Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

0
votes
0answers
24 views

Restrict the use of su

I've restricted the use of su by creating an admin group sudo groupadd admin sudo usermod -a -G admin <YOUR ADMIN USERNAME> sudo dpkg-statoverride --update --add root admin 4750 /bin/su I've ...
0
votes
1answer
16 views

Make 50unattended-upgrades writable

I'm trying to follow this guide to setup automatic security updates to my server: https://www.howtoforge.com/tutorial/how-to-setup-automatic-security-updates-on-ubuntu-1604/ I'm at step 2 and trying ...
0
votes
0answers
22 views

16.04 won't let me forget an SSID

I am a very experienced Ubuntu user and have all the updates and everything. I have my laptop exposed and I am sure it has been tampered with but logging is not showing me anything. I have had a ...
0
votes
0answers
29 views

How do I set up an account that guests can use in Ubuntu (MATE) 18.04? [duplicate]

Ubuntu previously had a special Guest Session provision, but that was broken a couple of years ago in LightDM, and then Ubuntu switched to GDM which has no such thing. So now, some classroom, library, ...
1
vote
0answers
23 views

Safest practice for installing software with potential malware [duplicate]

For a project I have been contracted to work on a collaborating Chinese programmer has provided some software to simplify some tasks. I am unaware whether this software package contains malware or ...
0
votes
1answer
26 views

Set up secure DNS (over TLS or HTTPS) on 16.04

How do I set up Secure DNS (eg over TLS or HTTPS) on 16.04? I would prefer to use functionality built into 16.04 or apps available on the 16.04 repository. I plan to use either the Google Public DNS (...
-1
votes
0answers
27 views

Apt-lock unavailable on fresh system , chrome showing ads on ad free websites , a malware?

I was working on Chrome for Ubuntu for a long time , but from last two three days it started behaving weird , I was seeing ads on my google search , for example I searched "hello" it showed adele's ...
0
votes
1answer
25 views

Support for the tomcat8 package

On Ubuntu 16.04 I've been using the tomcat8 package. I enjoyed an automatic installation process and was guaranteed to receive packaged security updates for 5 years courtesy of Canonical. So, even ...
0
votes
1answer
35 views

How to disable the libreoffice macro feature, system-wide?

There are two /usr/lib/libreoffice/share/registry/*.xcd settings, each should suffice: org.openoffice.Office.Misc/Security/Scripting/DisableMacroExecution=true org.openoffice.Office.Misc/Security/...
0
votes
0answers
22 views

Hide user input - Ubuntu lock screen

I was wondering (and didn't find any information) if I can hide the password symbols (*) when logging in, I want to make my lock screen like the terminal when you type your password (just for fun :D) ...
0
votes
0answers
32 views

What are some of the recommended techniques to audit our system? [closed]

I open this question so that among all we believe in the most complete way the tools or commands to execute to check if our system or personal files and folders are being accessed by an unauthorized ...
1
vote
1answer
26 views

How can I make a specific root folder accessible for a user?

I have installed Nextcloud via snaps, and it stores its files under /var/snap/nextcloud/common/nextcloud/data/FriedRose/files, owned by root. I like to give my normal user access to read and write to /...
0
votes
0answers
21 views

How to verify key change claims on project websites?

The top of Wine's download web page has the following warning: The WineHQ repository key was changed on 2018-12-19. If you downloaded and added the key before that time, you will need to download ...
0
votes
1answer
28 views

What is the easiest way to replace a cellphone with a mini laptop [closed]

Given the security concerns that seem to surround modern cellphones in general and Android phones in particular, Ḯ'm considering to move away from using a cellphone and replacing its most important ...
0
votes
0answers
23 views

How to securely edit files on the server using FileZilla

I have an AWS EC2 instance running Ubuntu 18 with Apache2. Now I need to use FileZilla to edit files on the server's /var/www folder. The user provided by AWS if you use Ubuntu is called ubuntu, and ...
1
vote
0answers
324 views

Brave browser error: unsupported command-line flag

I am getting this error message "You are using an unsupported command-line flag: --no-sandbox. Security will suffer." How can i correct this error? This is on Ubuntu 18.04.1 LTS edit: I found ...
0
votes
2answers
55 views

Is it safe and secure to use 18.04 mini.iso minimal instalation for i3?

I took the 18.04 mini.iso, did a basic install. Selected automatic security updates. On software selection screen I selected nothing. Rebooted, installed xinit, i3 (and some x11 utilities package, ...
0
votes
0answers
73 views

Is There Fingerprint Driver For Dell G7

I Have Intentions To Switch To Ubuntu Full Time.I Tried Ubuntu In VM And It Could Not Detect The Fingerprint when i tried lsusb is this only in vm or is there drivers for goodfix fingerprint. Edit: ...
1
vote
0answers
56 views

Am I unsecure after adding untrusted PPA and installing software from it? [duplicate]

I needed to install Gemalto PKCS11 Library. As a result of my searching, I added following PPA to my software sources: https://launchpad.net/~arnaud-morin/+archive/ubuntu/gemalto Then I installed ...
0
votes
0answers
23 views

Where to look for 'Gemalto PKCS11 Library' PPA, deb or snappy?

I would like to find a trusted source for the files required to use Gemalto .NET smart card (libgtop11dotnet.so). Unfortunately I cannot see them in the default repositories and cannot find them on ...
5
votes
2answers
1k views

security - is this my public key? my private key? or the keys of the program I'm using?

I asked a recent, separate Ask Ubuntu question with the following in the body: W: An error occurred during the signature verification. The repository is not updated and the previous index files will ...
0
votes
0answers
10 views

Can rootca validity start date be lower than current date?

What will happen if we create rootca X509 certificate with vaildity date lower than current date. Will date of creation taken into account while cms_verify ? What will happen if we change the system ...
2
votes
1answer
43 views

Kubuntu About info has http link, should be https [closed]

I was irritated to find a http link in such a prominent location as the "About" info of Kubuntu. This issue persists with the most recent stable release 18.10. Is there an existing ticket for this ...
-2
votes
1answer
123 views

Prevent Ubuntu from leaking information to the internet upon login

I am surprised to find so little information about what I would consider a serious breach of privacy and security. It appears ubuntu-report is sending very unique information about your system - like ...
6
votes
1answer
1k views

Ubuntu encrypted hard drive - possible to crack? [closed]

I'm using Ubuntu 18.04 on my laptop. If someone would steal my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people ...
1
vote
0answers
54 views

Setting up Steam on Kubuntu 18.10 to a non-/home folder?

Please tell me: is there any known way to install Steam to a NON-/home folder, WITHOUT needing to resort to moving things later post-install, and making symbolic links? So far the only solution i ...
3
votes
1answer
188 views

Protecting WSL-Ubuntu and WSL-OpenSSH (unfiltering port 443 correctly, to use just these)

I use WSL-Ubuntu on Windows 10 home (build 17134.472) basically just for OpenSSH and Ansible and AFAIK both require only port 443 to be unfiltered to work properly. I have both Windows Firewall and ...
0
votes
1answer
81 views

I can't use ufw on WSL-Ubuntu

I use Windows 10 home (build 17134.471) with WSL-Ubuntu 16.04 (xenial). I executed apt update -y && ufw --force enable and got the following trace (I don't know what it means - maybe some ...
0
votes
1answer
38 views

Is it a good idea to have a LAMP on your desktop [closed]

I am a web-developer. I have a LAMP installed on my daily driver desktop ubuntu system. It is not accessible from the outside because I haven't forwarded any ports to it. However a friend told me that ...
0
votes
0answers
50 views

Is phpmyadmin 4.6.6 from bionic universe repository secure?

When installing phpmyadmin from the bionic universe repository I get version 4.6.6: # apt show phpmyadmin Package: phpmyadmin Version: 4:4.6.6-5 Priority: extra Section: universe/web Origin: Ubuntu … ...
0
votes
0answers
39 views

AppImage vs ppa : advantages and disadvantages & Security

I'm asking about installing packages using AppImage, is it safe ? what about our classic method ppa was it safe and what are the differences between them mainly in the security side ?
0
votes
2answers
155 views

How to remove BetBlocker

I've installed BetBlocker but have noticed that, although it works as intended, it works a little too much for a lot of sites I use throughout the day. Namely Youtube, Facebook and anything else that ...
1
vote
0answers
36 views

LDAPS with snap install of nextcloud on 18.04

Installed nextcloud on 18.04 with sudo snap install nextcloud Is there any way to get nextcloud to use a private cert to use LDAPS instead of just LDAP ?
1
vote
1answer
82 views

Is it safe to use Ubuntu for personal use? [duplicate]

i've seen some videos where Ubuntu has a lot off advantages over windows 10 and I've switched too Ubuntu now. But since I was so used too have an antivirus protection on windows 10. So I ask, before I ...
2
votes
0answers
33 views

How can I list only available security updates? [duplicate]

I am aware of the command /usr/lib/update-notifier/apt-check --human-readable which gives output like 7 packages can be updated. 0 updates are security updates. but how can I list only the ...
0
votes
0answers
18 views

Does enabling all SysRq functions impose a security risk?

Does enabling all SysRq functions impose a security risk for a typical Ubuntu user? Just wondering why SysRq is restricted by default.
2
votes
0answers
25 views

How do I restrict the number of user-logins per day?

is it possible to allow a user to login (to his ubuntu-account) only one time per day? Thank you!
0
votes
0answers
46 views

Any way to see when was the last time you updated the firmware of an SSD? (or at least pull out the raw firmware data to evaluate)

The reason I'm asking is a bit of worry, I've seen this entry on the security StackExchange and it's freaking me out. I have found out I haven't done a video recording of the installation of Windows ...
0
votes
0answers
26 views

Deny Hosts: why or why not HOSTNAME_LOOKUP

What disadvantage / danger is there to enabling HOSTNAME_LOOKUP in the DenyHosts configuration. Is there a security concern or is the disadvantage only a performance issue?
2
votes
2answers
115 views

Is there a way for a casual user to verify the authenticity of a downloaded Ubuntu .ISO?

I'm quite surprised that an issue this big has so little conversation around it. I'm a casual Ubuntu user, and I just downloaded the ISO from ubuntu.com. I don't have a PGP web-of-trust set up on my ...
0
votes
1answer
67 views

Limit root login by IP Address? [duplicate]

Is there a mechanic to let me limit SSH and telnet logins to the root account based on IP address? I have 3 nets used for different things locally all in the 192.168.x ranges, I need to login from ...
0
votes
0answers
24 views

Strange files on FTP account

We have a user who needs to use FTP for a specific application. For the last wee or so, really starnge files have been appearing in their account: -rw------- 1 root root 59 Nov 21 14:...
0
votes
1answer
25 views

Large delay between release of package update and availability in update manager

On my Ubuntu 16.04 Desktop, I regularly (usually multiple times per week) check for updates via the update manager GUI and install all updates that are shown as available. Today, and this was ...
0
votes
0answers
27 views

How to Add Security Password to Multimedia Files [duplicate]

I know we can to use a security password with LibreOffice files (writer, calc, impress, etc) to avoid strangers can access those kind of files. I want to know if we can use security password in ...
0
votes
0answers
26 views

Software from Universe Repository, the same security level as Main?

My question is how secure is the Universe Repository? From the technical point of view only limited amount of people do supervise certain programs in this Repository. How can I be sure that this is ...
1
vote
0answers
78 views

Is there a way to disable all connecting storage devices via usb in Ubuntu 18.04?

I am currently trying to secure a desktop and was able to disable almost all of the connecting usb flashdrive by disabling usb ports in bios and by: sudo -s enter password chmod 000 /media/ But Ive ...
0
votes
0answers
36 views

meltdown_v1, spectre_v2 capabilities on 18.04 LTS [duplicate]

Hardware more than Operating System related but: When running cat /proc/cpuinfo from the terminal I am given the lovely output: bugs: meltdown_v1_spectre_v2_speculative_bypass The infected CPU is a ...
0
votes
0answers
429 views

Can I login to any Ubuntu OS as root user with no password? [duplicate]

I mean can I login using Advanced options -> Recovery Menu as root user without any restriction (except for a Full Disk Encrypted system)? Can someone explain how to fix this security hole? Visual ...
0
votes
0answers
30 views

monitor service user account activity

I've a service account that has a full root access "user1 All=(ALL:ALL) NOPASSWD:ALL" . The user account is not used by a human user but it is used by an application which is running some bash and ...
0
votes
1answer
209 views

Ubuntu 18.04 LTS Spectre/Meltdown Status [duplicate]

I could not find any official Ubuntu information on that issue. If I check the official statement: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown there is only information on ...