Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
0answers
8 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
3
votes
4answers
224 views

Using NX Server Securely?

Recently, I built a computer running Ubuntu and gave it away to a relative. I'm willing to give them IT support for free, but they live 50 miles away. The Solution? A NX Server. I setup the Node, ...
10
votes
2answers
322 views

What security context software does Ubuntu use?

Does Ubuntu use SELinux by default and if not, how is security context managed? For example, allowing processes to run as root without security context can be a security risk. The help page about ...
1
vote
2answers
21 views

Is this a security risk/concern?

According to: http://wiki.secondlife.com/wiki/Linux_Viewer#Installing_and_Running The Second Life Linux client entirely runs out of the directory you have unpacked it into - no installation step ...
0
votes
0answers
18 views

Nessus SNMP security warning

I ran a Nessus scan on my Ubuntu 14.04 machine. I received the following: High: SNMP Agent Default Community Name (public) Description: It is possible to obtain the default community name of the ...
2
votes
1answer
113 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from this wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully with ...
0
votes
0answers
12 views

problems gaining root access and installing software due to authentication. [duplicate]

I have a laptop that had ubuntu installed, however though many ownerships, the pass word is lost, anyway of removing this absolute shite of an install block. every time I try to do something it asks ...
0
votes
1answer
44 views

Connect to my College's WPA from Ubuntu 14.04 LTS

I have Ubuntu 14.04 LTS, and am running it on a Sony Vaio VGN-CR12OE. It is the only operating system. I am trying to connect to my college's WPA WiFi. My settings for this WiFi connection are as ...
0
votes
1answer
33 views

If Android is Linux then why can they get malware? [on hold]

OK so I know that GNU/Linux is not immune towards malware and that it is because it implements a multi-user environment where users are granted specific privileges. Is it GNU/Ubuntu/Arch/Android and ...
0
votes
2answers
63 views

What do LISTEN and ports mean in netstat? [on hold]

I have been monitoring my system lately and I have found some strange things are running on my system. Can anyone please explain what they are and why same program use several processes? Output of ...
1
vote
2answers
42 views

Do logins by the gdm (or lightdm) user in auth.log mean my system is breached?

Please look at this auth.log (from Ubuntu 14.04) I have provided and tell me who this gdm user is and why there are all these unauthenticated logins? I am freaked out; please help! Here's the ...
4
votes
4answers
3k views

Is it risky to download a script with a http://goo.gl/ link?

Following the advise of an answer in Ask Ubuntu, I downloaded and ran a script with a URL starting by http://goo.gl/ Is it risky to use such file? could it be a virus or something else? If yes, what ...
15
votes
4answers
4k views

Package denyhosts in Ubuntu Trusty Tahr is deleted: temporary or forever?

While doing a test-upgrade of our Ubuntu server to 14.04, I found that the package DenyHosts is no longer available. Installing it gives following error: apt-get install denyhosts Reading package ...
2
votes
1answer
37 views

How to prevent data from being written into a directory?

Or: How to make a directory write protected, for all users until unlocked again?
1
vote
1answer
20 views

How do you detect file changes

Since Linux is vulnerable to a number of similar vulnerabilities as windows. I'm trying to find a daemon that catalogs and alerts me/user of any and all file changes as well as file additions. Is ...
1
vote
2answers
31 views

What lines should be commented out in my sources.list file?

I have just updated from Ubuntu 12.04 to 14.04 last weekend. I haven't downloaded any extra programs as of yet. I checked my sources.list file and it has the following lines in it: deb ...
0
votes
0answers
11 views

Locking all setting

Is there a way to lock all the system setting on ubuntu so people cant change them without permission? example removing printers. I am taking care of a schools computer room and teachers/students are ...
0
votes
0answers
27 views

How can I lock Seahorse GnuPG Keys?

since not long ago I've started to use seahorse to manage my encryption keys, and at the moment I'm finding myself a bit baffled about what it appears quite a security hole of the system... In fact, ...
1
vote
1answer
21 views

is denyhost central database stored locally?

I was tasked to write a security policy to apply to any ubuntu server we deploy at a client's site. Knowing how some of the corporate are restrictive on what resource is available to what box on their ...
0
votes
0answers
9 views

Prevent Network Injection

I read this article: http://gizmodo.com/pro-hackers-could-be-spying-on-you-through-youtube-1622367382 I'm running Ubuntu 14.04. How can I prevent network injection of my internet browsing traffic? ...
5
votes
4answers
3k views

Autoexec.bat equivalents for Ubuntu that run with root privelidges?

On Ubuntu there must be several "autoexec.bat" equivalents as I can see files like rc.local which seem to do very little because the comments in the file says it doesn't work by default and I tried ...
1
vote
2answers
56 views

What should I do to avoid my roommate from changing my password through using system recovery mode .?

He did this last time when I left my laptop at room. Opened the system recovery mode from advanced Ubuntu options and changed the password using 'passwd usrname ' command.Is there anything I can do ...
1
vote
2answers
21 views

Don't remember PGP passphrase until end of session [duplicate]

To use my PGP key I always have to enter my passphrase. But as it happens, I have to unlock the key only once for every session. The desired behaviour would be, that I have to unlock the key each time ...
0
votes
1answer
36 views

Are there really security risk when running Wine? [duplicate]

I remember reading somewhere that since Wine's job is to pretty much emulate Windows so that you can run Windows programs, it puts a risk on your Linux machine since Windows Viruses can also run ...
-1
votes
0answers
9 views

Faillog empty - should i be worried?

On my machine of 4 years old, I have probably mistyped my password a zillion times. Yet, nothing shows up in the faillog. Doing faillog -a gives me a bunch of: username 0 0 01/01/70 ...
0
votes
1answer
34 views

I have some questions about Firewall [closed]

So I am pretty new to Linux (With the exception of Android), and being use to the old ways of Windows pretty much all I had to do for Firewall was turn it on and forget about it. However with Ubuntu ...
1
vote
1answer
2k views

Fingerprint reader driver for Validity Sensors Fingerprint scanner

prakhar@pr3d4tOr:~$ lsusb -s 001:003 -v Bus 001 Device 003: ID 138a:0018 Validity Sensors, Inc. Fingerprint scanner Couldn't open device, some information will be missing Device Descriptor: bLength ...
0
votes
2answers
37 views

wget security.ubuntu.com not working on ubuntu

We are able to use wget for other URLs, such as google.com, but wget security.ubuntu.com not working and giving output: Resolving security.ubuntu.com (security.ubuntu.com)... 91.189.92.200, ...
2
votes
2answers
249 views

Functional ubuntu-touch lock screen

Is a functional lock screen (e.g. pin or password) for Ubuntu Touch being developed? The nearest thing I could find was a design mockup from July with a hardcoded password ...
-1
votes
1answer
17 views

How to accept only essential security updates?

sometimes i am getting problem in software updates. So i would like to get only essential security updates and also need to make it as default. Please let me know is there any way to sort out that?
26
votes
1answer
1k views

How to know if a authenticate box is real or fake?

For example, someone creates a fake Authenticate dialog to get my root password. How to know if it is real or fake?
11
votes
3answers
3k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...
1
vote
1answer
19 views

Terminal message “Access control disabled”

Every time I open up the terminal the message access control disabled, clients can connect from any host pops up in the first line. Then the terminal behaves as usual, no errors at all. But this ...
1
vote
1answer
1k views

eth0: PACKET SNIFFER(/sbin/dhclient

Im new to Ubuntu and would like help please, I ran ProShield and got this error - eth0: PACKET SNIFFER(/sbin/dhclient I ran the following programs below and nothing came up as far as I can see. ...
27
votes
8answers
9k views

How to set up a headless server?

I have a ubuntu development server at work. It is an old rack server that is located somewhere in the company's dungeon, where nobody ever goes. The only way it can work is as a so-called headless ...
1
vote
1answer
47 views

Confused about the security of ubuntu (Linux)

Assume I have a laptop with ubuntu installed and two users abc and root. Both users are password protected. It is possible to reset root password using live CD or USB using chroot which would mean ...
0
votes
0answers
18 views

There doesn't seem to be a decent guide for Stealth could someone either write one or point me to one?

Stealth Integrity Scanner I'm very interested in being able to setup an IDS and this one seemed like it was really cool and worth while and fairly underrated. I've not really found much on what a ...
1
vote
0answers
68 views

SSH connection failing since I changed server port number

Yesterday I changed the default ports on the server from 22 to 1993 then restarted but now I can't connect at all. I used ssh -i keyname.pem ubuntu@remotehost to connect then sudo vi ...
1
vote
1answer
40 views

Is it possible to setup a root like user for global read only access?

I'm hoping to give a security scanner a user that can read everything but not change or execute anything. Is this possible and if so how?
1
vote
0answers
12 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
4
votes
1answer
2k views

Did these log entries record an intrusion to the server?

Here are log entries I found in auth.log. What does + ??? mean? And was there an unauthorized access? Feb 11 07:48:32 tts-server su[31265]: Successful su for www-data by root Feb 11 07:48:32 ...
0
votes
0answers
23 views

How do you set up a systemwide read only user for a security scanner

I'm hoping to play with STEALTH https://apps.ubuntu.com/cat/applications/precise/stealth/ It suggests the creation of a read only access user that the integrity scanner can use to access its target ...
-2
votes
3answers
768 views

Is this a viable legitimate way to circumvent NSA spying on me? [closed]

If I set up my own email server in my basement using Ubuntu along with my own domain, own SMTP server, hosted the emails in my machine, ran a pretty wicked good firewall, would that circumvent spying ...
19
votes
3answers
1k views

What is the “Free software only” option when installing Ubuntu?

When installing Ubuntu, you get a Free software only option. Does that Free software only option mean Free as in beer or Free as in freedom? When I say free as in freedom, I mean FSF type of ...
0
votes
1answer
21 views

Limit privileges for download folder

In Windows, I was able to use the ICACLS utility to set files/folders with a lower integrity, in order to keep them from modifying higher-integrity locations. I'd like to do something like that with ...
1
vote
2answers
334 views

How to protect from cloning?

I have no experience using Ubuntu before I'm doing a point of sale project for a restaurant which will run in local Lan (offline not online). I will setup one mini PC as an Ubuntu web server. and my ...
0
votes
1answer
327 views

Alternative Open Source software to GFI end point security

What are the GUI open source alternatives To GFI end point security for Windows? knowing that i'm using Ubuntu 12.04 64bit Thanks in advance...
1
vote
1answer
19 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
0
votes
0answers
27 views

Is this a bug or normal (mis) behavior?

When I sudo-rebooted from the top-right menu, after Unity closed I was taken to an open tty, where I saw my login password in plaintext where I had typed it in earlier. In Ubuntu-bug, a specific ...
-1
votes
0answers
33 views

Security questions using ubuntu

I am a new user and I will be installing Ubuntu on my laptop later on today. Apart from installing some add ons to Firefox do I need antivirus software and a firewall. If yes then what would you ...