Tag Info

New answers tagged

0

I believe that there are similar features with SELinux, Apparmor, and other extensions. You can learn more about a general overview of the kernel security features here.


1

Generally speaking malware can affect Ubuntu. But in dual boot system there is no way that this kind of malware gets from Windows to Ubuntu. These systems do not share executable files. And Windows malware can not affect linux systems, if not used in wine. But you can directly get a malicious add-on to Firefox in Ubuntu.


0

I would suggest you to type sudo apt-get upgrade && exit this will exit the terminal after finishing upgrading. When the upgrading is cancelled the terminal won't close but I think that won't be the case.


1

With help from http://stackoverflow.com/questions/2530372/how-do-i-disable-directory-browsing The following can be done to have only the ownCloud service available to WAN. They may be redundant, but combined they can only make for a safer system. 1) Assuming it is not needed, Apache's default home page can be moved to a storage place (and out of the ...


5

sudo's default timestamp_timeout variable is 15 minutes. This means that if you click n on sudo apt-get upgrade within 15 minutes, you can anticipate entering root shell with sudo -i. That's exactly what happened. However, if you set that in /etc/sudoers as Default timestamp_timeout 0 , you will be prompted for it every time. Personally, I've set it ...


22

You aren't prompted for a password because sudo has done it's job and started apt-get as root. While it's in the prompt, the apt-get process is still running, and so since it's still running as root, there's no need to enter your password again. In other words, as long as a sudo'ed process is running, you won't be asked to enter your password again for that ...


0

To try to solve my issue I removed the 802.1x security in the connection settings. When I then added it back I was able to save the password in the settings. That got it working.


0

You can download any windows folder lock application that could work with Wine. That's it. Here an app you can give a try. Now for your fears of virus and malware in Wine, take a look on those: Do Wine Viruses only work while Wine is running? Could Autorun Virus, affect my PC via Wine?


0

rsync -Pavp --rsh="ssh -i YOUR_KEY" DEST USER@REMOTE:SOURCE


0

After you launched an interpreter as root, it inevitably has root privileges. In order to drop privileges you could write a shell script wrapper where you change the process user and group and start the interpreter without privileges. Solution 1: shell script wrapper You need an unprivileged user which you can switch to (create one with sudo adduser ...


0

1) Always worry...The hackers don't want you to pay attention to the logs and ethernet devices "mysteriously" turning on promiscuous mode for no reason. 2) Promiscuous mode on a computer has nothing to do with catching nasty viruses like AIDS... - No, but the behavior is a red flag and should be investigated. Ignoring telltale signs like this and ...


0

Yesterday I wrote an answer in Initramfs + Luks - only one password prompt that answers your second question, too: There is a script included with luks that you can use to derive a key for device B from an opened device A. Hence you only have to type the password for your root device and the keys for all other devices will be calculated from that. (But: The ...


0

iptables (or ufw, which is just a front end for iptables) would do what you want. The default response timeout for UDP packets is 30 seconds (or very close to it). So you would just need to allow the answer related packet back in and DROP the rest (the below assumes your external IF is eth0): sudo iptables -A INPUT -i eth0 -d your_external_IP_address -m ...


0

Your attempt to ping "ipaddress" doesn't get out in the first place, as it gets dropped in the output chain. Try this: sudo iptables -F sudo iptables -A INPUT -i lo -j ACCEPT sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables -A OUTPUT -d ipaddress -j ACCEPT sudo iptables -A OUTPUT -j DROP sudo iptables -A FORWARD -j ...


0

Quoted from this perfect answer ISC ntpd (the ntp package) will open UDP 123 on all your interfaces regardless of what you do with it. It will work anyway even if you block this port in iptables, assuming that you're allowing responses to established traffic as usual - your outbound mobilization requests to your chosen servers will be enough to allow ...


1

This person asked pretty much the same question on Unix & Linux stack exchange. Here is the start of the answer, probably more efficient for you to click over to the link. First 3 lines are messages from dhclient which: sent a DHCP request to the router received DHCP lease set up the interface


-1

You can use apticron. See the section "Only Notifications" here: http://spin.atomicobject.com/2014/08/04/debian-ubuntu-security-updates/


1

Either consider OSSSEC HIDS or some other IDS/IPS system on your network, or a fresh reinstallation of the server. Unless you have a known good rkhunter scan or similar to base a comparison from, trying to determine if you have a root kit is nigh impossible without monitoring traffic on your network and such to determine intrusions (and that would be Snort ...


0

Another ready-made sync tool is Seafile. It is a one server multiple clients solution like dropbox. In the latest version there is an option to share encrypted folders in a way that the server won't know the key. See Seafile security features Hint: Seafile calls a shared folder a "Library", for better understanding of the documentation.


0

I have found the answer: The author of the program (as he has done with some of the other config options) left one of the options like this: DISABLE_UNHIDE=1 And even though above that he says: # If both the C 'unhide', and Ruby 'unhide.rb', programs exist on the system, # then it is possible to disable the execution of one of the programs if # desired. ...



Top 50 recent answers are included