Questions tagged [security]

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

Filter by
Sorted by
Tagged with
-1
votes
1answer
27 views

Gnome Online Accounts - CVE-2013-0240

I'm in a discussion with Cybersecurity Team on the company that I work. I'm trying dealing to allow again this integration in our environment. The Cyber guys expose this CVE detail. I search on the ...
0
votes
0answers
11 views

GNS3 VM is not forwarding TFTP replies to The Cisco Router

My TFTP server that resides on my home LAN is responding to a TFTP read request from my Cisco Router that runs on the GNS3 VM (an Ubuntu server). The Cisco router uses the GNS3 VM as its default ...
1
vote
0answers
32 views

/proc/cpuinfo security

I find that some applications want to check /proc/cpuinfo but don't have access This is on my server running Ubuntu 20.04.2 LTS, the permissions are: -rw-r----- 1 root root 0 May 2 14:35 /proc/...
0
votes
0answers
32 views

How can unattended update happen when networking is disabled?

I am wondering how it is possible that my Ubuntu 18.04 system can do an unattended upgrade when shutting the system down while WiFi and networking are disabled? I had WiFi turned off and no network ...
0
votes
2answers
39 views

how can I be sure my system is update with latest security updates?

am subscribed to ubuntu-security-announce list I receive some emails mentioning that 21.04 has some bugs like [USN-4929-1] Bind vulnerabilities [USN-4913-2] Underscore vulnerability however, since I ...
1
vote
2answers
96 views

Why does shim/mokmanager allow to circumvent _ALL_ protections of SecureBoot? And how to fix it?

Here is what I have done: Generated my own SSL keys (db, KEK, PK) x (cer, key) Removed existing signatures from kernel, GRUB, shim (and all other EFI binaries in /boot) and signed them with my own ...
1
vote
1answer
31 views

How did it happen that one user can access files of another user's account on the same computer? [duplicate]

On the same computer, I have two user accounts, one for work and the other personal. On Ubuntu 18.04 I can access, for some reason, files from one account if I am logged in in to the other (from the ...
1
vote
1answer
81 views

How to delete/modify the recovery key from the Ubuntu 21.04 encrypted disk install?

When installing Ubuntu 21.04 with encrypted disk (filesystem: zfs) a 16 digit "recovery key" is automatically created, how do i get rid of/modify it? I am looking to: list installed keys ...
0
votes
0answers
32 views

How to ensure that my computer/laptop has a legitimate and not tampered uefi/bios

How do I verify that a pc/laptop has a legitimate and not tampered uefi and/or bios? Let's say I was doing somethings which potentially could be dangerous. I have inserted some unknown hard drives or ...
0
votes
0answers
19 views

How to change gatttool security level?

I am trying to turn on a use boom via BLE, using gatttool and having problems, and I saw a thread on here suggesting to change the gatt security level, and after trying numerous ways of trying to do ...
2
votes
1answer
25 views

Does KMail stores emails encrypted at rest?

I would like to know if someone with access to my computer can read my emails and get my email provider password.
0
votes
1answer
23 views

Prevent local admin from installing any blacklisted package on Ubuntu (Desktop)

At our company there is a need for Ubuntu clients. However there are some issues regarding security. In our case, most Ubuntu users are local admin (listed in /etc/sudoers) but we would like to ...
0
votes
1answer
52 views

How to create a secure boot enabled USB flash

I want to create a Ubuntu bootable USB flash and install my apps in that, then pass USB to any other person. they should run Ubuntu from USB flash and run my applications from it, so that nobody could ...
-1
votes
0answers
62 views

I'm getting spyed in Ubuntu, how can I know from where and who is?

Yesterday I was typing using LibreOffice writer, and unexpectedly the screen blinked and I saw a centered square over the display showing a video camera of someone, I cannot saw him well because he ...
0
votes
0answers
73 views

ClamAV MD5 sum based whitelists (*.fp) don’t work in Ubuntu MATE 20.04.2

Trying to make ClamAV ignore several files. These are almost cryptocoin miners which I do use. Cryptocoin miners get flagged by most antivirus programs for they can be distributed as malware (using ...
0
votes
1answer
34 views

NVR Viewer for Ubuntu

I've looked around and maybe I'm not searching correctly; or no one has this specific setup. I have a Sannce DT41DC1T security camera NVR. Analog cameras plug directly into the unit. Instead of ...
1
vote
0answers
53 views

What are people using currently for virus and malware checks? [duplicate]

What are people using currently for virus and malware checks? I realize there is far less need for this with Linux than with Windows, but I still prefer wearing a seat belt just moving my car out of ...
0
votes
0answers
16 views

Display terminal output on lock screen

I would like to display the output of a terminal program while the program is running on lock screen. The application for this should give me the flexibility to, for example, leave top running on the ...
0
votes
0answers
34 views

Checking for ubuntu system tamper

I have requirement where i need to check if there are any unwanted files that came to OS after installation. In short, need to compare pre packed os with installed os to detect tamper. Any suggestions....
0
votes
0answers
36 views

How can I trust what I am installing? (apt,snap,etc) [duplicate]

as you may notice, I am new to Ubuntu (actually, Lubuntu). I have a question regarding security when installing software. When using Windows before, what most people do is to download a .exe, scan it ...
1
vote
0answers
45 views

Unable to sign in to Evernote account using Tusk - this browser or app may not be secure error

I am using Ubuntu 20.04 I have installed Tusk app using snapcraft sudo snap install tusk Now when I open the app after signing in it shows the error message - This browser or app may not be secure. ...
0
votes
0answers
45 views

Enable Wi-Fi Opportunistic Wireless Encryption (OWE) aka Enhanced Open in Network Manager?

The system is a Dell Latitude-7480 notebook running Ubuntu 20.10 with kernel 5.11. Wi-Fi NIC is Intel AX-210 with driver iwlwifi-ty-a0-gf-a0-59.ucode as obtained from iwlwifi-ty-59.601f3a66.0.tgz ...
0
votes
0answers
61 views

Extended Security Maintenance (ESM) for focal fossa (20.04)

I just ran ubuntu-security-status on a 20.04 installation learnt to enable ESM to get more security updates: 4667 packages installed, of which: 1962 receive package updates with LTS until 4/2025 2694 ...
2
votes
0answers
122 views

How to use WPA3 and protected managment frames with Ubuntu 20.10?

I have an Intel AX-210 in a Dell Latitude-7480 notebook running Ubuntu 20.10. I want to connect using Wi-Fi 6E, using WPA3 and protected management frames (both required in 6 GHz). driver is iwlfifi /...
0
votes
0answers
22 views

Can a Third-Party App Track my IP when I Use It?

I have Ubuntu 18.04 installed and I also have some apps on it, such as Microsoft Teams. Now, I was wondering: Can such apps, that are from "third parties", so to say, track my IP when I use ...
0
votes
0answers
30 views

Is it right that Ubuntu 20.04 arm pi4 sources are http? [duplicate]

I am using Ubuntu 20.04 on my raspberry pi 4. As I tried to upgrade, I noticed that the sources are only http. Are they the official right ones? Can someone please share the proper sources? Why doesn'...
1
vote
0answers
54 views

Putting Digital Signature on PDF in Ubuntu 20.04

Adobe Acrobat DC on windows support this feature. While snap package adobe acrobat is partially functional on linux, as it logs incompatibility message. So actually I am looking for signing my offer ...
0
votes
2answers
82 views

Is there a patch/Upgrade for Apache CVE-2020-11984? [duplicate]

There is a critical CVE for Apache HTTP server versions 2.4.32 to 2.4.44 that allows info disclosure and possible remote code execution, so you can imagine how bad this could be on a web server if ...
-2
votes
2answers
50 views

How secure are official updates by UBUNTU's Update Management?

Untill now I receive my updates on a regular basis through UBUNTU's official Update Management, as provided in the package. Being aware of threats of malware of any kind I wonder if malificent people ...
0
votes
1answer
81 views

How I can ask MySQL to use password?

How I can ask MySQL to use password for root user when MySQL starting and checking for upgrade? localhost systemd[1]: Started MariaDB 10.3.25 database server. localhost /etc/mysql/debian-start[1126]: ...
0
votes
2answers
20 views

installing internet facing snaps as root vs regular user (with sudo priviledges)

I plan to run a WeKan instance inside an LXD container on a vps which shall be accessible via internet. Is there any difference from a security point of view whether I do ... snap install wekan (as ...
1
vote
1answer
86 views

What should I do if my server is under the attack?

I have a mail server on Ubuntu 20.04. Yesterday I set up UFW firewall which looks like: root@vmi514622:~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (outgoing),...
0
votes
0answers
14 views

Error when attempting to convert png to pdf [duplicate]

I did sudo. What else needs to happen? $ sudo convert 386-x.png 386-x.pdf [sudo] password: convert-im6.q16: attempt to perform an operation not allowed by the security policy `PDF' @ error/constitute....
0
votes
0answers
14 views

how to easily get all https addresses that an application connects externally?

for those who have a firewall with highly restrictive outputs, they only need to release supposedly reliable addresses for each application, so I was wondering if there is any software or command line ...
0
votes
0answers
19 views

Ubuntu VM open to outside Network Security

I currently have a VM in my network that is accessible to all my machines inside the network. I plan on opening up ports to port forward to my VM so it will be accessible to the outside. I am going to ...
0
votes
1answer
368 views

*Error Permission denied (publickey)* Does Windows 10 Powershell Support OpenSSH Public Keys with Ubuntu 20.04

Yes I know this a Ubuntu forum.. First off all thanks for doing what you do and helping people! Alright so I've been trying to setup SSH keys on my Ubuntu 20.04, read stuff about it online. So I ...
0
votes
0answers
14 views

Vulnerabilities in Apache tomcat9 [duplicate]

Recently our scanner identified several vulnerabilities with Apache tomcat. The latest version in Ubuntu 20.04 is tomcat9 9.0.31-1ubuntu0.1 There are several CVE's that are fixed only in higher ...
0
votes
1answer
102 views

Somebody trying to access my index.php file on ubuntu apache2 server (Laravel)

One of my project someone trying to access my index.php file in laravel. Logs:- { "ip":"45.155.205.108","url":"/index.php?s=/Index/\\think\\app/invokefunction&...
1
vote
0answers
30 views

Delete ca certificate not working?

I have added a root ca in my ubuntu machine by using the following commands: mkdir /usr/local/share/ca-certificates/custom/ mv myserver.crt /usr/local/share/ca-certificates/custom/ update-ca-...
0
votes
0answers
22 views

Login Screen: Disable the password visibility toggling button

I have a default 20.04 Ubuntu install and the login screen has a password-visibility toggling button (an eye). I wish to disable this button and make the password always invisible. How can I do this? ...
0
votes
1answer
563 views

ssh public key problem: /usr/bin/ssh-copy-id: ERROR: No identities found

I have two users each with their own computers running Ubuntu. I want to remotely access one of them (say the desktop server) from the other one (say the client pc). I'm trying to enable public key ...
0
votes
0answers
22 views

Desktop is briefly shown after waking from suspend/sleep

I open or close my laptop lid to initiate a sleep/suspend or wake it. When waking the laptop, it flashes my desktop briefly before blanking the screen and then showing the login. This is a potential ...
0
votes
0answers
101 views

Encrypt a directory mounted to docker container

I have a directory on my Ubuntu 18.04 server which is mounted to the root folder of my Apache docker container. I want a way to get the entire directory encrypted by default. That means whatever data ...
1
vote
1answer
63 views

Is rkhunter still required and appropriate? Nothing seems to have been written on it since 2015. Thanks

I want to use my Ubuntu 20.10 Groovy Gorilla desktop for internet banking and making purchases. Good digital hygiene is of course the first defence but i'd like to make sure that rootkits are ...
1
vote
0answers
43 views

Some files measurement in the IMA (Integrity Measurement Architecture) does not correspond to the result generated by sha1sum command

I am using the sha1sum command to check the hash of some files and compare with the measurements stored in the IMA. However, I identified some files whose measurement in the IMA does not correspond to ...
0
votes
1answer
92 views

I am creating an Ubuntu desktop and will do internet banking. Do I need VPN and antivirus? [closed]

The machine will be used with Libreoffice and Firefox and Duckduckgo for browsing. I want to know I'm secure when accessing may bank accounts and making credit card payments. Thanks in advance for ...
1
vote
0answers
111 views

Why are my laptop sending requests to microsoft ncsi ca every 15 seconds from different ports?

so I was doing some packet sniffing using wireshark when I noticed that my laptop are consistently sending requests to www.msftncsi.com, I have no idea why this is happening all of a sudden, this is ...
0
votes
0answers
25 views

Possible security breach trough Intel ME / IPMI on Servers?

I have 2 server that I installed with Ubuntu Server and I monitor them. Suffice to say that I didn't configure the BIOSes initially. Somebody else was in charge of this operation. Let's call these ...
0
votes
1answer
160 views

What does 'pwd' mean? In context of this install script

I have an install command for a particular package contained within a folder It's a package for encryption and security Could someone explain for me exactly what 'pwd' might mean? ./install_***.sh `...
0
votes
0answers
36 views

Server Security: Turning off Root SSH and switching it over to another Sudo User Help Needed

On my Ubuntu server (a digital ocean droplet) I currently am SSH'ing in on root user. I have heard that to improve security I should turn this off and SSH from a random sudo user account I create. I ...

1
2 3 4 5
45