-4
votes
0answers
28 views

How to transform an old Notebook to a security fortress? [closed]

So finallytransforming my old Windows Pc to a real PC Targets: 1. Secure 2. Good for Coding Specs are Single-Core 2 Ghz My current List: lightweight Linux Distri??? Tor antivir? ...
0
votes
2answers
59 views

Is it possible for a root user to watch others' shell session secretly in live?

I see a similar question on stackoverflow: http://stackoverflow.com/questions/1353253/linux-terminal-how-to-capture-or-watch-other-terminal-session Someone recommends conspy. However, it seems that ...
0
votes
1answer
47 views

How to spoof the MAC on a wifi, Linux Mint 17, with NM?

I can't find a reliable way to spoof my mac. If I use the "clone MAC address" on network manager (I use Linux Mint 17, Cinnamon), I can't connect to my wifi. I tried everything, unless I remove the ...
0
votes
0answers
22 views

What is the difference between ATA Secure Erase and Security Erase? How can I ensure they worked?

I'd like to wipe a stack of drives (spinning and SSD) securely. I'm familiar with the ATA Secure Erase (SE) command via hdparm, but I'm not sure if I should use the Security Erase (SE+) command ...
0
votes
1answer
9 views

Restricted logins + almost all ports closed : secure?

Context : I plan to travel. I want to make a little cloud with my personal server. I wish I could d/l some of my files and eventually upload some files which will not be executed and the whole is ...
0
votes
1answer
28 views

what are the techniques to extract files safely? [closed]

Yesterday I was making some experiments on Slitaz. It uses multiple initrd.img's to store files/changes. I wanted to extract one of its initrd.gz images (which is a cpio archive) to a folder, ...
3
votes
2answers
84 views

Is it insecure to use a swap file that multiple systems can read?

I'm setting up a dual-boot system with Ubuntu Linux and Windows 7. Both systems are installed on an SSD, each given around 50GB. However, there is an additional internal HDD with a single ext4 ...
1
vote
0answers
15 views

How do I limit X access for potentially malicious GUI application?

Application directly accessing Xorg can not just draw some good behaving windows, but also capture input, mask windows something else (e.g. password input), lock X server and so on. How can I give an ...
0
votes
2answers
54 views

Is there a way to encrypt the files on an SSD that needs to boot unattended?

My company is developing a product that is basically a Linux PC with custom software in a fancy box. Since it uses a commercial SSD for the filesystem, I'm worried that an unscrupulous customer ...
0
votes
2answers
106 views

which unix or linux command is used to change root password of remote machine(Just an IP address) without using SSH Login

which unix or linux command is used to change root password of remote machine(Just an IP address)? Suppose I just have an IP address of the target machine which is on my network, But I do not know ...
2
votes
1answer
122 views

Debian disable su to root user

I am currently using Debian 7 (Wheezy) and I am trying to disable the su command only when the target user is root and not a privileged user. For example, let's suppose the following users exist: ...
0
votes
2answers
46 views

How to set up a highly restrictive browser? [closed]

I need to configure a machine so that users can only use it to browse the internet, and that Internet access is permitted to just a small set of whitelisted URLs. I don't need fanatic protections but ...
1
vote
2answers
168 views

How to find the hidden trojan’s file in my server [closed]

I have several web applications which are under an Apache/2.2.9 web server installed in a Linux server Distributor ID: Debian Description: Debian GNU/Linux 5.0.10 (lenny) Release: 5.0.10 ...
0
votes
1answer
103 views

Linux create limited user

I am working on a program to monitor multiple computers. The program resides on a raspberry pi and uses python to issue a reboot command over ssh to the various other Linux machines. Thinking ...
1
vote
1answer
79 views

In sysctl.conf settings, what is the difference between 'all' & 'default'?

In context of sysctl.conf settings, what is the difference between (all vs. default) like net.ipv4.conf.all.accept_source_route & net.ipv4.conf.default.accept_source_route in sysctl settings ? ...
2
votes
2answers
34 views

Linux File Protection

How can I protect my linux box from any physical access to my files and folders. When you protect your linux, a user can use LiveDVD or mount to another bootable PC and access to all content of your ...
0
votes
0answers
212 views

Debian 7.4 - Home PC security

After looking around on the Internet for a while, I've only come up with ways to help secure Debian when it comes to production servers, not home PCs. (Aside from this, anyway. I do everything the ...
0
votes
0answers
26 views

Making a tunnel VM with centos 6.5

I been thinking about this and I would like to hear from other superusers and SA... At my new job I have to access a number of servers over 20 lets say to make it easy.. I setup VirtualBox on my ...
0
votes
1answer
238 views

Secure web proxy using squid

I Recently installed squid as a web proxy, it works fine. But the problem is that connection to the proxy server is not encrypted, so it's visible to any mans in the middle by DPI (Deep Packet ...
0
votes
1answer
41 views

ubuntu infected by something from windows

when sharing some files with one of my friends who uses windows, i found a suspicious file in his pen-drive, deleted from it, but after that my trash can shows its full, deleted everything , but its ...
0
votes
1answer
39 views

Is it possible to compile together OS and web server/server apps into a single executable?

I was discussing with a friend the idea of a "single application compiled server", in which the server is compiled together only with the its dependencies into a single executable. Nothing else is on ...
-2
votes
1answer
69 views

Why can linux users see each others files?

I would have thought that basic security principles would mean that users can't see files in the home directory of other users. Many many years ago I worked on Novell servers and I seem to recall ...
106
votes
8answers
8k views

What is the danger of inserting and browsing an untrusted USB drive?

Suppose someone wants me to copy some files to their USB stick. I'm running fully-patched Windows 7 x64 with AutoRun disabled (via Group Policy). I insert the USB drive, open it in Windows Explorer ...
0
votes
1answer
59 views

Secure Apache PHP installation: Using the right user:group

i want to "perfectly" protect my apache PHP installation on a linux server. In the history, i had problems with script-virues / exploids, so it needs to be a "secure" solution. My current solution: ...
0
votes
1answer
210 views

Using minimal LXC containers as an advanced and secure chroot to isolate services

First of all I'm not a security expert, and I never used LXC before. I'm trying to harden as much as possible a Gentoo hardened server. To do so, I'm thinking to use LXC, maybe combined with KVM, to ...
3
votes
2answers
68 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
1answer
95 views

Routing traffic over Vpn without NAT?

I want to tunnel traffic through my vpn but I just realized that my kernel does not have nat enabled ;( iptables -t nat -A POSTROUTING -s 10.20.0.0/24 -o eth0 -j MASQUERADE iptables v1.4.14: can't ...
0
votes
2answers
241 views

passwordless ssh using id_dsa.pub or id_rsa.pub or identity.pub not working

I have a solaris 8 box and im trying to authenticate using no password the user george onto a solaris 11. versions of ssh: solaris8: OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f ...
0
votes
2answers
140 views

What is the difference between Linux's root privilege system vs Windows' administrator privilege system? [closed]

People say Linux is safe because system changes can only be made having root access and therefore blocks viruses or other malware from being executed. But doesn't windows administrator user system ...
1
vote
0answers
55 views

Virtualbox - Route a VM through a secure proxy

I have Virtualbox 4.3.6 running on Windows 7 Pro. I have various Linux VMs, I'd like to know if there is any way I can configure virtualbox not to use the default internet access the laptop has (work ...
0
votes
0answers
267 views

Meaning of sshd's disconnection log messages

I got a series of messages like below in /var/log/secure and I'm curious about the numbers and the messages. Received disconnect from xxx.xxx.xxx.xxx: 11: Bye Bye Received disconnect from ...
5
votes
6answers
540 views

Run user code safely

I have to mark C code and part of that involves running and timing their submissions. The problem is that their code then runs as me and they can in principle do whatever they like using my ...
1
vote
1answer
16 views

SELinux access only to opened files

I am studying SELinux. Using SELinux, can a binary be allowed to access files opened by its parent process, and no other files? If it cannot, then we should enhance it.
1
vote
3answers
90 views

Prevent unauthorized access to windows(Considering windows and bios password failures)

SYNOPSIS: Well, as almost every one knows, the first line of defense against unauthorized access to a windows computer is the windows account password. But as many of you might know, breaching it is ...
0
votes
0answers
44 views

Gameserver Hosting - Handling users and server processes including steamcmd

This question is basically about how to design a secure infrastructure for gameserver hosting. I have following theory: A single user called updater has the steamcmd in it's home directory ...
0
votes
0answers
32 views

Ubuntu: Do not show display state when resuming from hibernation

I'm using Ubuntu 13.10 saucy on my laptop. The device is set up to suspend when the lid is closed, prompting for the password when resuming. However, when I resume, the last state of the display ...
0
votes
0answers
26 views

Like a root but not quite the same

Is it possible to create a linux user group that has all other rights just like the root user, with the exception that it can only read files in /var/log folder, but can not change or delete them? Of ...
0
votes
1answer
36 views

User install package generates email

I wanted to know that is there any mechanism that when user install/uninstall any package by sudo. Its generates email and send it to the root's email address. I am using centos 6.4 and usually ...
0
votes
1answer
94 views

Securely wiping a file on a tmpfs

I have a script that decrypts some data to a tmpfs, the directory is secure (permissions), the machine's swap is encrypted (random key on boot) and when the script is done it does a 35 pass wipe ...
2
votes
2answers
469 views

Why it is not recommend to use root login in linux [duplicate]

I am a developer using Linux fedora.I seen in lot of links that it is not a good idea to use root user,because someone can easily hack my password.Instead create a separate account for development ...
0
votes
1answer
49 views

Will using the same password on windows 7 and Ubuntu make it easier to crack either?

I was just wondering if, due perhaps to different hashing methods, knowing that the password is the same for a Windows 7 and an Ubuntu system would make either system more vulnerable. The OSs are dual ...
0
votes
0answers
272 views

How to change the master password of a self encrypting ssd?

I tried to set the master password on my self encrypting Samsung SSD 840 Pro in a Dell Latitude 6400 ATG laptop (Bios Version: A34), german keyboard via sudo hdparm --user-master m ...
0
votes
2answers
116 views

Using the root account on a single-user system [closed]

On Linux systems it is widely considered a best practice using the root account only on occasions that necessitate administrative privileges, or disabling it altogether and relying solely on sudo to ...
1
vote
1answer
60 views

What kinds of protections against viruses does Linux provide out of the box for the average user?

I know others have asked this, but I have other questions related to this. In particular, I'm concerned about the damage that the virus can do the user itself (his files), not the OS in general nor ...
0
votes
1answer
801 views

How to Custom Folder Access when users Login using SFTP,SSH,SCP?

I have problem when I want to config my SSH server, I have username root and guest. I want root still can access SSH and for guest users , only can transfer file (copy and paste) some directory. in ...
0
votes
0answers
36 views

Should I install multiple network services on single VM?

I have a ESXi installed on Dell Poweredge T110 II. On this computer, I'm runing multiple VM. At the moment, there are multiple network services on multiple VMs. For example: I have DNS,VPN,Git on one, ...
1
vote
0answers
134 views

What steps can I take so that my AWS bill can never go too high in case of hacking?

Last night I received an AWS email because of the alarm I had created if my bill exceeds 50$. My month has just started and when I checked the console I saw that 600GB of data was downloaded, as my ...
-1
votes
1answer
126 views

If someone downloaded 600GB , can that be a DOS attack

Last night someone exploited some vulnerability in my site and then upload a PHP script to my images folder. I have an Amazon EC2 server with CentOS. Then the hacker downloaded 600GB and increased ...
0
votes
1answer
62 views

Troubleshooting issues on forums, how safe is it? [closed]

I was wondering if you could tell me how dangerous it might get to post (on some major Linux forums) outputs of commands like lshw, lsusb, lspci or dmesg publicly in order to solve some hardware ...
1
vote
1answer
346 views

Internet access to host behind firewall using ssh tunnel

My goal is to give host behind firewall access to the internet. Below you can find brief description of network [internet] <-> [proxy] <-> [A] <-> (firewall) <-> [B] [A] - ...