
0answers
23 views

AppArmor profile

Can someone audit my apparmor qbitorrent profile? I'm sorta new to apparmor and don't want to give away more permissions than necessary. Using Xubuntu 15.10. #include <tunables/global> /usr/...
5
votes
1answer
30 views

Keep computer locked in a view-only state

Is there any way to keep my computer locked in a "view-only" state? I want to be able to see the screen, but if I want to control the computer, I'll have to enter my password. I cannot move the ...
7
votes
1answer
743 views

Is “LD_LIBRARY_PATH” a security risk?

We know ld.so searches for libraries in directories specified by the environment variable $LD_LIBRARY_PATH, but regular users could run: export LD_LIBRARY_PATH=dir1:dir2... They can save infected ...
1
vote
2answers
390 views

telegram with secret chats

What is the best way to run telegram on linux with support for secret chats? This is what I tried already: run telegram desktop - works very well but no secret chats feature pack android telegram ...
1
vote
0answers
28 views

12.04 - Cannot unlock user account although it is an admin account

I am having problems similar to these, but in this post no one managed to solve it. How do I unlock system tools such as users and date and time This issued is bothering me a lot, because it also ...
0
votes
0answers
12 views

Restoring backup from another installation and myy Encryption Password for Dejadup does not work. Why, and what do I do?

I recently reinstalled Ubuntu. I was running Ubuntu MATE and decided to scale down to a stripped down version. I backed up all of my files to an external HDD and took a picture of my passphrase so I ...
0
votes
1answer
328 views

How do I unlock system tools such as users and date and time

I'm using Ubuntu Server 14.04 with Gnome and suddenly I can't unlock system settings such as Users and time & date: the unlock icon is grayed out even though I'm an administrator and terminal ...
-2
votes
0answers
22 views

i need help about installing parrot security os tools in ubuntu 14.04

As tittle says i need to install all tools for pentesting which used in parrot security OS ( http://parrotsec.org ) i am using ubuntu 14.04 i386 want to install parrot security os's tools on ubuntu ...
13
votes
3answers
843 views

How to disable HTTP referrer in Firefox?

I feel that the HTTP referrer is a violation of my privacy (the HTTP header field that identifies the webpage you just came from which was linked to the webpage you are going to) and I understand that ...
1
vote
1answer
32 views

Suspect of keylogger/screen logger in Ubuntu machine [closed]

Seems my Ubuntu was hacked by a site while browsing. Is there a way that I can remove any logging software that may have been installed, or identify if a threat is present?
5
votes
6answers
1k views

How to ensure Wine does not auto run .exe files?

I want to install Wine only for running a program, but I don't want to open any other Windows file (for security). Is it possible to ensure Wine does not execute .exe files automatically? Thank you.
2
votes
2answers
47 views

Is there any way to get CVE or USN ids that need to be installed?

I'm looking to pull in what CVE or USN ids that apply to a security update before doing them. Is there any way?
3
votes
1answer
42 views

How do I prevent root access from all TTYs

I am trying to secure root access on my Ubuntu servers (running 14.04 desktop and 16.04 server). I would like to disable root access on all TTYs except TTY1. I know this can be done by editing /etc/...
6
votes
1answer
140 views

What testing is done to make sure no packages in the repos have malware?

How is it ensured that a trusted user can't compile a package with malware and place it in the universe repo.
0
votes
0answers
53 views

Video surveillance camera onvif

I have an IP camera with ONVIF 2.4 protocol(http://www.pni.ro/sisteme-securitate/supraveghere-video/camere-cu-ip/camera-supraveghere-video-pni-ip10mp-720p-cu-ip-de-exterior.html , the page is in ...
0
votes
2answers
31 views

If I only use when needed, does enabling the “su” account present dangers? [duplicate]

So I'm the only the user of my computer, and I eventually figured out how to enable the "su" user on my account with a password (really quite simple actually), just in case I ever needed to do ...
184
votes
6answers
142k views

How can I install just security updates from the command line?

sudo apt-get upgrade installs all updates, not just security updates. I know that I can use Update Manager to select only important security updates, but is there a way to do this from the command ...
4
votes
0answers
26 views

Signature-based rootkit scanner?

Currently the only rootkit scanners I know of have to be installed on the machine before the rootkit so that they can compare file changes etc (e.g.: chkrootkit and rkhunter), but what I really need ...
3
votes
1answer
113 views

URL for Ubuntu 16.04 security updates

Which URL is recommended for Ubuntu 16.04 (Xenial Xerus) security updates? deb http://security.ubuntu.com/ubuntu xenial-security ... or deb http://archive.ubuntu.com/ubuntu xenial-security ......
0
votes
1answer
34 views

Add a repository for security testing

I want to use some security tools because I study security (A total beginner). I tried adding the repos of kali, and install some security tools from there, the security tools works great but I had ...
61
votes
2answers
9k views

How to protect Ubuntu from fork bomb

I heard someone talking about a fork bomb, I did some research and found some dreadful information about some strange looking characters people can have you type at the command line and as a result do ...
0
votes
2answers
54 views

How safe is luks?

I constantly think about encryption, and how safe it might be. The general information I have tends to be secured by passwords that range in the hundreds with random key combinations in between random ...
12
votes
2answers
1k views

Do I need to install Security updates for Ubuntu base?

I installed Lubuntu 14.04 LTS from a disc and have added updates.System info shows 14.04.2 LTS. Software updater >security updates offers Ubuntu base 103MB. Do I need to install this?
2
votes
1answer
17 views

How do I know if the programs used in PlayOnLinux can be safely installed?

I'm seeing this large list of mostly commercial programs there and I'm wondering where they came from, if I run the risk of compromising my system by installing any of them.
1
vote
1answer
22 views

Security - Apache's websites folder inside Home folder

Is it secure to change DocumentRoot path to some folder in user's Home directory? Or it's better to leave it be and using a shared group between your user and Apache server as you can see it in the ...
5
votes
3answers
6k views

GUI program to shred or wipe files with options to make sure they are unrecoverable?

I have a quick question about file shredding. Is there any application with graphical interface capable of shredding files and folders? I know bleachbit has that feature but there are no options or ...
0
votes
0answers
21 views

Encryption enabled on Ubuntu Snappy Core

Is there any kind of encryption enabled by default in the latest Ubuntu Snappy Core release? Is the home dir encrypted? or other locations?
1
vote
0answers
26 views

Why doesn't the admin always run an admin terminal? [duplicate]

If I'm the admin, is there a benefit to using sudo in front of every command that requires it instead of just turning on root access with sudo -i and not worrying about it?
0
votes
0answers
19 views

Running user code in extremely restricted folder

I am trying to set up a web server for students. Students will upload a cpp file, which will then be compiled and tested. I need to do this through a web interface, so students won't have their own ...
4
votes
1answer
53 views

What is the danger of running untrusted softwares as a normal user

Sometimes I have to use some propriety softwares which I don't trust in them and in their behavior. Lets say we installed a propriety software in /opt/software, then we run it as a normal user (...
0
votes
0answers
8 views

access and security keypair download

is there a way to download/export a keypair (not import) that is showing in the security section, or at least a way to access it? We need it to ssh into the boxes. Thanks,
0
votes
0answers
109 views

How to Set-Up WOL with Intel 82574L?

I am setting up a Ubuntu PC which I only need to do Matlab computation efficiently through VPN connection. My network card should be ok (Intel 9301CT where processor Intel 82574L) which Ubuntu ...
1
vote
0answers
26 views

How are snap applications being protected?

How are snap applications being protected when we look at different aspects? Runtime protections? Memory protections? Differences to ordinary processes? Differences to VMs? Storage protections? ...
1
vote
2answers
68 views

Can you empty cached items from memory without needing to close Firefox?

I currently have Firefox set up so that a persistent cache is not stored after closing Firefox. I only have the memory cache enabled which it empties when Firefox is closed. Sometimes I need for ...
24
votes
4answers
72k views

How to disable IPv6 permanently?

How can we disable IPv6 system wide via terminal commands? I've read editing /etc/modprobe.d/aliases and replacing: alias net-pf-10 ipv6 with: alias net-pf-10 off alias ipv6 off Is this safe ...
0
votes
0answers
16 views

Prevent Outbound IP Address spoof

We have multiple computers running Ubuntu Desktop, all connected to same Router. Using UFW firewall, all inbound and outbound ports are blocked on these Desktops, except for only one outbound port (...
2
votes
1answer
2k views

How to show all files created on a specific date?

On 16/05/2015 at 17:18 I visited a malicious website. And I suspect a drive-by-download, so I want to check my machine to see since that time in order of creation which files have been created or ...
0
votes
0answers
42 views

How to use iptables to prevent repeated attacks on port 80?

There a is massive attack on port 80 on my Server i try to use iptable This way to banned attackers iptables -A INPUT -s 212.252.96.128 -j DROP but there are too many IPs attacking how to prevent ...
21
votes
2answers
26k views

chkrootkit says /sbin/init is infected, what does that mean?

I recently ran chkrootkit and got the following line: Searching for Suckit rootkit... Warning: /sbin/init INFECTED What does this mean exactly? I heard this was a false positive, ...
0
votes
0answers
46 views

username/password. [duplicate]

I just updated ubuntu from 14.04 to 15.10. Now when I boot up ubuntu asks for username/password. I entered what I thought was correct, but the system says it is incorrect. I can't get past this - is ...
84
votes
12answers
84k views

How to harden an SSH server?

What measures can/should I take to make sure that security around my SSH server is absolutely impermeable? This will be community wiki from the start, so lets see what people do to secure their ...
0
votes
0answers
29 views

ubuntu feature?

I started receiving discourse on my display re: icc profile file updates relating to the display. I was nowhere near the software update manager, just doing some general surfing. I started getting ...
0
votes
1answer
165 views

Why I can't login without a password in my encrypted account?

I have an encrypted disk, and I get asked for a password before reaching the login prompt, then again to log in. As I have only a single user account, the password to which is the same as my disk ...
1
vote
2answers
53 views

What are the dangers of using an unsupported Ubuntu version? [closed]

Non-LTS versions of Ubuntu only receive security updates for up to 9 months after their release (for Ubuntu 15.10, until 07/2016) and are not recommended for use after the expiration of the support. ...
1
vote
3answers
4k views

Are there any good antivirus for Kubuntu/Ubuntu as of 2015? [closed]

OK, I do have to admit I am somewhat new to Linux,(I'm used to Windows), and that's why I'm asking all of these questions about Kubuntu. As of 2015, are there any good, FREE anti-virus programs for ...
3
votes
1answer
141 views

How to use SSL and SASL with irssi under Xenial Xerus?

I would like to connect to Freenode with irssi using both SSL and SASL. Instructions for using the script cap_sasl.pl that worked for older versions of irssi now show the following error under Xenial ...
4
votes
1answer
107 views

How is the guest account prevented from using su and sudo?

It's already known that the guest account can't use su or sudo: Why is su disabled from guest sessions? Sudo not available in guest login How is this done? My guess would be apparmor. However, ...
10
votes
3answers
2k views

How to secure grub recovery mode

When I boot system in to recovery mode from GRUB menu, I can get in to all powerful root without entering any password, thus insecure. How I can secure this and ensure that a password is asked every ...