0
votes
3answers
1k views
+100

Still Vulnerable with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 - What next?

The title says it all. I am still vulnerable (CVE-2014-6271 and possibly CVE-2014-7169) with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 apt-get update = nothing apt-get upgrade = nothing apt-get ...
0
votes
2answers
67 views

Is my server still vulnerable to Shell Shock?

I updated my Debian server since Shell Shock vulnerability was known. Before update, I had: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test Now, I have: ...
-1
votes
3answers
495 views

How do I build bash to patch against shellshock and test it before installing it at the root of my system?

What seems to be wrong with my code below? I'm downloading and patching up to patch 18 which I understand is the patch for shellchock vulnerability. But I still get the vulnerability when running ...
24
votes
8answers
29k views

How do I fix the shellshock security vulnerability in debian testing/jessie?

the test command x='() { :;}; echo vulnerable' bash shows that my debian jessie installation is vulnerable, even with the latest updates. Research shows that there's a patch for stable and ...
0
votes
0answers
22 views

Are there risks to auto-login/passwordless login in Linux other than physical access control?

In Linux, does auto-login/passwordless login leave the computer in exactly that same state as it would be after manually logging in, or does it create security risks of a type other than access ...
0
votes
0answers
19 views

Security Monitoring Using last Command

I am new to linux administration and was looking for a good way to get e-mail alerts when a user logs in. I was thinking this might be useful as a security monitoring tool to allow me to see who is on ...
1
vote
2answers
26 views

Do I have to export public GnuPG keys as well when exporting the private ones?

I created my GnuPG keys. They show up in my keys repository. Now I want to export my secret key and import it into another computer so I could use it on that computer (for example my laptop). Do I ...
1
vote
4answers
103 views

Avoiding users to corrupt and use a script

Is it possible to deny the right to copy files? I have a script which should be executable by others. They are also allowed to read the file (though it would not be a problem to forbid reading). But ...
0
votes
0answers
23 views

Have I misconfigured xrdp? My setup has a security hole

I'm using xrdp/Xvnc to connect to a CentOS 6.5 VM. I don't know whether I've got something wrong with my configuration or whether I've stumbled upon a security hole. My xrdp.ini file contains ...
0
votes
0answers
18 views

Unix Multi-Group Permissions

I am trying to do permissions to a folder for multiple groups, each will have different permissions to the directory. Can you let me know how to do this without editing the ACL's? Group 1 RW Group 2 ...
0
votes
0answers
27 views

Writing a secure login script

I'm trying to write a secure login script to allow a user to have limited access to a server and change particular options. My method for doing so is via a python script executed by the users ...
6
votes
5answers
194 views

Preventing malware from sniffing the sudo password

I often hear people citing sudo as one of the main barriers to malware infecting a Linux computer. The most commen argument seems to go along the lines of: Root privileges are required to modify ...
-1
votes
2answers
80 views

How to prevent hacked emails from sending out spam

I am new to this whole server admin thing ... I work for a small company, in which I am the web developer & server admin (a job I was thrown into). Please note, before taking this job I did not ...
0
votes
0answers
27 views

Creating a personal thumb drive

So the thing I want to do is to create a usb drive that contains my important personal stuff. In essence, I want to be able to have access to everything on a random (safe) linux that I go to. I may ...
0
votes
2answers
94 views

Is it possible for a root user to watch others' shell session secretly in live?

I see a similar question on stackoverflow: http://stackoverflow.com/questions/1353253/linux-terminal-how-to-capture-or-watch-other-terminal-session Someone recommends conspy. However, it seems that ...
0
votes
1answer
234 views

How to spoof the MAC on a wifi, Linux Mint 17, with NM?

I can't find a reliable way to spoof my mac. If I use the "clone MAC address" on network manager (I use Linux Mint 17, Cinnamon), I can't connect to my wifi. I tried everything, unless I remove the ...
0
votes
0answers
45 views

What is the difference between ATA Secure Erase and Security Erase? How can I ensure they worked?

I'd like to wipe a stack of drives (spinning and SSD) securely. I'm familiar with the ATA Secure Erase (SE) command via hdparm, but I'm not sure if I should use the Security Erase (SE+) command ...
0
votes
1answer
12 views

Restricted logins + almost all ports closed : secure?

Context : I plan to travel. I want to make a little cloud with my personal server. I wish I could d/l some of my files and eventually upload some files which will not be executed and the whole is ...
0
votes
1answer
31 views

what are the techniques to extract files safely? [closed]

Yesterday I was making some experiments on Slitaz. It uses multiple initrd.img's to store files/changes. I wanted to extract one of its initrd.gz images (which is a cpio archive) to a folder, ...
3
votes
2answers
101 views

Is it insecure to use a swap file that multiple systems can read?

I'm setting up a dual-boot system with Ubuntu Linux and Windows 7. Both systems are installed on an SSD, each given around 50GB. However, there is an additional internal HDD with a single ext4 ...
1
vote
0answers
19 views

How do I limit X access for potentially malicious GUI application?

Application directly accessing Xorg can not just draw some good behaving windows, but also capture input, mask windows something else (e.g. password input), lock X server and so on. How can I give an ...
0
votes
2answers
56 views

Is there a way to encrypt the files on an SSD that needs to boot unattended?

My company is developing a product that is basically a Linux PC with custom software in a fancy box. Since it uses a commercial SSD for the filesystem, I'm worried that an unscrupulous customer ...
0
votes
2answers
147 views

which unix or linux command is used to change root password of remote machine(Just an IP address) without using SSH Login

which unix or linux command is used to change root password of remote machine(Just an IP address)? Suppose I just have an IP address of the target machine which is on my network, But I do not know ...
2
votes
1answer
350 views

Debian disable su to root user

I am currently using Debian 7 (Wheezy) and I am trying to disable the su command only when the target user is root and not a privileged user. For example, let's suppose the following users exist: ...
0
votes
2answers
46 views

How to set up a highly restrictive browser? [closed]

I need to configure a machine so that users can only use it to browse the internet, and that Internet access is permitted to just a small set of whitelisted URLs. I don't need fanatic protections but ...
1
vote
2answers
290 views

How to find the hidden trojan’s file in my server [closed]

I have several web applications which are under an Apache/2.2.9 web server installed in a Linux server Distributor ID: Debian Description: Debian GNU/Linux 5.0.10 (lenny) Release: 5.0.10 ...
0
votes
1answer
218 views

Linux create limited user

I am working on a program to monitor multiple computers. The program resides on a raspberry pi and uses python to issue a reboot command over ssh to the various other Linux machines. Thinking ...
1
vote
1answer
146 views

In sysctl.conf settings, what is the difference between 'all' & 'default'?

In context of sysctl.conf settings, what is the difference between (all vs. default) like net.ipv4.conf.all.accept_source_route & net.ipv4.conf.default.accept_source_route in sysctl settings ? ...
2
votes
2answers
35 views

Linux File Protection

How can I protect my linux box from any physical access to my files and folders. When you protect your linux, a user can use LiveDVD or mount to another bootable PC and access to all content of your ...
0
votes
0answers
246 views

Debian 7.4 - Home PC security

After looking around on the Internet for a while, I've only come up with ways to help secure Debian when it comes to production servers, not home PCs. (Aside from this, anyway. I do everything the ...
0
votes
0answers
30 views

Making a tunnel VM with centos 6.5

I been thinking about this and I would like to hear from other superusers and SA... At my new job I have to access a number of servers over 20 lets say to make it easy.. I setup VirtualBox on my ...
0
votes
1answer
392 views

Secure web proxy using squid

I Recently installed squid as a web proxy, it works fine. But the problem is that connection to the proxy server is not encrypted, so it's visible to any mans in the middle by DPI (Deep Packet ...
0
votes
1answer
51 views

ubuntu infected by something from windows

when sharing some files with one of my friends who uses windows, i found a suspicious file in his pen-drive, deleted from it, but after that my trash can shows its full, deleted everything , but its ...
0
votes
1answer
39 views

Is it possible to compile together OS and web server/server apps into a single executable?

I was discussing with a friend the idea of a "single application compiled server", in which the server is compiled together only with the its dependencies into a single executable. Nothing else is on ...
-2
votes
1answer
79 views

Why can linux users see each others files?

I would have thought that basic security principles would mean that users can't see files in the home directory of other users. Many many years ago I worked on Novell servers and I seem to recall ...
109
votes
8answers
8k views

What is the danger of inserting and browsing an untrusted USB drive?

Suppose someone wants me to copy some files to their USB stick. I'm running fully-patched Windows 7 x64 with AutoRun disabled (via Group Policy). I insert the USB drive, open it in Windows Explorer ...
0
votes
1answer
65 views

Secure Apache PHP installation: Using the right user:group

i want to "perfectly" protect my apache PHP installation on a linux server. In the history, i had problems with script-virues / exploids, so it needs to be a "secure" solution. My current solution: ...
0
votes
1answer
423 views

Using minimal LXC containers as an advanced and secure chroot to isolate services

First of all I'm not a security expert, and I never used LXC before. I'm trying to harden as much as possible a Gentoo hardened server. To do so, I'm thinking to use LXC, maybe combined with KVM, to ...
3
votes
2answers
89 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
1answer
112 views

Routing traffic over Vpn without NAT?

I want to tunnel traffic through my vpn but I just realized that my kernel does not have nat enabled ;( iptables -t nat -A POSTROUTING -s 10.20.0.0/24 -o eth0 -j MASQUERADE iptables v1.4.14: can't ...
0
votes
2answers
397 views

passwordless ssh using id_dsa.pub or id_rsa.pub or identity.pub not working

I have a solaris 8 box and im trying to authenticate using no password the user george onto a solaris 11. versions of ssh: solaris8: OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f ...
0
votes
2answers
191 views

What is the difference between Linux's root privilege system vs Windows' administrator privilege system? [closed]

People say Linux is safe because system changes can only be made having root access and therefore blocks viruses or other malware from being executed. But doesn't windows administrator user system ...
1
vote
0answers
93 views

Virtualbox - Route a VM through a secure proxy

I have Virtualbox 4.3.6 running on Windows 7 Pro. I have various Linux VMs, I'd like to know if there is any way I can configure virtualbox not to use the default internet access the laptop has (work ...
0
votes
0answers
335 views

Meaning of sshd's disconnection log messages

I got a series of messages like below in /var/log/secure and I'm curious about the numbers and the messages. Received disconnect from xxx.xxx.xxx.xxx: 11: Bye Bye Received disconnect from ...
5
votes
6answers
563 views

Run user code safely

I have to mark C code and part of that involves running and timing their submissions. The problem is that their code then runs as me and they can in principle do whatever they like using my ...
1
vote
1answer
17 views

SELinux access only to opened files

I am studying SELinux. Using SELinux, can a binary be allowed to access files opened by its parent process, and no other files? If it cannot, then we should enhance it.
1
vote
3answers
97 views

Prevent unauthorized access to windows(Considering windows and bios password failures)

SYNOPSIS: Well, as almost every one knows, the first line of defense against unauthorized access to a windows computer is the windows account password. But as many of you might know, breaching it is ...
0
votes
0answers
49 views

Gameserver Hosting - Handling users and server processes including steamcmd

This question is basically about how to design a secure infrastructure for gameserver hosting. I have following theory: A single user called updater has the steamcmd in it's home directory ...
0
votes
0answers
34 views

Ubuntu: Do not show display state when resuming from hibernation

I'm using Ubuntu 13.10 saucy on my laptop. The device is set up to suspend when the lid is closed, prompting for the password when resuming. However, when I resume, the last state of the display ...
0
votes
0answers
26 views

Like a root but not quite the same

Is it possible to create a linux user group that has all other rights just like the root user, with the exception that it can only read files in /var/log folder, but can not change or delete them? Of ...