Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [security]

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

Filter by
Sorted by
Tagged with
0 votes
1 answer
22 views

Apt focal-update versus focal-security [duplicate]

What is the difference between the "updates" and "security" repos? I'm asking because I want to set up and use unattended-upgrades, which only allow updates from "focal" ...
KoenDG's user avatar
  • 5
3 votes
0 answers
36 views

How to detect StripedFly malware in Ubuntu 22.04?

I was reading this article, and decided to search for sd-pam in the processes of one of my laptops. I did ps -x | grep -i "sd-pam", and got 2864 ? S 0:00 (sd-pam) 29172 pts/0 ...
An old man in the sea.'s user avatar
0 votes
0 answers
13 views

How to find retpoline return thunk for my machine

I'm interested in finding out, how jump2ret works as a mitigation for retbleed. For that I would like to copy the return thunk to a kernel module such that I can play around with it (i.e. write the ...
dennis's user avatar
  • 13
-3 votes
0 answers
26 views

Ubuntu Kinetic OVAL feed is very unstable [closed]

Curious what kind of metrics are available on the Kinetic OVAL data feed, but it seems to have a very high (70%+) failure rate. We are using other Ubuntu OVAL feeds in our automation, but this one in ...
Tim Lee's user avatar
0 votes
1 answer
53 views

Malware in browser on Ubuntu?

By mistake I opened a link in a spam email and, even though the browser (Vivaldi) blocked the page from loading, I wanted to understand if there may have been a malware download or something else. ...
Cornelius_Noctua's user avatar
-1 votes
0 answers
28 views

i cant download/install [duplicate]

i cant download/install things it keeps saying this: Ign:1 ttp://archive.ubuntu.com/ubuntu jammy InRelease Ign:2 ttp://security.ubuntu.com/ubuntu jammy-security InRelease Ign:3 ttp://archive.ubuntu....
karol's user avatar
  • 1
2 votes
1 answer
101 views

How do I apply only security updates in terminal? [duplicate]

My server uses the ubuntu operating system. After a while, I saw a lot of update notifications. But I only want to update the security part, so how do I use the command?
Spammer profile deleted by mod's user avatar
3 votes
1 answer
246 views

lscpu vulnerabilities and mitigation

I recently learned about lscpu command and was excited to know the architecture information. However, there is a section at the end where it shows lots of vulnerabilities. Did some google search and ...
learner_account's user avatar
1 vote
1 answer
97 views

Ubuntu 22.04: Server infected by a malware kdevtmpfsi [duplicate]

My freshly created server was infected by the kdevtmpfsi malware. I saw many articles advising how to permanently remove this malware, but none of them worked for me. After trying something and "...
user984621's user avatar
-1 votes
0 answers
60 views

Could not log in - was I hacked or other issue?

Today I was unable to log into my desktop Ubuntu v22.04.2 (using my user account) and I'm sure the password was correct (10 times, and used the 'eye-icon' on the login password field to double check ...
Stevo's user avatar
  • 99
0 votes
1 answer
85 views

Verifying Ubuntu ISO file

For some time now I have been wondering if verifying the PGP signature and sha256 hash are actually needed to check if there is any malware in the downloaded ISO. Evertime I try to google this, i get ...
Dawson's user avatar
  • 11
1 vote
1 answer
187 views

DISA STIG drive partitioning (LVMs) during install of Ubuntu 24.04?

I would like to install Ubuntu 24.04 on a new (physical) system and comply with the DISA STIG for drive partitioning and secure LVM mounts. That means 'noexec' for /var and /tmp. I don't see any way ...
ZappedC64's user avatar
1 vote
0 answers
45 views

Is there another way to update flatpak in Ubuntu 22.04 without adding the PPA?

Reason for asking is because of the Flatpak 1.12.7 vulnerability and system times out when trying to add the Flatpak PPA. sudo add-apt-repository ppa:flatpak/stable -y [sudo] password for daniel: ...
in4matix's user avatar
0 votes
0 answers
42 views

Was Remmina recently added to startup items in some recent (2024-04-25) update on 23.10

I restarted and noticed a strange applet icon in the top right. It was remmina. I didn't remember ever installing this so started looking into it. Apparently it's installed by default and is the RDP ...
safetyduck's user avatar
0 votes
0 answers
27 views

Any 2FA (TOTP) app that syncs between iPhone and Ubuntu?

Does anyone know of a 2FA (TOTP) service or setup that syncs your 2FA codes/accounts between an iPhone app and a Linux or web app that you can use from Ubuntu desktop? I used to use Authy to do ...
Sean Hammond's user avatar
1 vote
0 answers
100 views

How to Disable Outgoing SSH for Users on Ubuntu Server While Allowing Incoming SSH Access?

Hello Ubuntu community, I'm seeking guidance on how to implement a specific security measure on my Ubuntu server. I want to restrict all users from initiating outgoing SSH connections to external ...
Mousavi's user avatar
  • 11
4 votes
1 answer
417 views

Why does fail2ban report my auth.log file as removed?

I have logwatch running and I check every morning it's content. I have noticed that my auth.log file is erased after an apt upgrade and reboot. Here is the fail2ban section of the logwatch after an ...
chmike's user avatar
  • 872
0 votes
0 answers
48 views

What to do with CVEs and vulnerable CPUs?

Recently a vulnerability that targets Intel CPUs and Linux OSs was reported on. CVE-2024-2201 (aka: Inspectre Gadget / Spectre v2.0) has me rather concerned. Q: I would like to know the correct ...
Worn-out_home-tech's user avatar
0 votes
0 answers
26 views

Is x.509 bypass a security risk?

I have an embedded system that is communicating with a server using SSL over WiFi to a router and then to the internet. I have what I've been told is the proper certificate for the server installed ...
Dave's user avatar
  • 1
0 votes
0 answers
19 views

New to apparmor- why are all downloaded appoarmor prifiles blanc?

background: I'm on Ubuntu 20.04.03 LTS and looking for "how to make my next installation more secure". I am interested in a topic that often relies on third party- and maybe older/not well ...
Danny27's user avatar
  • 63
0 votes
0 answers
35 views

How frequently ubuntu OS releases security patches?

I would like to set up automatic patch through patch management tool but there is some dependencies with ubuntu kernel and i can not update directly, have to validate it first and then apply it. Is ...
n13's user avatar
  • 1
0 votes
1 answer
88 views

Fingerprint reader is not working

I want to install my fingerprint reader on my laptop (HP Elitebook 820 G1), but I can't. I have this small scanner on the laptop, but when typing lsusb and don't see a fingerprint scanner: Bus 001 ...
sami boutgoulla's user avatar
0 votes
0 answers
38 views

Help resolving 2 missing security elements, in the security info of the privacy settings

I need help finding out why these are off, if there's a possible threat, and how to keep them on. 2 security options inapplicable to my computer:
fu3x11's user avatar
  • 9
-4 votes
1 answer
70 views

CVE - questions about status

Can someone explain what exacly mean status in specific linux versions ? I have ubuntu 22.04 LTS, so thats mean that i must wait for fix that ?
HowIsIt's user avatar
0 votes
1 answer
57 views

Unable to connect to my vps through ssh using PublicKeys

I'm new to system administration and I am trying to setup (/secure) my first VPS. To my understanding using Keys are "safer" than using passwords, so here I am trying to do just that. I've ...
Dennis Solomon's user avatar
0 votes
0 answers
51 views

apt list --upgradable and USN

Below command gives the list of security patches which are available to apply. apt list --upgradable | grep security | awk '{print $1}' My expectation is that this list should be a subset of USN ...
SHW's user avatar
  • 101
0 votes
0 answers
54 views

How to fix Secure Boot error "Image failed to verify with *ACCESS DENIED*" [duplicate]

When attempting to boot a live OS via USB or CD, I get the secure boot error: "Image failed to verify with ACCESS DENIED". There is no SSD/HDD installed. Secure Boot is enabled and while I ...
Ramzialzaki Weir's user avatar
50 votes
5 answers
25k views

Is Ubuntu affected by the xz backdoor compromise?

Moderator Note: This question relates to a rapidly evolving current event. It has been protected to prevent unrelated banter or answers that do not benefit the post. In March 2024, a backdoor was ...
Yasha Karant's user avatar
  • 1,073
0 votes
2 answers
249 views

How to require 2FA for local Ubuntu login?

There are directions on configuring 2FA for SSH. However, I'm interested in mandating 2FA for logal sign in. For example, normally, the login might look like this: ubuntu login: cocomac Password: ...
cocomac's user avatar
  • 3,464
0 votes
0 answers
116 views

Shibboleth configuration in ubuntu 22.04

Does anyone know how to install and configure Shibboleth in Ubuntu 22.04? Any recently updated documentation will be much appreciated.
samrbdry's user avatar
0 votes
0 answers
38 views

Protect system disk from attaching to another machine

I have a device (Raspberry PI 3, Orange PI 5) with SSD as main disk, running under Ubuntu 22.04. This device should be autonome, i.e. autimatically reboot and autorun some services. There is some ...
Yurii Zhukow's user avatar
1 vote
0 answers
22 views

Is there an archive of old security updates? [duplicate]

Is there any way to find previous versions of binary package updates that were posted to a security repository? Specifically, I am looking for libssl-dev 3.0.2-0ubuntu1.13 for Jammy, because I'm ...
Jonathan's user avatar
  • 111
0 votes
0 answers
41 views

Can a USB drive be used as a security key to unlock a Ubuntu PC? [duplicate]

I am currently looking to switch from Windows 10 to Ubuntu but I still want to use the security key I already have for unlocking my PC. Windows has a software called USB Raptor but this is not on ...
vesper-arch's user avatar
0 votes
0 answers
16 views

one portal to authenticate different applications

I have installed ojs, koha, dspace7 and moodle succesfully on ubuntu 20.04 and I need to use one portal to authenticate the login to all these service, any guide or technical reference I can rely on ...
samrbdry's user avatar
0 votes
0 answers
55 views

I am unable to find login with fingerprint & login with faceid options on ubuntu's user setting. My Laptop model is Hp probook 440 g8 notebook PC

I just got a new Hp probook 440 g8 notebook PC, which includes a fingerprint scanner. It works fine for Windows.Fingerprint sensor did not detected in Hp probook 440 g8 notebook PC.
Avhra Neil Sen's user avatar
-1 votes
1 answer
2k views

Use UFW (firewall) to deny incoming ping (ICMP) requests?

The ufw (uncomplicated firewall) command line app does not have any option for disabling incoming ICMP Internet protocol requests. ICMP is used mainly by ping to discover IP addresses of servers on ...
hobs's user avatar
  • 512
-1 votes
1 answer
141 views

Ubuntu 22.04 LTS OVAL missing version check for vulnerability in older kernel

On the NVD website, CVE-2023-1989 is stated as being present in various kernels, among them 5.11 to 5.15.105. After an OpenSCAP scan of a 5.15.0 image, I noticed that vulnerability and several others ...
thariqfahry's user avatar
0 votes
1 answer
278 views

Benefit of using secure boot with MOK over disabling secure boot

Following this guide, I was able to enroll a Machine Owner Key (MOK) to sign my NVIDIA (proprietary) driver. It is fairly easy to set up and it works fine. So far I am happy with it. I had to enter a ...
Stéphane Tréboux's user avatar
0 votes
1 answer
106 views

I was installing / enableing fips 140 , rebooted as instructed now my wifi wont let me log rejecting the correct pw. Running Ubuntu Studio 20.13on

I was attempting to make a compliant Laptop and after enabling fips 140. I can no longer log in to my Wi-Fi networks with what were the proper passwords, it asks for password or security encryption ...
Daniel Kerr's user avatar
1 vote
0 answers
30 views

Is it possible to make the lock screen's background a feed from the front-facing camera?

People tend to behave better when they know they're being watched, even by a machine. To deter people screwing with my desk, is it possible to have the lock screen background be a (blurred) camera ...
owicalagu's user avatar
2 votes
3 answers
2k views

Clamscan viruses scanning, too many viruses

I installed ClamAV to check for some malware. It took much time, 4 hours, to scan my PC, and the results are in this screenshot: I am on Ubuntu 22.04 and tried to stay safe, but I wanted to double-...
ilie alexandru's user avatar
0 votes
0 answers
52 views

Specify L2TP VPN to use other port

I am currently at a hotel and they seem to block VPN use. I assume they block it by looking into the port it uses. I would like to use my company VPN (L2TP). So, I think my best bet is to change the ...
Darren Christopher's user avatar
0 votes
0 answers
47 views

How to keep neighbors from connecting to my laptop bluetooth?

ubuntu 22.04 here on a lenovo thinkpad carbon x 7th generation. I currently have bluetooth enabled via the bluez and blueman packages. I keep getting notifications that different devices are ...
Dan Zinkevich's user avatar
0 votes
1 answer
324 views

Traceroute Vulnerability (CVE-2023-46316) fixes are not released [duplicate]

We are currently using ubuntu 20.04 LTS version in our environment, This traceroute CVE-2023-46316 vulnerability was reported for the Installed package : traceroute_1:2.1.0-2, and this Vulnerability ...
Asghar's user avatar
  • 11
1 vote
1 answer
807 views

Unrecognized accessed paths - is my server being attacked?

My website seems to be having some malicious visitors and crashing my site often. I am now tracking what they are doing on my site. In my log, I found out they are accessing the following paths ...
Run's user avatar
  • 2,638
1 vote
2 answers
518 views

CVE-2023-3824, CVE-2023-3823 on PHP

I have a focal machine ("Ubuntu 20.04.6 LTS") with php 7.4 installed (7.4.3-4ubuntu2.19), a vulnerability scan warned me about CVE-2023-3824, CVE-2023-3823 in PHP but the following: https://...
Fabrizio Dal Farra's user avatar
1 vote
0 answers
119 views

Issues with ARP poisoning using ettercap [closed]

Sorry if this is the wrong place to ask. I am currently attempting to use a program called Ettercap to initiate a man in the middle attack (within my own network, in case I need to specify.). In this ...
lil bro's user avatar
  • 11
1 vote
2 answers
488 views

Apache starting automatically with the system

Using 22.04 on a laptop. I have XAMPP installed, but when I try to start XAMPP through Terminal, it says Starting XAMPP for Linux 8.2.0-0... XAMPP: Starting Apache...fail. XAMPP: Another web server ...
user227495's user avatar
  • 4,101
0 votes
0 answers
64 views

Location problem

I recently began using Ubuntu about 2-3 weeks ago and have encountered a significant issue with my location settings. When I check my physical location on my laptop, it shows me in a completely ...
drstrange's user avatar
6 votes
1 answer
1k views

Why is user.max_user_namespaces enabled in Ubuntu by default?

I'm looking into kernel exploits in recent years, approx 80% of them requires user.max_user_namespaces with a positive value. This setting is disabled in CentOS since 6.X series, but enabled in all ...
daisy's user avatar
  • 6,612

1
2 3 4 5
50