Securing Linux systems and applications; understanding Linux security features.

learn more… | top users | synonyms

4
votes
2answers
48 views

Is it a good practice to use certificates as a mean of client identification in a cloud environment

My software system is running a cloud infrastructure where having Linux machines VPN into OpenVPN gateway is a setup requirement. Also, there may be cases when software on the aforementioned Linux ...
4
votes
3answers
2k views

Is Linux spying on its users? [closed]

If you install some kind of Linux distributions on your computer, is their a possibility that their owners may spy on you? For example, can Ubuntu, Kali or Arch linux send data to its owners on what ...
0
votes
0answers
20 views

Get data file off critical database host

Re-wording this question to hopefully be more understandable. Thanks for the feedback. We have a data warehouse which sits in our production environment. Our data engineers can get to the host via ...
0
votes
0answers
7 views

With nmap and awk, displaying any http ports with the host's ip [migrated]

I scanned around 50 hosts on a network with this command: nmap -sV -iL sweep_ips.txt -oG result.txt ex: ... Host: 192.168.x.x () Ports: 8000/open/tcp//http//Apache httpd 2.2.3 ((CentOS))/ ...
2
votes
1answer
84 views

Are encryption keys wiped from RAM before hibernate, or how to do it (Luks and Truecrypt)

Using Linux, I have system and swap/hibernation partitions encrypted with LUKS, and data partitions encrypted with Truecrypt, and I am wondering when I put my laptop to hibernation if the encryption ...
-5
votes
1answer
81 views

Time-based password change [closed]

I have created this script and it runs great, but important questions remain. Is this script useful and secure? Does it have any possible problem or weakness? root@010010:/# ls -la ...
0
votes
0answers
7 views

change login time/date on Linux [migrated]

Is it possible to 'backdate' a login time on a Linux server by changing the date? For example, I just ran lastlog on one of my servers and included in the expected records was this: root ...
3
votes
1answer
191 views

Can BIOS firmware log keyboard input? If so, is there any way to detect and prevent it?

Recently I purchased a server board made by Lenovo with a "Intel Management Engine" inside BIOS. It is said that it is able to intercept and redirect keyboard input, even if an operating system is ...
1
vote
0answers
23 views

How use snort with local.rules in offline mode?

I'm using SecurityOnion distro and I would to run snort on my pcap files. Is there a way to specify just one rule? I couldn't understand whether local.rules is used. How can I show only the result ...
5
votes
1answer
49 views

How to secure a local socket?

I have made a service written in c that runs on the Android operating system as a core service. I have a few Android apps which communicate with this service via a socket connection (Java -> C). My ...
4
votes
1answer
142 views

What are the mitigating factors for CVE-2015-5364?

CVE-2015-5364 describes a UDP based DoS vulnerability in the Linux kernel that can be used to deny processing cycles to the host operating system and its applications. ...
8
votes
2answers
155 views

Are there ransomware infections of Ubuntu Linux in the wild?

Due to the recent media coverage of ransomware attacks several people for whom I've provided personal computer support in the past have expressed concerned. The majority of these people are running ...
-1
votes
0answers
10 views

Installing kali on usb with early 2015 macbook pro [migrated]

I've tried a fee different ways to install but none work. I used the mac linux usb loader but I got an error "(unable to find a medium containing a libe file system). I also used the ...
7
votes
2answers
72 views

Why does Android use SELinux?

To restrict/sandbox processes Android uses SELinux. Why was that chosen and not the linux capabilities or cgroups+namespaces solution? After all the cgroups+namespaces is kind of home grown for them ...
0
votes
1answer
111 views

What is a Truecrypt alternative with deniable encryption for linux? [closed]

Preferably an alternative that is Free Liberating Open-Source Software/ FLOSS. I would have used Truecrypt, but it has been discontinued.
-5
votes
0answers
26 views

generating wordlist + a random digit

Can the Crunch software be used to read word list from a text file and append a random digit at the end of each word?
3
votes
2answers
167 views

How secure is loging into internet banking via an https library?

My bank does not have an API so I want my server to log in and check incoming payments to notify me if a client has paid or not. I would like the server to log in and scrape using Beautifulsoup and ...
2
votes
1answer
72 views

PPP over SSH - is this correct?

I see a lot of talk online about whipping up a VPN connection using PPP over SSH. This term confuses me, as SSH is an app tier protocol and PPP operates on the data-link layer. So, my question is: ...
97
votes
7answers
14k views

Are there technical differences which make Linux less vulnerable to virus than Windows?

What makes Linux so different than Windows in terms of anti-virus needs? My question is not if I should get an anti-virus for my Linux. I perfectly understand why an AV is important. I would like ...
3
votes
1answer
46 views

Unauthorized file writes on Linux

Suppose my web browser or any other web-connected app has a minor security hole that won't allow an attacker to run code but will allow them to write a piece of text into a text file I own. On a ...
0
votes
0answers
8 views

What is the correct mask to use with 224.0.0.0? [migrated]

What is the best mask to use to allow computers to use the multicast IP address 224.0.0.0? I've only seen IP addresses using the lower 8 bits, in my case I just see 22 and 251. So my firewall uses ...
2
votes
0answers
16 views

Is XSP suitable for Internet facing, production hosts? (either self hosted, as an Apache plugin, or FastCGI)

XSP is portable version of ASP.NET that allows for operation on OSX, Linux, and Windows. It's an alternative to IIS, and hosts its own web server, or can plug into existing web servers such as ...
6
votes
1answer
61 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
2
votes
1answer
85 views

Diffie Hellman parameters still calculating after 24 hours

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa with OpenSSL 1.0.2d to generate initial keys and certificates. All went fine until I ran ...
7
votes
2answers
4k views

Do these regex show that I was hacked?

What do these regex commands mean? I found them when I ran the history command: grep --include=\*.php -rnw . -e "update.creditcard" grep --include=\*.php -rnw . -e "e41e" grep --include=\*.php -rnw . ...
1
vote
0answers
48 views

Can high network usage be detected and prevented in Tor? [closed]

I've already asked this question here but as of yet it has no views/answers. I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using ...
3
votes
1answer
76 views

Is installing Debian package safe?

If I understand correctly, the maintainer scripts in Debian packages are executed with root privileges. I assume that this means that, contrary to my expectation, installing a malicious package can ...
0
votes
0answers
22 views

Can PHP sockets and HTTP requests be logged? [migrated]

I would like to be able to log outgoing HTTP requests from PHP scripts with the time and PHP script location and line. It occurs to me that since you apparently can open sockets in PHP, you would also ...
3
votes
1answer
102 views

Decryption using GRUB and TPM

I'm trying to plan security routine for my new Linux install and few questions came up during searching for solution which meet my needs. Is it possible to use private key from TPM in GRUB to ...
16
votes
8answers
1k views

Is it possible to prevent a file type from being determined in a Linux system?

I have several files on my Ubuntu system, which are LUKS encrypted partitions. For my own shame up to this day I thought that simply changing binary file's extension will be enough to hide what a file ...
1
vote
3answers
90 views

Protecting Uploaded Confidential Files [closed]

We have a web application in Linux (App A) using PHP and Zend and another in Windows using Asp.net C# (App B). They both access the same database. App B is for internal use only while App A can be ...
1
vote
1answer
77 views

Securely hide a directory from the OS using java?

I have a project to do for my master's degree and I need to do a Java app which loads a file (read some attributes and copy the file to a working directory), basically any file, and make the working ...
1
vote
2answers
49 views

Detect SSH InBound / Oubound Connections

I'm noodling with the idea of managing SSH connections on Linux server using a program (not sure what it will be written in yet) that monitors inbound and outbound connections. Is there a way to ...
2
votes
1answer
48 views

Is it possible to use obtained wildcard certificate on more than one server?

We are using two Debian servers in our company (with apache 2 as httpd) and our services are split between those two of them. One server has the website, the other has some minor sites under ...
-4
votes
1answer
482 views

Kali Linux Veil-Evasion install problem [closed]

I can't install Veil-Evasion. I have this error: Installing (Wine) i386 Binaries Reading package lists... Building dependency tree... Reading state information... Package wine-bin:i386 is ...
16
votes
3answers
819 views

ISO27001 and Linux/Ubuntu

My company has an ISO 27001 certification. They provided me a new laptop with Windows 8 OS in it. I asked if I can have a Linux/Ubuntu OS installed, they said that it is not possible due to the ISO ...
1
vote
0answers
63 views

Why use oddly compiled ELF files for Linux malware?

I ran file on some Linux malware ELF files that I've acquired over the last couple of years. I noticed some oddities: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for ...
2
votes
2answers
112 views

Is writing to /dev/null secure?

I am working on a web-service based crypto project in JAVA. The basic idea is for the client to send a SOAP request to a servlet to encrypt data. For data transmission I am using MIME/data-handlers ...
2
votes
1answer
92 views

Anti-live forensic programs

Against dead forensics acquisition we can use disk encryption (we can use TrueCrypt for example). I was wondering do software exists against live forensic ? Can you give me a list for windows and ...
1
vote
0answers
69 views

Volatility Framework 2.4 - No suitable address space mapping found [closed]

I made some dumps with different formats (.DMP and some file made by LiveKD utility) in Windows 8.1 x64 OS. The first one is a explorer.exe dump file which was created by TaskManager->Create Dump File ...
0
votes
0answers
38 views

Strange SECCOMP entries for sshd in audit log

I've posted this over at ServerFault but haven't received a response over there. I'm not a security professional, but I'm curious as to what kind of attack this might be and how the attackers might be ...
2
votes
1answer
153 views

Dump linux password in clear text

Is it possible to dump a Linux password in clear text format? In Windows it is possible to do so using "Windows Credential Editor".
1
vote
1answer
42 views

RDRAND in Intel Celeron CPUs under Linux

Is there any reason to believe that the hardware RNG in an Intel Celeron CPU is more unreliable than in other CPUs? Can someone confirm that what Linus Torvalds says is true, namely that Linux does ...
0
votes
0answers
87 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
2
votes
2answers
70 views

How to overwrite ebp on stack alignment?

I want to exploit a simple program #include <stdio.h> #include <string.h> int main(int argc, char** argv) { char buf[128]; strcpy(buf, argv[1]); return 0; } The disassembly ...
0
votes
0answers
17 views

At OpenSSH ssh server side key files has 0 data. I would like to know the reason for it

I am using the Monta Vista Linux. In this recently i have observed the ssh keys files has 0 data due to which the keys were not generating and i am not able to login to machine via ssh because of key ...
4
votes
1answer
83 views

Desktop Flickers Past Lock Screen

I'm using Fedora 22 with Gnome 3. I have a password set for my user account, so when my laptop awakens from sleep, I am presented with the lock screen and must enter my password before getting to my ...
6
votes
1answer
165 views

Does the new Fedora package manager allow unauthorized installations?

I just upgraded to Fedora 22. The biggest change from the previous version is that the yum package manager is now replaced with dnf. One change I've noticed is that if you try to execute a command ...
1
vote
0answers
25 views

Linux PAX, execute and write permissions

I would like to know what happens when a section of a program is compiled with both execute and write permissions and PAX is enabled on the system? Is the program successfully loaded? Is the section ...
2
votes
2answers
51 views

Are there any dangers in sharing ifconfig information publicly?

If I were to share my ifconfig information from Linux publicly, is there any possible danger associated with this action?