Ubuntu Security :: File Locking Software For System?
Mar 8, 2010I need a file locking software or atleast any command for file locking
View 1 RepliesI need a file locking software or atleast any command for file locking
View 1 RepliesI installed DansGuardian. In order for it to work I set the system wide proxy. However it is really easy to get around DansGuardian by going to preference proxy setting. How do I password protect this setting so it requires a password to change proxy setting? Preferably a different password than the normal sudo password if possible. If not I at least want the sudo password protecting it! I run multiple browsers so doing it via the system rather than the browser made the most since.
View 5 Replies View RelatedI know that Ubuntu doesn't need antivirus, and a firewall isn't imperative.
I would, however, like to know what I could do to make my Lucid box a bit more secure, as I'm using it as my work system.
Ok, one more question on nameserver security. So I was reading this post and it recommended not setting a defined outgoing port for your nameserver due to the Kaminsky vulnerability.What is the proper way to lock down a nameserver, but avoid the vulnerability of only allowing incoming and outgoing requests on port 53
View 3 Replies View RelatedI first started experiencing it when I would leave my computer logged in overnight.I would come in and find the screen frozen and flickering. When I ssh'd into the machine, I could see that Xorg was using 100% of the CPU and a ton of memory. I could kill kdm, but not Xorg. Only a full reboot would cure it.When it would reboot, my second monitor sometimes would not work and it would take several reboots to get it up and running. Recently, I was working in matlab and had Xorg freeze on my numerous times...always when I had my second monitor up and running.
The card in question is an Nvidia 9800 GX 2.It almost seems like GPU0 (the one running the second monitor) is dead or dieing and is causing instability when it is up and running..but I've also heard that X running away and locking up the system is a known bug.
I'm only just starting out with the Linux ubunto 10.04 OS after yeas of wasted time on Microsoft os's,I hope I'm posting this request for help in the right forum thread, if not please accept my apologies, I have tried searching everywhere for help in installing a firmware file into the File System / lib / firmware directory and each time I get an access denied result. The file is for a DVB board and I have managed to track down the right Linux fw file for this particular piece of equipment, Could some kind helpful person either explain how to get this firmware file into the Root System directory or even send a link to another site that deals with this sort of problemI've downloaded all the programs via the Ubuntu Software Center that should be able to perform this task however all to no avail.The reason why I posted this thread in this forum board is that it (in my own personal opinion which may be wrong) seems to me to be a security problem
View 1 Replies View Relatedfirst of some specs;
kernel 2.6.35-23-generic
64 bit amd turion dual core
toshiba satellite about 6 months old
4gig ram (oddly only 3.1gig shows up :/)
ubuntu 10.10
ATI GPU
how to get it and i will get it
alright the problem is every now and then my system locks up and i try things like ctrl+alt+Fn and ctrl+alt+del and ctrl+alt+backspace but nothing works exsept when hold down the power button for a hard reset and occasionally somthing else happens that can only be comppared to a BSOD in windows but with out the blue screen it just goes to a screen with vertical grey stripes for 2 seconds ish then reboots
so i dont have the slightest idea of what it could be tho i think it could be something to do with the graphics chip maybe?
its happened quite a few times both in 10.04 and 10.10
if you want system logs i can attach them when ever
i am investigating on solutions to trace a file deletion on a computer( Linux O/S).i also need to determine weither after a file deletion or download on a computer, the computer clock had not been modified. In case a file has been downloaded on a computer and then transferred to a removable device, i need to find out the file activity. i mean i should be able to tell that the file was downloaded and transferred to a device with possible specifications.
View 2 Replies View RelatedIt's getting really annoying now. If I leave the netbook idle for like 2 mins it will lock the keyring and ask me to log back in.
Is there any way I can disable this?
At first I thought it was the daily cron jobs, but it's been at it for like 3 or 4 hours. It's driving me crazy locking up my system. I suppose I should get off the computer anyway, no real reason to be on for so long.
The only things that look weird in system monitor is kwin, virtuoso-t and X seems to be higher CPU usage than it should. And CPU usage is 20-50% when I'm not doing anything. It was indexing my files.
I am wondering if anyone has figured out how to turn off the file locking in openoffice 3.2. I have been searching the net for solutions, trying out the fixes, and as of right now I have not been able to find a way to stop the creation of lock files.
I have tried editing both /usr/bin/soffice and /usr/lib/openoffice/program/soffice as described in the links (below), but this has not helped.
Here are the relevant links I have found
[URL]
According to this thread, the method I tried (setting SAL_ENABLE_FILE_LOCKING=0) was based on earlier versions of openoffice.org It no longer works because as of openoffice.org 3 the file locking is built into the program.
[URL]
I need file locking software or command for my project
View 1 Replies View RelatedI have a situation in an office where a LAN will be installed - what I want to know is, after that, can 2 people open the same spreadsheet file, i.e. the person on the computer that it's on, as well as somebody across the LAN?
View 4 Replies View Relatedan old Compaq Presario 8000, which I reluctantly took, as I tend to end up with more computers than I use and more or less end up acting as a disposal agent. It's a 2.4Ghz machine, which will suffice for whatever I felt like installing on it.I have a generic wifi pci card with a Realtek RTL8185 chipset in it, which I never used and thought I'd set up that computer with it. Hadn't installed Slackware 13 on anything, and it's a distro I like so I went at it.Install went well, no problems there, but I've used Slackware for about 9 years so I'm readily familiar with that end o' things.
I found the rtl8180 module to be causing problems. It would load on boot, but wouldn't bring up a wireless interface. I was able to remove the module with 'rmmod rtl8180' well enough, but when I would load it again with 'modprobe rtl8180', the system would lock. Tried that a few times, same result. I ran across mention of a driver on Realtek's web site, so I downloaded and installed it. That one is identified as 'r8180'. I added 'rtl8180' to the module blacklist to prevent it from being loaded at boot, and proceeded to set up wpa_supplicant.conf for my WPA-PSK connection. Came up without a hitch.The connection is stable thus far, with a respectable link quality. The Realtek driver can be found here.I thought I might document my solution here in case someone else runs across the same issue that I experienced.I'm thinking of slapping another wireless NIC in that computer, or perhaps testing with multihoming possibly. This computer will probably end up as an AP for relaying my wireless traffic to an AP downstairs. I have one USB NIC (Alfa AWUS036S)with a 5dB antenna that has a strong signal, but the ones of more a common variety could use a little help
The setup is a central PC with XDMCP getting connections from two peripheral PCs. All PCs have normal Slackware installations (12.0 the central one, 13.1 the others). XDMCP works fine and the users login to KDE. The users have a common directory with appropriate permissions for group work.The problem is file locking. More than one users can open and work on the same file in the common directory, eg. foto editing the same jpg with GIMP.
Googling around I found that file locking is advisory in Linux, meaning its up to the applications to honour it. Also that there is a mand (mandatory locking) mount option which seems like the solution, but there are warnings [1], [2]. Other finds point to the use of versioning systems (svn, git) to take care of file locking, or network file systems (cifs, nfs): I'd prefer not to burden casual users with having to come to terms with a versioning system, and the network file systems seem wrong since the users work locally.
Considering Linux is a multiuser OS I am taken aback from this apparent lack of file locking support and tend to think missing something obvious.Has anyoneexperienced/solved a similar setup?A couple of last points. The common directory is on a normal mount (ext3, RAID1), fstab entry:
Code:
/dev/md0 /data ext3 defaults 1 2
And I'm aware of options like TSLP, but I'd rather resolve the issue generically.
[code]....
I was reading a website about securely wiping data from your hard drive with wipe on the right click menu, when I stumbled across part of the article where it talked about journaling filesystems.Article
Quote:
There are three types of journaling: journal, ordered and writeback. Using shred, with an ext3 file system presents the user with the problem of secure deletion because it can only really be effectively used with ordered and writeback journals. It also lists ext4 as a journaling file system in the article, so I looked up the wikipedia page on it and I also found this:
Delayed allocationExt4 uses a filesystem performance technique called allocate-on-flush, also known as delayed allocation. It consists of delaying block allocation until the data is going to be written to the disk, unlike some other file systems, which may allocate the necessary blocks before that step. This improves performance and reduces fragmentation by improving block allocation decisions based on the actual file size. So I am confused about this delayed allocation thing. My thoughts are that ext3 and other journaling filesystems are bad to use with secure wipe when they are set on journal mode because that writes the file to the journaling sector as well as to the hard drive. Apparently, in ext3, the default was ordered mode. I would like to know if anyone has any idea if the ext4 file system on karmic 64bit is hazardous to the security of using the wipe command.
Does anyone know of sfill can be used on a NTFS file system?
View 3 Replies View RelatedI have a 500 gb external hard drive with tons of personal files on it. Other people at home just grab my hard drive whenever they need to transfer files. I feel so disrespected. I also want to protect myself from actually losing my hard drive to a stranger who will compromise my data.
I'm thinking of encrypting, but I'm currently too busy to explore (the options seem to be hard to use) and it seems to be too much to encrypt a 500gb hard drive
What are my options in "locking" my hard drive. I don't mind if it's going to be readable only on Ubuntu. That could actually be a plus
[URL]
We have the same problem but tried his solution to no avail.
Doing a shh would give me an error..
Quote:
usr/bin/xauth: timeout in locking authority file /var/www/html/felipe/.XauthorityServer sent command exit status 1
When I change SElinux to permissive from enforcing I can login but turning back to enforcing, the problem comes back. I did the following...
Quote:
[felipe@nimitz ~]$ ls -Z .Xauthority
-rw-------. felipe felipe unconfined_ubject_r:httpd_sys_content_t:s0 .Xauthority
[felipe@nimitz ~]$ ls -lZd
drwxr-xr-x. felipe apache system_ubject_r:httpd_sys_content_t:s0 .
[felipe@nimitz ~]$ ps -eZ|grep sshd
[code]....
I tried to create a new user with the default directory in /home and it work fine.
I just found that I could perform write operation using a normal user account to a file system I mounted with the commands as followed:
sudo mount -t ntfs /dev/sda1 /mnt/disk/
This is the corresponding entry in the output of "mount" command:
/dev/sda1 on /mnt/disk type fuseblk (rw,nosuid,nodev,allow_other,blksize=4096)
As far as I remember, when using a normal user account, I had to use "sudo" to perform any write operations (mkdir, rm, etc) to a device mounted using "sudo". But now it seems to be changed.
Do I remember wrong, or did Karmic have any updates change this setting? (I never manually changed user settings, except that I added a root user, but I never used it.)
OS: Karmic(up2dated)
Kernel: Linux stephen-laptop 2.6.31-17-generic #54-Ubuntu SMP Thu Dec 10 16:20:31 UTC 2009 i686 GNU/Linux
I have some very confidental files on my computer that I store such as credit reports, and other things. I always encrypt them with GPG, but there still is that original non-encrypted file left that needs to be deleted. I looked into tools like wipe, and shred but they all say that it really doesn't help on journaling filesystems directly on their man page.
I am not asking how to wipe the whole drive with dd or anything, but I am simply asking if there is a tool that'll delete a single file securely.
What methods exits to restrict which directories a user may browse on the filesystem. I want to prevent php scripts from being able to view system files. I've seen two solutions, but neither are satisfactory:Chrooting a directory that the script is in, but this requires that all the necessary php libraries/files are moved/copied into the right place relative to the chroot directory. I don't feel that I have the technical ability to achieve this.Putting php into safe mode and disabling *nasty* php functions. But this is ineffective if just one obscure *bad* php function is missed.
View 5 Replies View RelatedI agree deleting .Xauthority files work, but thats not a good solution. I mean, everytime I have to run any X forwarding application I have to delete the .Xauthority file. Here is my scenarioThe applications that I want to run are on Linux Server [NFS] and the client machines [CIFS] that are having problem in locking theXauthority files are Macs which share the same domain as that of client solaris machine. i.e. The home directory of particular user on Solaris & the home directory of that user on Mac have same contents.When I ssh -X from Solaris to the server, everything works fine, no error messages.When I ssh -X from MACs to the server, I get the following warning messages.
Code:
/usr/X/bin/xauth: error in locking authority file /home/user/.Xauthority
/usr/X/bin/xauth is the path on the server. If I try to break the lock by sudo
[code]....
I run a compute cluster with only a few users. Occasionally a user will accidently run a job on the master node that runs out RAM/swaps then hanges up for a while.In /etc/security/limits.conf I have set memlock to 7.5GB (master has 8GB RAM) and maybe that is what lets the machine come back rather than hanging completely? Is this the right setting to physocally limit a single user from asking for more RAM than the system has and bringing down the system? Should I set this to 2GB or so or is there something else I can do??
View 4 Replies View RelatedI am still probably of the windows mindset when it comes to security. I ran rootkit this morning and received the following error messages;
[09:43:49] /usr/sbin/unhide [ Warning ]
[09:43:49] Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file.
09:43:49] /usr/sbin/unhide-linux26 [ Warning ]
[code]....
This might sound really stupid, so you'll all have to excuse my lacking knowledge. I read that USB attacks get more and more common, like putting in an USB stick with a malicious autorun script on it, and it's game over. Can AppArmor protect devices and limit their access to the file system?
View 5 Replies View RelatedI am interested in making the root file system is read-only. I've moved /var and /tmp file systems to another partitions. There are two files in the /etc directory that need to be writable.
These are:
I've moved this files to /var and linked it. I've added command to the /etc/rc.d/rc.local file:
That's it. Are there other solutions to make the root file system is read-only?
I want encrypt my fedora file system.
How to i can encrypt ext3 or ext4 file system.
I plan to use newsbeuter for console RSS reading.This program has a config text file where I need to store my Google account password,in order to access my Google reader.I don't feel easy at making my password readable to everyone.Is there anyway I can somehow encrypt this information ?
View 1 Replies View RelatedI recently installed Fedora 11 64bit and I am curious about encrypting my entire file system for security purposes. I've been on Google for a while now and I keep finding info on how to encrypt a specific folder or home directories but nothing on the entire file system (or I'm missing something big here). It's hard for me to imagine that it isn't. If so, do I need to encrypt the partition my file system is on before installing it? What software should I use? There seems to be so many, it's difficult to keep them all straight.
View 5 Replies View Related