Tag Info

New answers tagged

0

Using Two-Factor authentication on ssh configured like described above still leaves your system open to possible brute force attacks on your password. That could compromise already the first factor: your password. So personally I decided to add the following line not on the bottom but at the top of the /etc/pam.d/sshd file: auth required ...


0

I will address your 3 main points one at a time: It does meet the four freedoms of free software. You can run whatever your want (provided that it's within the law), you can get the source code and tweak it and redistro it. Just because Canonical encourages the use of non-free software doesn't discredit them. That's like saying "Because Microsoft ...


1

You can use tool called apticron to notify you when new updates are available. It sends you e-mail about pending upgrades, also giving you a choice to only send you e-mail about updates not previously notified. To setup apticron edit /etc/apticron/apticron.conf and change line containing e-mail address: EMAIL="admin@example.com" Enter the e-mail ...


0

Nobody will be able to tell you satisfactorily, who or what the file has created. Delete them easily. rm ~/1147.desktop or sudo rm ~/1147.desktop


1

I've posted my Spotify profile for AppArmor on GitHub: https://github.com/ruudkoot/spotify-apparmor.


1

Since I could not find a profile that worked for me, I profiled Spotify and created my own. This won't stop the Spotify binary from being able to access everything you might not want it to, but it's better than nothing. I give no guarantees, use this at your own risk. This works for me on both Ubuntu 14.04 and 15.04, and Spotify version 0.9.17.1. I'm using ...


1

Basically, if someone has access to the user's terminal, there is no level of security. For example, a user could use htop to kill xscreensaver. Also, if a user gains access to the terminal, they should need a password. The fix is to use a strong password and sign out of tty whenever you are done.


1

I had the same (cache PUA.Win.Exploit.CVE_2012_0110) on my Linux. So I booted up from the USB or DISK instillation > To the try Linux mint out, > looked for the file in ( /usr/share/mime/mime.cache) and copped it to a USB stick. Logged back on to my installed Linux mint, and replaced the one on my sys, with the one I copped to my USB stick ...


0

I did participate in a project where Ubuntu Server 12.04 LTS, LAMP and Joomla was used. It's a solid environment but as any software, especially web-facing applications, you always need to follow the security announcements and download any relevant patches. There is a mailing list for Ubuntu to receive security alerts and announcements: ...


0

No. Your application and its usage will determine whether or not it is stable. If your application is more than simple website with a small memory requirement then you may need to tweak your apache2, mysql and php settings to get it stable e.g. increase php memory, apache2 processes, install a cache etc


1

No. Make sure to use dist-upgrade so that you get the latest kernel. And reboot after the kernel upgrade. Then set something up to continue to receive security updates and reboots after kernel updates, for example the unattended-upgrades package. For stability, you still need to add monitoring and backup solutions, as well as deployment reproducibility and ...


2

You need to do 2 things yourself. configure Apache to your personal requirements. Apache comes with a webpage that shows "ItWorks!" so you need to set up at least 1 virtual host in ./sites-enabled/ configure MySQL to your personal requirements. MySQL has no user databases so you need to set this up. Both could be a problem regarding security: if you ...


1

SSH authentication failures are logged by default to /var/log/auth.log. You should still see auth failures being logged there after the changes you describe -- something else must have changed. I have root login disabled entirely, and key-based auth only with passwords disabled for user accounts. I still see a few failures per hour in auth.log before they ...


4

I suggest you to set iptables to limit number of connection per host. Ddos can use unlimited number of ip addresses sudo iptables -A INPUT -p tcp --dport 25 -m state --state NEW -m limit --limit 50/minute --limit-burst 200 -j ACCEPT sudo iptables -A INPUT -m state --state RELATED,ESTABLISHED -m limit --limit 50/second --limit-burst 50 -j ACCEPT sudo ...


1

For an allocation block of IPs, you can just whois the IP you have. This will only get you as far as the ISP level usually unless you're talking about a company big enough to have its own allocations. For example, here's what I see if I enter the IP address of one of my servers: $ whois 109.74.xxx.yyy % This is the RIPE Database query service. % The objects ...


0

You can use subuser to sandbox your applications with Docker. This allows you do things like sandbox GUI apps, which isn't easy to do with Docker directly.


0

Lets try the following: Open /etc/lightdm/lightdm.conf with your favorite editor (e. g. sudo vim /etc/lightdm/lightdm.conf) Comment out the following string: autologin-user=your_login


1

you unchecked the option when you installed ubuntu . there was option Ask password for login or some thing other when you create user . now you have to run command sudo gpasswd -d username nopasswdlogin or do Settings->User Accounts->Unlock->Automatic Login-> Off


0

First of all, there are many different security and safety aspects. In some of them, Windows is more secure than Linux, while in others, less secure. As for the past, Windows is well known for its hundreds or even thousands of security bugs in last 20 years. However, this is just the past. Microsoft since 2003 tries to improve security skills in their teams ...


2

This is really poor research on the part of whoever added this issue to the PCI compliance scanners. On my scans the problem is described as the following: Synopsis The SSH server running on the remote host is affected by multiple vulnerabilities. Description According to its banner, the version of OpenSSH running on the remote host is ...


3

In your System Settings there is a Brightness & Lock icon. This contains what you are looking for: This is on Gnome3, but should work similar on Unity.


1

Search system settings and click brightness and lock. Set the timer to dim the screen on x seconds of inactivity and the timer to lock after x seconds of dim screen.


0

If you meant securelevel, this is a *BSD kernel specific security mechanism. Linux (and therefore Ubuntu) does not have such a solution. There is an old thread on this on LKML by the way.


1

You can also: Use firejail to create sandbox for firefox Create LXC (built in kernel VM) container to keep firefox in jail Add firefox to AppArmor (built-in kernel security module).


2

Upgrade your system. A patched Firefox version (39.0.3+build2-0ubuntu) is available for all Ubuntu releases. sudo apt-get update sudo apt-get dist-upgrade firefox


1

Norton 360 is supposed to perform security-related tasks that are closely tied to the underlying operating system. Even if you manage to run Norton 360 in Ubuntu with the help of Wine, it won't be able to perform its designated tasks, since Ubuntu/Linux is very different from Windows in this particular aspect. Hence, the question, whether Norton 360 runs on ...


1

If a program is shared in /usr/share, then all users have rights to execute them. A simple way of restricting other users from executing these files, without uninstalling and reinstalling, is by changing the access permissions. Run this line of code, replace program with the name of the program you wish to restrict permissions. (Replace /usr/share with the ...


0

If you're logged in to the GUI (as :0 indicates), then of course you will have two entries in who: one for the GUI session, and one for the terminal you have opened to run who. Try the w command for a bit more detail: $ who muru :0 2015-08-03 05:31 (:0) muru pts/0 2015-08-03 05:32 (:0) muru pts/1 2015-08-04 22:53 (:0) muru pts/2 ...


1

According to your output SSH is not running. SSH agent is software to hold private keys and is a helper. ps -ef | grep ssh shows there's no SSH active and grep --color=auto ssh is a result from your grep command and does not mean that SSH is active.


0

"Just turning off" your computer can leave your disk in an inconsistent state, so that the next boot has to do a bunch of disk I/O to recover the disk. If you "just turn it off" during this process, the disk state gets worse. Repeat enough times, and your system will fail. Suggestion: Reboot your computer. Note the (computer) time Hit "/" or "F12" ...


1

CRON Excerpt of /etc/cron.daily/apt: # This file understands the following apt configuration variables: # Values here are the default. ... # APT::Periodic::Unattended-Upgrade "0"; # - Run the "unattended-upgrade" security upgrade script # every n-days (0=disabled) # Requires the package "unattended-upgrades" and will write # a log in ...


1

flashplugin-installer package is in trusty-security section of repositories and it should be automatically installed. But adobe-flashplugin package is not. It is in partner repository. If you install flashplugin-installer, that should fix this issue. You can also set up the system to automatically upgrade packages from other sections of Ubuntu ...



Top 50 recent answers are included