Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

4
votes
0answers
838 views

Is there a guide for using GRSecurity and Precisew/ PAX?

I'd like to know if there is a guide of some kind for (successfully) configuring, compiling and installing GRSecurity w/PAX etc. in Precise? I basically am trying to build my own custom release ...
3
votes
0answers
52 views

Find Kali Security tester tools after installation

I'm a 'beginner' with Ubuntu. I tried it already a few times. I also tried Kali, etc already. I think Ubuntu is very useful, and has many possiblities. But I missed one thing from Kali. The Security ...
3
votes
0answers
84 views

Apport error reporting privacy issues

As apport is enabled by default since 12.04 I thought it would be important to get some much needed clarifications on certain privacy questions that have been bugging me. How paranoid is apport ...
3
votes
0answers
66 views

How to auto restart services when you get security updates?

That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected ...
3
votes
0answers
442 views

How can I add an SSL client certificate/key globally in Ubuntu?

I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
2
votes
0answers
111 views

Could not load host key: /etc/ssh/ssh_host_ed25519_key in /var/log/auth.log

I have an Ubuntu 14.04 instance running on AWS. I was browsing the auth logs (/var/log/auth.log*), and noticed the following line appearing: Could not load host key: /etc/ssh/ssh_host_ed25519_key ...
2
votes
0answers
39 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
2
votes
0answers
181 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
2
votes
0answers
110 views

How to config PORT KNOCKING on CSF ubuntu server and access it by linux?

I'm trying to run port knocking work on a CSF on a small VPS, i setup this: 1 - the result of csf first test ok 2 - TCP_IN = "53,80" TCP_OUT = "53,80,113,443" UDP_IN = "53" UDP_OUT = "53,113,123" ...
2
votes
0answers
88 views

How to disable mpm-itk for a specific virtualhost?

I've a main site on a server that needs to run a sudo command which I white listed via visudo. That worked fine until I installed apache-mpm-itk and then I started getting the following error: sudo: ...
2
votes
0answers
130 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
2
votes
0answers
145 views

Tiger: `rtm` is listening on socket XXXX

On my Ubuntu serve 12.04 LTS, Tiger is reporting a lot of stuffs like this: OLD: --WARN-- [lin002i] The process `rtm' is listening on socket 60404 (UDP) on every interface. NEW: --WARN-- [lin002i] ...
2
votes
0answers
208 views

How can I use a Verbatim Secure'n'Go USB key?

I have purchased a 4Gb USB key from Verbatim. How can I use it under Ubuntu? I do not need the "secure data" feature, and have still not saved anything on it, so formatting at low level would be OK. ...
2
votes
0answers
322 views

Upgrade Apache 2.22 to a version that supports ECDHE

I'm trying to setup my Ubuntu 12.04 server installation to support perfect forward security. It seems that the default Apache 2.2.22 build does not support ECDHE. Any suggestions on a good way to ...
2
votes
0answers
682 views

Integrity check against package repository?

When there are security updates, I review and install them as soon as possible and think about using automatic updates. From time to time I want to boot from a clean boot CD and check if the system ...
2
votes
0answers
128 views

How can I configure sudo to prompt for password and show the executed command?

The title says it all. How can I configure sudo to prompt for password and show the executed command? Rationale: if something gets aliased in the shell or I end up executing a function sudo instead ...
2
votes
0answers
183 views

Prevent that TrueCrypt gets Administrator rights

If I try to open a TrueCrypt drive, TrueCrypt asks me for my administrator-password (also when I am a normal user). I know, that i can prevent this password-asking by editing the sudoers file = giving ...
2
votes
0answers
966 views

Unable to fork: Cannot allocate memory

frequently getting 'fork: Cannot allocate memory' when running commands over ssh. I have 64Gb of RAM and usually 1~2Gb free. swap is more than 8gb free Ubuntu version:"Ubuntu 12.04.2 LTS" Desktop ...
2
votes
0answers
322 views

How can I check the checksum of an installed deb package against the same package in the repository?

Suppose someone got root access to my machine and replaced some files, e.g. Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable Warning: ...
2
votes
0answers
110 views

How to inject or know if my wireless card is injectable

what ways or methods exist to know if a wireless card is injectable or can be injected (Packet injection). Answers should not include recommending me to use another OS that is not the official Ubuntu ...
2
votes
0answers
60 views

Why do I see a screen showing all text I typed during the session on logging out?

When I log off of Ubuntu 12.10, a screen appears shortly with all the text I typed during the session, including passwords and such. Is this supposed to happen? [update] The screen is fullscreen ...
2
votes
0answers
740 views

Why does network manager automatically choose WEP over WPA & WPA2?

I am on Ubuntu 12.10 and for some reason my wireless connection is using WEP when it is set to use WPA/WPA2 Personal. Also I should mention that I used to be on 12.04 and was experiencing the ...
2
votes
0answers
147 views

Cannot login to user with encrypted directory

I unknowingly deleted the .ecrypts directory while reinstalling Ubuntu 12.04. I created a default user by the same name while installing the new version. However, I couldn't login to the user after ...
1
vote
0answers
9 views

What is a (reasonably) secure and automated way to backup my mysql database using (any) free cloud/online services?

I have a mysql database that I use for personal devlopment. I would like to back-it up online using any free (in cost) online storage. (dropbox, google-drive etc...) I am assuming a shell script ...
1
vote
0answers
15 views

Can i run apache 1 / 2 as root?

I am hoping someone can confirm if apache 1 and / or 2 could be run as root if the user wishes it? There are previous questions around this, where people say "no you don't want to do that" and don't ...
1
vote
0answers
30 views

Cannot download security updates in Lubuntu 14.04 LTS

Software Updater offers Security Updates--Ubuntu Base--61.9MB. I click Install now and authenticate. Screen shows "Failed to download package, check your internet connection'. There is no problem with ...
1
vote
0answers
19 views

How do I close Chrome when entering standby or hibernate?

If I leave Chrome open, it keeps me logged into my sites even during standby, so the only defence I have is my Linux password. I would like to have Chrome shut down on standby or hibernate, and then ...
1
vote
0answers
62 views

Initramfs suddenly speaks IPv6 but no SSH login

I have been running a configuration with an encrypted root partition and network unlock via Dropbear in initramfs for some time on my Utopic Xubuntu Mediacenter. Since I am actively using IPv6 to ...
1
vote
0answers
216 views

Is there a VPN Monitor/Kill Switch application for Ubuntu?

Hi I am looking for a VPN Monitor/Kill Switch application that will ensure my VPN connection is always connected. Should my secured connection drop, the application will drop the applications that ...
1
vote
0answers
19 views

Ubuntu server File copy detect

I have a customer who has experienced data file theft (copied filed) is there software or a way to detect this copying of multiple files Or do i have to write something?
1
vote
0answers
69 views

tcpd[3674]: connect from unknown (unknown) - Am I being hacked?

Earlier today I had 7 tcpd processes on my server running at 100% cpu for a long period of time. Looking into syslog I found a lot of lines like this: tcpd[11447]: connect from unknown (unknown) ...
1
vote
0answers
64 views

Application Whitelisting

How does an Ubuntu administrator implement application whitelisting? For example, if I create a LAMP server and I only want SSH, Apache, MySQL and PHP to be able to execute. How can I prevent any ...
1
vote
0answers
17 views

What kind of access flash has to our systems?

It seems like there is major security issue found in flash every other week or so. There was another one just yesterday. This and being closed source, I can't help but wonder, what kind of access it ...
1
vote
0answers
142 views

Allow one process access to /dev/uninput without completely compromising security

Steam In-Home-Streaming was turned back on the other day. This allows you to play games being rendered on one computer on another computer (commonly playing games on a TV/Media Centre that are being ...
1
vote
0answers
196 views

Blocking HTTP requests without Host header using mod_security2

In my Apache configuration, I want to allow only Host header based vhosts. That is, I'd like to block any traffic by IP address only. I have mod_security2 installed, but I am only using the default ...
1
vote
0answers
984 views

SSH connection failing since I changed server port number

Yesterday I changed the default ports on the server from 22 to 1993 then restarted but now I can't connect at all. I used ssh -i keyname.pem ubuntu@remotehost to connect then sudo vi ...
1
vote
0answers
21 views

How are security updates classified into low/med/high?

When an update becomes available for a particular piece of software, if I run aptitude changelog <name> I will see urgency as either low, medium or high. How is it decided which ...
1
vote
0answers
80 views

install ubuntu on a hardware AES encrypted flash drive

I couldn't find the answer to my question after hours of search. I hope someone can help me out. I would like to install ubuntu on a flash drive. I followed to standard instructions for installing ...
1
vote
0answers
46 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
1
vote
0answers
266 views

I am unable to generate a gpg key through the keyring program

Whenever I try to generate a gpg key through the system's GPG program, it asks for my name, email, and password then everything except for the GPG program's main window disappears. Upon using gpg ...
1
vote
0answers
95 views

does ubuntu 14.04 use ascii-armor and how to turn it on/off?

does ubuntu 14.04 use ascii-armor and how to turn it on/off? the purpose is to test some exploit and knowing that would help, I'm still in the learning process. I'm already aware of the stack ...
1
vote
0answers
96 views

Hide “Places” or “Username” in File Chooser Dialog

Background Making a video-capture of a website demo; part of the demo requires uploading files. Problem The username is displayed in the video, which is a security concern. Question How do you ...
1
vote
0answers
62 views

How to disable Pointer Obfuscation on 12.04

I am working on a security project for school and need to overflow a buffer, I therefore need to overwrite the eip, but for some reason I can't. The A's that I overwrite the buffer with are spread all ...
1
vote
0answers
45 views

Does the “security” repository provides anything not found in the “updates” repository?

For the limited number of package I looked at (e.g. apache), I found that the package version in the updates repository is always newer than or equal to the version available in the security ...
1
vote
0answers
407 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
1
vote
0answers
116 views

How do I edit the commands that start a service in Ubuntu 12?

So I am trying out GBrowse, as we will use this later on. But then, I'm getting this ------------------------------------------------------------------------------------------------ 256000 features ...
1
vote
0answers
234 views

Secure APT GPG problem with Release files

I'm experiencing a problem with apt. We're using our own repository and the users apt is configured to check the peer and host of the repository. Furthermore the Release file is verified (with the ...
0
votes
0answers
9 views

xubuntu suddenly asked me for my password to mount an USB flash disk. Is this normal?

It never asked for it before or after and this one time was after the flash disk was inserted in an untrusted computer. I don't remember the message exactly. Is it possible malware got on the flash ...
0
votes
0answers
10 views

How do I add an existing ubuntu user to a new domain?

Our organization is making some changes in their security model and they have created a domain server with which each machine would be linked. For this, they have created a new user on my laptop which ...
0
votes
0answers
25 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...