Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

0
votes
0answers
18 views

Is the current OpenJDK headless tar file corrupted?

Is the latest OpenJDK headless tar file corrupted because I have to uninstall it since debsums says the downloaded tar file using sudo on terminal from the official ubuntu repositories is corrupted? ...
0
votes
0answers
19 views

Removing W32/Parite.B virus

I scanned one of my directory with clamscan and it showed that every .exe file is infected: .../file.exe: Heuristics.W32.Parite.B FOUND .../file2.exe: Heuristics.W32.Parite.B FOUND .../file3.exe: ...
-1
votes
0answers
16 views

Latest OpenJDK headless tar file corrupted? [duplicate]

Is the latest OpenJDK headless tar file corrupted because I have to uninstall it since debsums says the downloaded tar file using sudo on terminal from the official ubuntu repositories is corrupted? ...
0
votes
0answers
17 views

Handbrake launcher starting problem

For some unknown reason my version of Handbrake (Snap store version 1.1.1) downloaded from the software center is not running. When I try to launch it from the root folder it got marked as untrusted. ...
0
votes
0answers
34 views

How to enable security protocol? [closed]

I wanted to add in Aweber Contact Form to kompozer website but the message :"kompozer can't connect securely to forms aweber.com because the site uses a security protocol which isn't enabled" ...
0
votes
0answers
9 views

Is it necessary to apply and auto apply security updates on ubuntu 18.04 (and 14.04, 16.04)

there are ways to automatically install ubuntu security updates or to manually apply them the question for me, is it actually necessary for a productive server? as automatically applying updates ...
0
votes
0answers
13 views

Installing AIDE on Ubuntu 18.04.1

I cannot seem to get this installed. Using the following as root. apt-get install aide aideinit I do have an exceptionally large mount point and would like to exclude this. The process just seems ...
3
votes
2answers
113 views

Simplest and most scalable way to isolate ImageMagick in VM or container

For users of my web service running on Ubuntu Server 16.04 or 18.04, I’d like to integrate features from such useful programs as ImageMagick. For example, I’d like to crop their profile pictures or ...
0
votes
0answers
36 views

Desktop is visible before lock screen appears [Ubuntu 18.04]

I'm observing a somewhat strange behavior, which seems to happen in following scenario: Privacy options: Screen Lock: On, Lock screen after blank for: Screen turns off Suspend notebook and close lid ...
0
votes
0answers
20 views

What is the secure way to use DNS cache in desktop?

I want to enable DNS cache in my desktop and came across this post DNS cache on Ubuntu . Looks like in ubuntu DNS cache is disabled by default to prevent risk of dns poisoning attacks. What is the ...
0
votes
0answers
11 views

Bluetooth notification for incoming file

recently I wanted to send one file from my phone to my Ubuntu 18.04 notebook, everything went well except that the PC didn't ask me if I wanted to recieve the file, it just began recieving. What if ...
10
votes
2answers
412 views

Is quoting filenames enough security for running `xargs sudo rm -rf`?

I wrote a script that deletes all except the last two files in a folder: #!/bin/bash ls -1 --quoting-style=shell-always /path/to/some/folder \ | head -n -2 \ | xargs printf -- "'/path/to/some/...
4
votes
1answer
35 views

How to install an isolated or sandboxed debian package?

Suppose there exists a particular debian package in the Ubuntu repositories, which upon installation pulls the actual software from an external repository such as sourceforge. The software itself ...
0
votes
0answers
24 views

Protecting the File System with File Encryption

Short Synopsis of The Issue My current PC is insecure. An attacker can peek in to both my L1 cache and RAM to recover credentials from websites and scripts. I would like to encrypt my bash scripts ...
0
votes
1answer
68 views

How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?

The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
1
vote
2answers
60 views

Some supisious software making request to nmcheck.gnome.org

Since last few days my system popup a Ubuntu default web-browser and make request to nmcheck.gnome.org website and immediately shut off after this issue I can not run system update also, I am php ...
3
votes
1answer
39 views

clear terminal critical outputs

I have Ubuntu 18.04 on my win10, and I usually create my password with this line of code: echo -n "<some text generated by hand from the site's domains>" | sha256sum |cut -c-20 But today I ...
2
votes
1answer
118 views

Will Ubuntu enable RANDOM_TRUST_CPU in the kernel and what would be the effect?

According to this The Register article from 2018-08-28 and other articles, the Linux kernel version 4.19 will have a compilation flag named RANDOM_TRUST_CPU. Here's also a link to a mailing list entry ...
0
votes
0answers
23 views

security/firewalling

I moved on ubuntu (mint tara) recently for security reasons, after I wiped my windows for the 3rd time… I’ve been cyber harrassed for the past few months, especially by a hacker who lives nearby (...
0
votes
0answers
28 views

Need to block ctrl +H (Hidden file assess) and need to do it in command line [duplicate]

I need to block Ctrl+H because that shortcut can use to see hidden files to the user. My primary goal is when any standard user press Ctrl+H then system not show hidden files to standard user. And I ...
0
votes
1answer
20 views

Ubuntu 14.04.5 Audit mv Command

So when I run strace on mv, it shows that it calls rename. I'm not getting audit events for 'rename' system call. I think I know why and would like some help figuring out a solution. I have a bunch ...
0
votes
1answer
106 views

How to setup fingerprint login on dell inspiron 5370

I have a dell inspiron 5370 laptop. But I don't know how to setup fingerprint login on my Ubuntu Desktop 18.04 laptop! Please guide how to setup :)
1
vote
1answer
59 views

Is my Vino server being attacked?

I installed vino on LUbuntu 18.04, and configured and started my vino server according to https://askubuntu.com/a/530196/1471 without understanding what the commands mean: $ export DISPLAY=:0 $ ...
1
vote
1answer
45 views

Disable user intervention until password entered (not logout)

I'm looking for an option to turn user input off (so to say enable read-only mode) leaving the same picture on screen without logging out from the system, but requiring password to be entered to ...
4
votes
1answer
739 views

Protecting sensitive data when giving the laptop to a technician [duplicate]

Suppose that my laptop does not boot and I have to give it to a technician for repair. This gives the technician access to my hard-drive and all the material in it. I can take out or encrypt the hard-...
0
votes
1answer
32 views

Will it be safe to use python 2.7 on Ubuntu 18.04 after python 2 EOL?

Ubuntu 18.04 will still be supported after 2020, yet python 2.7 will reach its end of life. If a CVE or a bug raises for python 2.7 after 2020, will the Ubuntu package get an official fix (through APT)...
0
votes
1answer
46 views

Where should I put the Apache headers?

I have an 18.04 Ubuntu server with a Drupal 8 site that is certified by Let's Encrypt. # sudo certbot --apache -d mydomaine.com -d www.mydomaine.com --rsa-key-size 4096 # sudo nano /etc/apache2/...
0
votes
0answers
23 views

Ubuntu desktop, wildcard nofile not working

I've tried setting the file limit to 32000 on ubuntu desktop for normal users by adding the following lines: * soft nofile 32000 * hard nofile 32000 To: /etc/security/limits.conf But, even after ...
0
votes
0answers
21 views

How do I force users to use strong password ? (Ubuntu 18.04 Server) [duplicate]

I'm using Ubuntu 18.04 Server. How do I force users to use strong password ? I already set SSH and remove root login.
0
votes
1answer
49 views

How to find a lost laptop with Ubuntu installed?

Is there a way for me to track may lost laptop when there's no tracking tool (like prey) installed on it? I tried to check the activity in my email but there's no trace. Thanks in advance.
0
votes
1answer
88 views

Cannot encrypt Ubuntu installation in dual boot

I’m trying to install Ubuntu 18.04.1 LTS on a new laptop alongside Windows 10, however, I want to encrypt the data. In this version if I select “erase everything” It makes that option available, ...
1
vote
2answers
55 views

Secure Download (HTTPS) for Ubuntu Desktop

I know this a similare question was already asked in 2016 but I feel that the answer is quite insufficient: Secure download link (HTTPS) for Ubuntu desktop There should be very clear path to securely ...
1
vote
1answer
42 views

Solutions for risks when using external repository

This is a list of risks when using external repositories I found. Quality: Conflict between packages from external repositories and stable packages in system. Conflict between external repositories ...
1
vote
1answer
86 views

Scanning External Drives for Viruses - Ubuntu [duplicate]

So I recently installed Ubuntu onto one of my Computers and would like to uses it to scan external drives USB and what not for viruses that can affect windows PC. Is there a possible antivirus or ...
0
votes
0answers
63 views

Useradd/groupadd fails: failure while writing changes to /etc/passwd and /etc/group. Contexts problem

Good day, ladies and gentlemen, I need your help. I have a virtual machine with Ubuntu 18.04 LTS, and I'm trying to enforce in with SELinux. I had to build and install a custom kernel out of current ...
2
votes
1answer
68 views

Unknown hostname is attacking my server?

It seems to be someone is trying to attack me from unknown hostnames. How can determine the IP address of these kind of hostnames, since they do not respond to ping? Is there a way to block these "...
1
vote
1answer
23 views

Xubuntu browser and camera security

I get spam emails that claim that my browser has functioned as a keylogger and that my camera has been recording. Is this possible in Xubuntu without root access? Description: Ubuntu 16.04.5 LTS ...
2
votes
1answer
63 views

Weird Ghettoblow Slapahoe Ubuntu Apt Signing Key

I just downloaded a Ubuntu 18 ISO from the Ubuntu site. I looked up the configured apt signing key (0x3B4FE6ACC0B21F32) on a keyserver - entry shown below. What's the deal with the Matthew Knight ...
2
votes
1answer
196 views

Found a lot of SSH login attempts in auth.log [duplicate]

I'm running my own DigitalOcean Droplet on Ubuntu. Today, I found that my SFTP connection to said Droplet was a little laggy when doing work on it, so I checked /var/log/auth.log files to see what was ...
3
votes
2answers
612 views

Is VLC in 18.04 repository insecure?

VLC website offers v. 3.0.3 download to fix previous version 3.0.2 security problem. Will 18.04 repositories be updated soon?
1
vote
1answer
76 views

What's Linux analog for “everyone” security principal on Windows

Is there any Linux analog for "everyone" security principal on windows, or the mechanism for really the same effect ?
0
votes
1answer
68 views

In context of Docker images, which Ubuntu image version fixes the CVE-2018-10000 issue with Glibc?

We are trying to address a security issue with Ubuntu 17.10 image (ubuntu:17.10) which uses glibc version 2.26. This has a security vulnerability CVE-2018-10000 that is related to integer overflow. ...
0
votes
0answers
40 views

Enforce a password complexity policy on login?

I am using LDAP and PAM modules. I know it is possible to enforce user password complexity when changing user password, by using pam_cracklib.so in common-password file. What interests me - is it ...
1
vote
1answer
29 views

LTS security policy for Thunderbird

I have a question regarding security updates in LTS editions, in concrete Ubuntu 16.04 LTS. What is the policy for offering security updates? Recently there was released version 52.9.0 fixing some ...
4
votes
1answer
244 views

What is the gmain process?

I used lsof | grep home/$USER and I found that the gmain process likes to open my personal files. What does this process do and is there any available documentation that explains it in context of ...
0
votes
0answers
21 views

where to find hashes of old ubuntu images via HTTPS? [duplicate]

I can't find any page available over https that provides any hashes for ubuntu images (specifically 14.04.05). Where can I find hashes?
1
vote
1answer
70 views

Run Exploitable Applications As Nobody?

I would like to know if it is possible, and if so how, to run exploitable applications, such as web browsers because of malicious Javascript on websites, as nobody user even though my actual user is a ...
2
votes
0answers
24 views

Password protect certain application [duplicate]

I want to password protect certain application in my desktop application. For example, everytime open firefox I want to set a password for it so that opening firefox should ask for password. I want to ...
2
votes
3answers
202 views

Can I get a virus/malware from only visiting websites?

When I use Firefox and browse the web, can I get viruses or malware without downloading and installing anything? For example, from bad scripts?
0
votes
2answers
49 views

Are there any security advantages of using the command line over a GUI? [closed]

Are there any security advantages of using the command line over a GUI? Or any other advantages?