Questions tagged [security]

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
17 views

Security issues and suddenly all folders are locked [closed]

So, i'm using mint xfce 20.3 una, and suddenly all of my folders are locked. Documents, musics, photos, home, everything is locked. Should i concern about security issues?? Why this happened suddenly? ...
user avatar
0 votes
0 answers
7 views

Stunnel client side proxy

I found command that connects client side proxy in book "Network security with OpenSSL": stunnel -c -r www.amazon.com:443 Looks like stunnel does not understands option -c: Invalid ...
user avatar
  • 3,847
1 vote
1 answer
291 views

eduroam doesn't connect due to weak certificate signature digest

Recently upgraded to Ubuntu 22.04, and had some issues activating my eduroam WiFi connection. Specifically, I got the following message in syslog: Mai 04 11:42:11 sliver wpa_supplicant[687]: TLS: ...
user avatar
0 votes
1 answer
31 views

How to fix <urlopen error ……. unable to get local issuer certificate (_ssl.c:997)> in Ubuntu?

I can't report a bug due to the above mentioned reason. I am using Ubuntu 22.04 LTS. How can I fix this issue. May be because of this issue I can't attach my system to Canonical Livepatch.
user avatar
  • 180
0 votes
0 answers
37 views

iptables module(s) loaded, but no rules active [FIRE-4512]

CIS security hardening. How to solve this warning? iptables module(s) loaded, but no rules active [FIRE-4512] https://cisofy.com/lynis/controls/FIRE-4512/ ** OS Details- ** Distributor ID: Ubuntu ...
user avatar
0 votes
1 answer
27 views

ufw is not closing port for incoming packets even after i set the rule?

I am trying to stop steam from opening my port 27036. The problem is that even after i enabled ufw, and even after manually setting a new rule to block this port (even tho by default it should block ...
user avatar
0 votes
0 answers
29 views

CIS hardening script hangs

I'm trying to run 'sudo usg fix' (I'm using a default tailoring file) on Ubuntu 20.04 in a VM running on VMware ESXi. It gets past the audit portion and shows "starting remediation" but then ...
user avatar
  • 1
0 votes
0 answers
21 views

Linux dd wiping security

I have some questions regarding the "dd" utility, if someone can help. Please answer only if you are sure about the answer ! I have a scenario here in which I have a HDD with Bad Sectors ...
user avatar
  • 51
0 votes
0 answers
137 views

Problem loading X.509 certificate -65 (In Jammy)

When I boot my system the first line shows: Problem loading X.509 certificate -65 I believe there is some problem with the file type (FAT-12/16/32). But it works without any noticeable problem. Device ...
user avatar
  • 180
0 votes
0 answers
16 views

Get public key from certificate

I have certificate file below that according to my understanding should contain public key. Command openssl x509 -in cert.pem -text brings: Certificate: Data: Version: 3 (0x2) ...
user avatar
  • 3,847
0 votes
1 answer
51 views

Check for malware in firmware

What is the most efficient way to check for malware residing in firmware through open source software? I wondered to what extent standard commercial antivirus software detects this type of malware.
user avatar
  • 81
0 votes
0 answers
12 views

allow different ssh auth from specific but different IPs?

Is it possible to setup login rules for ssh users, for example: address1,address2 = incoming IP1, incoming IP2 User bernie is only able to connect from address1 User seb is only ...
user avatar
  • 19
0 votes
1 answer
22 views

Custom Audit Logs from Applications

I am trying to programmatically generate custom audit logs from the applications I've written (C/C++), but currently cannot find the library/functions that would allow me to do so. I am aware of ...
user avatar
  • 1
0 votes
0 answers
26 views

Automatically lock my computer when I walk away from it

I would like to lock my Ubuntu after I walk away from it. Ideally, it should be a small Bluetooth tag / card that I carry in my pocket with a proximity sensor. Is there some software and hardware that ...
user avatar
1 vote
0 answers
23 views

Gnome keyring and external storage

I have an application, which is using gnome keyring for storing its passwords/credentials and those are stored into ~/.local/share/keyrings/. Therefore I am wondering if it would be possible to change ...
user avatar
0 votes
0 answers
237 views

Error while I try to install xvfb

I am trying to install the xvfb package and I get the following error: sudo apt install xvfb [sudo] password for d1-user: Reading package lists... Done Building dependency tree Reading state ...
user avatar
  • 171
0 votes
0 answers
25 views

Potentially Broke Install, Removed libnss3

This is a thread and worklog I am moving over from reddit.com/r/ubuntu, so the formatting may be odd. PREVIEW: Everyone, I was trying to install some SpyWare for work, following this guide and it did ...
user avatar
  • 1
1 vote
1 answer
52 views

Every week i need to reinstall Nvidia and VMware drivers when secure boot is on?

I use Secure Boot, and every 1-2 Week, when i boot the computer the Nvidia drivers are not loaded and the VMware says that it needs to install some modules and afterwards gives an error about loading ...
user avatar
0 votes
0 answers
21 views

Hash Mismatch from us.archive.ubuntu.com

Get:1 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 firefox amd64 98.0.2+build1-0ubuntu0.20.04.1 [57.7 MB] Err:1 http://us.archive....
user avatar
  • 140
0 votes
0 answers
22 views

CVE-2021-4034 vulnerability report from Landscape [duplicate]

I have a question regarding this CVE. Why this vulnerability is not listed in Landscape when exporting report by CVE ? https://github.com/mebeim/CVE-2021-4034 enter image description here
user avatar
0 votes
1 answer
26 views

Whitelisting friends' dynamic IPs w/o much extra effort from them

I'm running a small https webserver using a Javascript-based program that I've heard isn't super secure. Fortunately, I only want a couple of friends to be able to access it - unfortunately they're ...
user avatar
0 votes
0 answers
27 views

Are my files encrypted in sleep mode?

I have a simple questions but can't to seem to find an answer online. I've installed Ubuntu 20.04 using full disc encryption. At startup, my laptop now asks me for a password to decrypt. I use suspend ...
user avatar
  • 111
3 votes
1 answer
931 views

Installing python: who is deadsnakes and why should I trust them?

I want to install Python 3.9 on my Ubuntu 20.04, and all tutorials I can find include a step as follows: sudo add-apt-repository ppa:deadsnakes/ppa I am concerned about security. I've looked into ...
user avatar
  • 275
6 votes
2 answers
520 views

Can I run Google Authenticator from Ubuntu without a cellphone?

I'm running Kubuntu 21.10. Can I run Google Authenticator without needing a cellphone?
user avatar
  • 1,823
0 votes
1 answer
48 views

What is safer: Wireguard on Router or on Server behind Router

Iam currently setting up my homeserver and I was wondering if there are any advantages/disadvantes to either approach. Does it even matter at all? Cheers
user avatar
  • 3
0 votes
0 answers
42 views

How to block traffic when strongswan ikev2 tunnel not established

Strongswan ikev2 network manager plugin network-manager-strongswan was installed on ubuntu 20.04.4 and configured to reconnect automatically. However when VPN is not available I'd like to block all ...
user avatar
  • 101
5 votes
2 answers
89 views

Is it possible to disable a Certificate Authority system-wide or at least on Firefox?

I want to disable CAs that are under control of a country that's waging war against mine, how can I do it? I see one right away. The question still stands even if you are convinced there are none, it'...
user avatar
  • 8,060
2 votes
0 answers
39 views

Why is il3-fw2.canonical.com Pinging a server? / Security Concern

Presently, we have a number of Ubuntu 20.04 servers set up with unattended-updates, restricted just to security updates. I'm aware this generates a log, and checking said log does show that about ...
user avatar
3 votes
1 answer
497 views

Why is "linux" in Bionic and Focal affected by CVE-2022-0847?

According to Ubuntu Security page, the linux project in Bionic and Focal has a status of "Needed". I'm assuming this project refers to linux-generic in the APT repository, so linux should be ...
user avatar
  • 1,274
0 votes
0 answers
149 views

How to install patch CVE-2022-0847? [duplicate]

I see a new security patch update: CVE-2022-0847 for my Ubuntu 20.04. I need to install it or check it for updates. Due to the article I see keyword - Linux and I tried to install patch using the ...
user avatar
0 votes
0 answers
16 views

Auto install security updates on managed devices

So the situation is we have around 50 computers we manage through a service called JumpCloud running Ubuntu. I want to make sure they have automatic installation for security updates enabled in the ...
user avatar
  • 1
2 votes
0 answers
18 views

I need to enable FIPS on a air gapped server

I have a 20.04 server that I need to enable FIPS on. The problem is that it is air gapped (aka no internet access). Is this possible?
user avatar
0 votes
2 answers
65 views

Understanding the output of ubuntu-security-status

# ubuntu-security-status X packages installed, of which: Y receive package updates with LTS until 4/2025 The output does not mention ESM. I activated my UA subscription on this machine, and the ...
user avatar
0 votes
0 answers
33 views

Process running under and id that has **Never logged in**

I have an account which has never been logged in, but ps shows stuff running under that account: How is this possible? What could be the above apps that are running? Has my machine been hacked?
user avatar
0 votes
0 answers
27 views

hiding company email password from employees working on emails?

I would like to be able to let my customer service employee to answer the emails that come to company email address, but not give them the login password. This way the only place they can reach the ...
user avatar
1 vote
1 answer
227 views

Is it safe to use Ubuntu desktop when it is in ESM stage? [closed]

Question in short What are the real life (security) risks of using Ubuntu ESM for personal use (Ubuntu for desktop) and what to look out for in general to keep the system secure? Do I need to do ...
user avatar
0 votes
1 answer
47 views

Why can't I access the Skype website (error NET::ERR_CERT_AUTHORITY_INVALID)?

Whether I use Firefox or Chrome, I'm not able to access the https://skype.com/en/ website. I get the following on Chrome: Your connection is not private Attackers might be trying to steal your ...
user avatar
  • 23
10 votes
7 answers
2k views

How can I perform a secure automatic file transfer between two servers?

I would like to transfer some files from a server A to a server B daily (for backup purposes). However, I cannot find a way that does not create security breaches. My goal is that someone with sudo ...
user avatar
0 votes
0 answers
23 views

Plaintext login password shows on screen on laptop wake (Lubuntu 18.04)

Yesterday, I did a clean install of Lubuntu 18.04 via the the 64-bit image here https://cdimage.ubuntu.com/lubuntu/releases/18.04/release/ on an Asus Vivobook E410M. Whenever the lid of the laptop is ...
user avatar
  • 1
-2 votes
1 answer
109 views

VBS(Virtualization Based Security) on Linux, Kernel protection using hardware based virtualization. Is it planned to be embedded in a distro?

https://www.linux-kvm.org/images/4/40/01x05-Jun_Nakajima-Kernel_Protection_Using_Hardware-Based_Virtualization.pdf We have already VBS(Virtualization Based Security) in Windows 11. I do need that ...
user avatar
1 vote
1 answer
30 views

Why is there an option to overwrite free space twice nautilus

What is the benefit of overwriting free space more than once? If you install the plugin that adds this option there are options like: overwrite free space -> overwrite once, overwrite 2 times (save ...
user avatar
  • 145
1 vote
1 answer
245 views

Ubuntu 20.4 autoinstall user-data skip installing security updates

everyone, is it possible to disable the option of downloading and installing security updates on an Ubuntu installation? The installation takes a long time and is aborted with the message apt config ...
user avatar
0 votes
1 answer
972 views

passwd: Module is unknown

I have installed and running command "CIS compliance with Ubuntu 20.04 LTS Applying the CIS rules to the current system" then passwd,adduser, deluser dosen't work. passwd: Module is unknown ...
user avatar
0 votes
0 answers
24 views

Force Login after Hibernation on Ubuntu 20.04

I set up hibernation as described here and it works well. However, when booting again I end up on my desktop without a password prompt. Is there way to force a login after hibernation?
user avatar
-2 votes
1 answer
54 views

Torrent malware [closed]

After I downloaded some courses from a 3rd party website I found that there is some of the data had uploaded automatically . how can I know which data has been uploaded. is that some kind of malware ...
user avatar
0 votes
0 answers
45 views

How can I ensure that Impress / Powerpoint presentations are virus free?

I use Ubuntu 20.04. I am aware that viruses exists for all operating systems (Linux included). However, it is rather uncommon to get infected on Ubuntu. Besides that, to avoid any malicious software, ...
user avatar
  • 1,029
-2 votes
2 answers
85 views

Login as the only user

Repeated question. How to make login possible to a single (root, admin) user only? (Ubuntu mate 20.04.3 LTS.)
user avatar
1 vote
1 answer
40 views

Possible weakness in www-data Permission?

today I was testing something on my VPS and realized the "www-data" user has read access into Home folders and into System internal folders as well which would give an possible Attacker, the ...
user avatar
  • 11
0 votes
0 answers
11 views

Different NGINX user for proxy configuration, reverse proxy and websites - is it possible?

I have NGINX instance in my server working in ROOT account. user root; upstream docker { server unix:/var/run/docker.sock; } server { listen 4444 default_server; location / { proxy_pass ...
user avatar
  • 105
0 votes
0 answers
230 views

I can't change the Secure Boot mode to enabled "Failed to delete Secure Boot state"?

I have Ubuntu 21.10. Secure Boot is showen as enabled, in the BIOS of the Computer, but as I used the sudo mokutil --sb-state to check the status it says "SecureBoot disabled". Then I used ...
user avatar

1
2 3 4 5
47