Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

5
votes
0answers
981 views

OpenJDK, IcedTea security settings

I am a beginner Linux user. From my knowledge the system uses OpenJDK and IcedTea only when I connect to a SAP IDES server through SAP GUI JAVA adding a string in it to connect to that server. I use ...
5
votes
0answers
1k views

Is there a guide for using GRSecurity and Precisew/ PAX?

I'd like to know if there is a guide of some kind for (successfully) configuring, compiling and installing GRSecurity w/PAX etc. in Precise? I basically am trying to build my own custom release ...
3
votes
0answers
648 views

Allow a regular user to mount VeraCrypt volume without admin privileges

A regular user is unable to mount a VeraCrypt volume without first authenticating with an administrator password. According to the original TrueCrypt documentation, the workaround is to give the user ...
3
votes
0answers
98 views

Someone is logged in to my private computer as root

Sometimes when I shot down I get this message: Other users are logged in. - root (console) Now, it's my private computer and no one is allowed to connect to it. Has my security been compromised? ...
3
votes
0answers
438 views

2 factor authentication using a USB drive

I want to set up 2 factor authentication using a usb stick/drive. I'm using Ubuntu 16.04 and it seems that libpam and pamusb no longer work for this version. I don't want to use google authenticator, ...
3
votes
0answers
73 views

Folder Access Log?

Most of the work I do is in a computer running ubuntu that I access via SSH, which is administered by a colleague of mine. Some of the data I have in a folder is somewhat sensitive and I would like to ...
3
votes
0answers
357 views

Postfix Outgoing Email Authentication

I have a VPS that I'm using as a webserver and an email server. I have an issue with postfix. It's not asking for a password on outgoing email from an unauthorized domain. This is a telnet call from ...
3
votes
0answers
442 views

Is my Ubuntu Desktop under attack?

I am currently facing random freeze of my Ubuntu(16.04) desktop and screen fills up with the garbage pixels. I even cannot start command line using Ctrl-Shift-F1. Every time I have to manually do the ...
3
votes
0answers
425 views

After editing root .bashrc Unable to login even with tty1-6 and drop to prompt command from recovery mod

I have had the worse two weeks started with Ubuntu 12.04 , and updating to 14.04 had problem , just after a good luck of successfully installing brand new ubuntu 14.04 I now got the nightmare again ...
3
votes
0answers
727 views

Does Ubuntu store passwords from failed login attempts?

This is probably a stupid question, but if I type in an incorrect password while attempting to log into my account, does that password get stored anywhere? Assuming that I don't have any third-party ...
3
votes
0answers
652 views

Problem using 'ecryptfs-unwrap-passphrase'

I have 2 laptops running Ubuntu 14.04. 1> The Toshiba supplies the mount passphrase when I run 'ecryptfs-unwrap-passphrase' 2> When I run 'ecryptfs-unwrap-passphrase' the HP does not supply ...
3
votes
0answers
388 views

How to disable mpm-itk for a specific virtualhost?

I've a main site on a server that needs to run a sudo command which I white listed via visudo. That worked fine until I installed apache-mpm-itk and then I started getting the following error: sudo: ...
3
votes
0answers
720 views

How can I use a Verbatim Secure'n'Go USB key?

I have purchased a 4Gb USB key from Verbatim. How can I use it under Ubuntu? I do not need the "secure data" feature, and have still not saved anything on it, so formatting at low level would be OK. ...
3
votes
0answers
87 views

How to auto restart services when you get security updates?

That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected ...
3
votes
0answers
664 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
3
votes
0answers
981 views

Why does network manager automatically choose WEP over WPA & WPA2?

I am on Ubuntu 12.10 and for some reason my wireless connection is using WEP when it is set to use WPA/WPA2 Personal. Also I should mention that I used to be on 12.04 and was experiencing the ...
2
votes
0answers
25 views

How do I restrict the number of user-logins per day?

is it possible to allow a user to login (to his ubuntu-account) only one time per day? Thank you!
2
votes
0answers
51 views

Can VeraCrypt be made available for users securely on a server?

I have VeraCrypt installed on a server and want to think about making it available to users on the server to make encrypted files in their home directories. What are the security vulnerabilities to ...
2
votes
0answers
432 views

How can I prevent Anbox apps from accessing my files?

Here Anbox install problem @karel said: WhatsApp also asks if you want to give the app permission to access the files on your device which is another security risk in my opinion. I think it's OK ...
2
votes
0answers
718 views

How to change the kernel in the ubuntu live installer?

I'm having a SSD problem which was fixed in a new kernel, so I need to use this kernel to install Ubuntu. Without this custom kernel the installation fails 90% of the time I try to install Ubuntu, ...
2
votes
0answers
386 views

Google account security

I use Ubuntu 17.10 and recently received a warning from Google that: Some apps & devices use less secure sign-in technology, which could make your account vulnerable. Google recommends ...
2
votes
0answers
46 views

Wine: is my system secure to use again?

I installed wine latest version ,on my 16.04 .then I installed an untrusted exe which could have been a virus as it might have caused the registry error on my windows 10 earlier today So I uninstalled ...
2
votes
0answers
59 views

Set system to shutdown, if inccorrect login credentials entered

Many threads exist on the web, with people wanting an auto-destruct feature, if an incorrect password is entered when unlocking their disk. What I want, however, is simply for the system to shut-down, ...
2
votes
0answers
328 views

Lock screen never requires password - 16.04

My screen will dim and suspend normally but never requires a password when coming back on. I have attempted the shortcuts: Ctrl+Alt+l as well as Super+l with the same result; I have also tried ...
2
votes
0answers
40 views

How does Libreoffice store remembered passwords for network shares?

I'm opening files from a remote network share in Libreoffice. I have to enter my password in the following dialog: There's the option "Remember password". If I used that option, where would the ...
2
votes
0answers
99 views

Is there a USN RSS feed specifically for 14.04 LTS?

http://www.ubuntu.com/usn/ links to RSS (and Atom) feeds of all USNs (Ubuntu Security Notices). I'd love an RSS feed of only security updates to Ubuntu 14.04 LTS. Anyone know if someone has already ...
2
votes
0answers
939 views

i3wm screen locking security issue

I am using i3-wm on Ubuntu 16.04. I am locking the screen using dm-tool lock, and it looks good, but I noticed you can circumvent the lock screen by switching a TTY (Ctrl+Alt+F1) and then switching ...
2
votes
0answers
339 views

Skip sign verification at module loading

With secure boot enabled, is there a way to load a custom kernel module not signed, or signed with an auto-generated private key? Trying to load my custom module, insmod exits with the error Required ...
2
votes
0answers
515 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
2
votes
0answers
61 views

Files created in Ubuntu are given permissions to “Everyone” in Windows by default

I switch between Ubuntu and Windows7 workstations. I created a new text file in Ubuntu with some passwords and logins. Saved the file on an external drive. Now in Windows when I select the file the ...
2
votes
0answers
92 views

Is there a deadman's switch feature in Ubuntu?

Is there a function in Ubuntu or that can be added that would create a deadman's switch? In effect, I would like to have a feature that, when I'm working on a specific sensitive file, periodically ...
2
votes
0answers
239 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
2
votes
0answers
510 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
2
votes
0answers
277 views

Fingerprint reader malfunction HP dv7

I have an HP Pavilion dv7 with a Validity VFS301 Fingerprint reader. I have tried multiple fingerprint reading software, including Fprint, but all of them give the same problem: It registers that ...
2
votes
0answers
54 views

How to prevent accidental unlocking?

I have a machine at work running tmux and xmonad that I lock with slock. I frequently need to ssh into it from a remote location, and, based on testing this in person, accidentally killing the slock ...
2
votes
0answers
278 views

Tiger: `rtm` is listening on socket XXXX

On my Ubuntu serve 12.04 LTS, Tiger is reporting a lot of stuffs like this: OLD: --WARN-- [lin002i] The process `rtm' is listening on socket 60404 (UDP) on every interface. NEW: --WARN-- [lin002i] ...
2
votes
0answers
396 views

Upgrade Apache 2.22 to a version that supports ECDHE

I'm trying to setup my Ubuntu 12.04 server installation to support perfect forward security. It seems that the default Apache 2.2.22 build does not support ECDHE. Any suggestions on a good way to ...
2
votes
0answers
4k views

Private key not found

I have tried to generate server certificate for apache2 earlier.... I have noticed one error in apache server. Which means that Apache can't find the private key component of new SSL certificate. Now ...
2
votes
0answers
145 views

How can I configure sudo to prompt for password and show the executed command?

The title says it all. How can I configure sudo to prompt for password and show the executed command? Rationale: if something gets aliased in the shell or I end up executing a function sudo instead ...
2
votes
0answers
309 views

Prevent that TrueCrypt gets Administrator rights

If I try to open a TrueCrypt drive, TrueCrypt asks me for my administrator-password (also when I am a normal user). I know, that i can prevent this password-asking by editing the sudoers file = giving ...
2
votes
0answers
3k views

Unable to fork: Cannot allocate memory

frequently getting 'fork: Cannot allocate memory' when running commands over ssh. I have 64Gb of RAM and usually 1~2Gb free. swap is more than 8gb free Ubuntu version:"Ubuntu 12.04.2 LTS" Desktop ...
2
votes
0answers
869 views

How can I check the checksum of an installed deb package against the same package in the repository?

Suppose someone got root access to my machine and replaced some files, e.g. Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable Warning: ...
2
votes
0answers
67 views

Why do I see a screen showing all text I typed during the session on logging out?

When I log off of Ubuntu 12.10, a screen appears shortly with all the text I typed during the session, including passwords and such. Is this supposed to happen? [update] The screen is fullscreen ...
1
vote
0answers
19 views

Safest practice for installing software with potential malware

For a project I have been contracted to work on a collaborating Chinese programmer has provided some software to simplify some tasks. I am unaware whether this software package contains malware or ...
1
vote
0answers
324 views

Brave browser error: unsupported command-line flag

I am getting this error message "You are using an unsupported command-line flag: --no-sandbox. Security will suffer." How can i correct this error? This is on Ubuntu 18.04.1 LTS edit: I found ...
1
vote
0answers
53 views

Setting up Steam on Kubuntu 18.10 to a non-/home folder?

Please tell me: is there any known way to install Steam to a NON-/home folder, WITHOUT needing to resort to moving things later post-install, and making symbolic links? So far the only solution i ...
1
vote
0answers
35 views

LDAPS with snap install of nextcloud on 18.04

Installed nextcloud on 18.04 with sudo snap install nextcloud Is there any way to get nextcloud to use a private cert to use LDAPS instead of just LDAP ?
1
vote
0answers
77 views

Is there a way to disable all connecting storage devices via usb in Ubuntu 18.04?

I am currently trying to secure a desktop and was able to disable almost all of the connecting usb flashdrive by disabling usb ports in bios and by: sudo -s enter password chmod 000 /media/ But Ive ...
1
vote
0answers
202 views

Ubuntu desktop, wildcard nofile not working

I've tried setting the file limit to 32000 on ubuntu desktop for normal users by adding the following lines: * soft nofile 32000 * hard nofile 32000 To: /etc/security/limits.conf But, even after ...
1
vote
0answers
47 views

Enforce a password complexity policy on login?

I am using LDAP and PAM modules. I know it is possible to enforce user password complexity when changing user password, by using pam_cracklib.so in common-password file. What interests me - is it ...