Tag Info

Hot answers tagged

3

You can simply use (1) chmod a-w directory which will make the directory unwritable to everyone. To give write access to all users: chmod a+w directory For more fine access, there is a nice tutorial on Unix permissions here; if you need even more fine-grained control, you can use Access Control Lists (this last link is for Arch Linux, but works on ...


3

What you want is an intrusion detection system. I've used AIDE comfortably for a while, it can send a daily e-mail report with changes to files, for you to review. http://aide.sourceforge.net/ Another possibility is samhain, I just found it by doing apt-cache search intrusion. These are only two choices, but there are many more, so you will likely not ...


2

It might not be the easiest or best way, but you could: Make the user a part of the disks group isn't required, but seems like the right thing to do Chroot to an HFS+ partition required because linux filesystems don't support different permissions on links Link the raw disk /dev/sda or whatever in to the chroot with read only permissions Bootstrap your ...


2

This is actually OS independent. If an attacker has physical access to your machine, then that machine is compromised. Period. This has nothing to do with what operating system you are using, it is true for all of them. The only way to protect yourself from that (and it is also imperfect) is to encrypt your data. User passwords fail miserably since, as you ...


2

The entries in your auth.log involving the gdm user appear normal. This is nothing to worry about. I'm not sure what you mean by "unauthenticated logins" but if you just mean no human entered a username and password for them, that's not a problem. If you're referring to where it says "Unregistered Authentication Agent," that does not mean a login occurred ...


2

631 is used by CUPS (the print service daemon). 445 is used by Samba (used to share files with Windows PCs over the network). 139 is used by nmbd, part of the Samba setup. 25 and 527 are SMTP ports. You have a mail server running on your system. 53 is used by the DNS server. 111 is used for Remote Procedure Calls. Some services depend on this. 80, of ...


1

The fix that I finally found is the answer in this thread: Can't connect to WPA2 Enterprise PEAP. I will sum it up here. All I did was add the auth-alg=open to the file /etc/NetworkManager/system-connections/MYCONNECTION, at the bottom of the [802-11-wireless-security] section of the document. I hope this helps more people than just me.


1

If an application doesn't require root to install, then the application is in fact "safer" (I quoted safer because, in general, an application can still be harmful if you don't know what it does whether you used sudo or not. e.g. Maybe it will sniff around your home directory and start uploading some confidential data, and you wouldn't need root access for ...


1

The game is installed in a directory owned by the user who installs it and runs with privileges from that user. For this method to become to start to be a problem you need to be asked the admin password and provide it. So never run this program with sudo or as root. never install this program with sudo or as root. when prompted for an admin password ...


1

This error is produced by the xhost program that is used to allow or deny access to the X server for any host. In other words, this is a tool used to block or allow the usage of the X Server by graphical application that could be ran remotely. As such, it can be a security problem as remote graphical application could be able to directly connect to your X ...


1

Run sudo apt-get update and then please post any errors. If there are no errors, use sudo apt-get install followed by the package name again. If you want to download something from the Ubuntu archives use apt-get download without sudo and followed by the package name to download whatever package you need to your current directory.


1

Settings for Seahorse are in 'gsettings': gpg-cache-method and gpg-cache-ttl. Answered here. If you preffer, you could also have 'gpg-agent' manage the keys, check this.


1

This ultimately depends on your own computing habits. If you constantly download free screensavers and mouse pointers, you'll probably find a WINE-compatible virus in no time. However, if you stick to malware-free programs, you're pretty much safe. The best way to ensure that no malware is installed is by exclusively using Free Software or Open Source ...


1

Anything related to older release can be removed from the sources.list. During an upgrade the older release will get commented out (by adding a "#"). but I'd like to know whether there should be a newer version of this line that isn't commented out? That depends on what is checked in software&updates. If security is unchecked there does not need ...


1

I think you are worrying about nothing GDM is the gnome display manager, it is responsible for making your log in screen look gnome themed. Try doing this to find out sudo dpkg-reconfigure gdm You can in fact use lightdm instead of gdm, the procedure is same for both. Using the above mentioned command will take you to a warning page. Enter to get back to ...


1

It's in: Settings → Security → Safety after locking. The options are: 4 digits, finger movement, or password. (Ubuntu 14.10 r179)



Only top voted, non community-wiki answers of a minimum length are eligible