I just wonder how does the security work over here.I got no anti-virus no firewall no thing and I use Linux mint 24h/7 .I got some important stuffs in my system I'm so a fried to lose them or someone hacking me.
View 2 RepliesA couple of weeks ago I was using openvpn with a provider of PVNs on a home wifi network with no problems.I had installed openvpn using apt-get install and downloaded theopvn PVN files from the organization.erything worked fine.I would type sudo openvpn nameoffile.ovpn and then add my username and password during the installation process.However, when I try to do the same on an Ethernet network, the installation work fines (as above) and informs me that everything is connected (same as on the home Wifi network) but Firefox and all other software cannot connect to anything on the Internet.I contacted the organization who said the DNS was a problem and I needed to install resolvconf then modify each .opvn file using up /etc/openvpn/update-resolv-conf and down /etc/openvpn/update-resolv-confcauses the installation to hang because it does not like openvpn pointing to an external file.Irrespective of the problem I have with this "solution", previously I could use openvpn without modifying the .ovpn files. It just worked! I wonder if anyone knows why using the exact same configuration on an Ethernet network (which I have not used before with openvpn) is causing problems
View 4 Replies View RelatedDoes anyone know if Apparmor will work on the Ubuntu 10.04 livecd? I know there are currently issues running Apparmor on stacked filesystems with aufs. Currently a casper scripts disables Apparmor during boot up. Would be very useful if it could be run in a live session.
View 4 Replies View RelatedI work in a retail store at which there is a computer set up in the corner for customers to browse the stores website on. The problem is that that is all it will let me do. I get board, and want to do other stuff. Once windows starts, it skips the logon on screen and once loaded the only thing that can be done on the computer is browse the stores website.
However, if I unplug the computer I can while its starting up get into BIOS. So here im wondering two things. 1) If I put in the USB, boot from it, and load ubuntu (even though I will only be able to use the default programs as theres no way I would want to install it on the work computer), will I get fired? In other words, is there a way if there monitoring the computers to know what im doing or because its a different OS will I be fine. 2) Alternatively, in BIOS there is an option to disable network administration.
For this my question is the same, if I disable it, do fun stuff on the computer all day, the re-enable it before I leave is there a high change of the network administration catching on to this or no.
I'm using kubuntu-9.10-desktop-amd64.iso live (booted via grub2 loopback directly from iso on hd, in case that makes a difference). Processor is a E2180 which according to the Intel website supports the NX bit. I've enabled the option "Execute Bit Support" in the BIOS. /proc/cpuinfo shows both nx and pae in both flags lines. But dmesg says "Using x86 segment limits to approximate NX protection".
View 2 Replies View RelatedI can't seem to get htaccess to work.I've created a .htpasswd file like so:
Code:
htpasswd -c -m .htpasswd user
Then it prompts me for a password for that user. I put the password file one dir above my
[code]....
I want to boot a livecd and use fill to fill my HDD with random data to do secure deletion of files.
But im wondering. Does SFILL work on NTFS partitions?
I have an ssh tunnel with my ubuntu (vps) server. On my local computer I have proxifier, to redirect everything with socks5.
Everything works fine, I can browse websites and that. Email also works.
But when I want to visit a website that uses https it doesn't work. I do not get to see the website, or receive an internal server error.
How does network file sharing work in Ubuntu? Is it only enabled for the Public folder? Or does it vary by folder permission settings, specifically in that folder's 'Properties' and allow others access the folders?
I'm asking because someone at my work may have had a complete breach of their personal files in the /home/ directory from their folder permission settings. I want to know if regardless of everyone having access permission to the folder, if they need to drag it to the Public folder for it to be network shared.
Currently i am using the tutorial from Bodhi to setup Dansguardian to work togather with Privoxy and it worked fine.Then i installed Polipo to work with Privoxy which work as intented with additional forward the port to Privoxy.
Code:
Is it possible to run Polipo together with Privoxy? Yes. In order to get the privacy enhancements of Privoxy and much (but not all) of the performance of Polipo, you should put Polipo upstream of Privoxy.
In other words, you should:
point your web browser at Privoxy (localhost:8118);
point Privoxy at Polipo (put forward / localhost:8123 in the Privoxy config file);
use no parent proxy in Polipo.
Now i tried to use Dansguardian togather with Privoxy and Dansguardian with the same configuration but fail.
I tried updating my modsecurity core ruleset to the latest version 2.0.8 and something seems broken. I didn't change any of my configs, I just downloaded the latest ruleset archive and extracted it just like I always do, If I go back to the previous version I was using, 2.0.4. everything works fine. Has anyone else had problems with 2.0.8?
View 4 Replies View RelatedI found several instructions on how to use a live CD to reset the local admin password to blank.I download 10.10, installed chntpw, mounted the drive, and used the utility on the SAM dbase.Seems to work everytime and I write the changes and get a return code of 0.Then I reboot and the blank password doesn't work. Tried 3 times.
So I noticed that there was an "x" in the box that showed a policy that says you can't have a blank password when you 1st run chntpw. So I tried changing it to something else instead of blank.Still no go.
So I installed pam-script
made this script:
Code:
#!/bin/bash
RFID_AUTH_SUCCESS=0
#Read the card
tag=`'/etc/rfid/RFID-login'`
code....
Code:
sudo test
It doesn't ask for my password and instantly authenticates as root!
if I run the above posted script manually, (cd into the dir and execute it), it works fine and produces the result 1 if positive and 0 if negative.
I'm using Ubuntu 10.04 and for some reason, privoxy just won't start properly on startup. I see privoxy is there when I run 'ps -A', but Firefox says that it is refusing connections. When I run 'sudo /etc/init.d/privoxy restart', it restarts and everything is peachy. But for some reason, it just won't start properly on boot
View 1 Replies View RelatedOne of my friends wants to make a submission in the following Smart PDF online submission form:
[URL]
But whenever he loads the url it opens Adobe acrobat reader which I assume will bypass TOR because the form requires Javascript to be enabled. The form will not submit unless javascript is enabled.
So how can my friend submit the adobe smart pdf form with javascript enabled while still being anonymous with TOR?
If it's not possible with TOR, what other free services could my friend use?
if ubuntu netbook remix have a built-in firewall, and how does this firewall work when i install applications like Valknut? Do i have to change firewall, or does it make the changes automatically? If i need to manually change open ports in firewall, then i want a easy to understand gui, if there is one. I want to add port-ranges, with options [tcp],[udp],[both] or single ports with same options. Im looking at Guarddog, since i installed all deps for Guidedog. how Guarddog would behave with ubuntu's config?
View 9 Replies View RelatedI'm having some trouble using sudo - it did work fine, but now when I try to use it, I have the following error:
I understand that I have to modify /etc/sudoers but need to have root access to do this. I am using a bootable USB (lucid) with persistent changes and am unable to login as root, because I don't know the default root password, and am unable to use sudo to change it.
The problem occurred after I had some corruption to the casper file system, so I booted into Windows, moved the casper-rw file to another location on my flashdrive, and used a 1GB backup filesystem to repair the corrupt one using fsck.
After booting up from the restored filesystem, sudo would no longer work.
I'm trying to clean a hard drive and I'm using secure-delete but it just stands there and takes cpu power but nothing happens, I used -r switch first and nothing, so I tried it on single files, small pictures worked as intended but a simple 50MB MPG file just stands there as well and nothing happens.
I left it running for 24 hours and nothing happened but the cpu was working at 90-100% all the time :/
Any one know what's wrong? I'm using 10.04 UNR
Just leads to a list of packages. Are these taken down and installed if needed? I take it these are installed from main component right?Is this just to let people know there's a new version in main? If you didn't have "deb http://security.debian.org/ distrib/updates main", wouldn't the updates be pulled from "deb http://whatever/debian distrib main" anyway when you did an apt-get update (by logical reasoning that they'd be new?)
Or is it that you can't detect new versions directly from main and you need the updates package to point out which ones have updated versions?
will Avira AntiVir work on Fedora 15? Not that I need it, but would like to know.
View 2 Replies View RelatedI have been battling with FreeRadius with LDAP backend and Microsofts built-in supplicant. I found on some directions that the certificate you use have to have a EKU(Enhanced Key Usage) with an ODI of 1.3.6.1.5.5.7.3.1 and a Client side Cert with the same except a ODI of 1.3.6.1.5.5.7.3.2. First off, is this still the case in Windows 7/xp?If it is, how do I add that to a certificate with OpenSSL, FYI I am using the ca.cnf/server.cnf under the /etc/raddb/certs directory.Another question, has anyone got the MS Supplicant to work with Freeradius and a LDAP backend? If so can you point me in the direction of some good walk through?
View 1 Replies View Relatedif it is possible to implement rbldns or any similar thing which could work over ssl?
View 3 Replies View RelatedI recently was able to network 2 computers at home and I wanted to make my password more secure. When I try to edit my password via System>Administration>Users and Groups, it doesn't workI am able to edit my user settings. When I change my password I enter my old one and it accepts my new one. Problem is when I try to install programs, login and do other things it only accepts my old password. How can I change my password?
View 3 Replies View RelatedI like to encrypt my swap and tmp partition with /dev/urandom but it doesn't work. I tried it 100 times and now I have no idea.
Code:
cat /etc/crypttab
swap /dev/sda3 /dev/urandom swap,cipher=aes-cbc-essiv:sha256
cat /etc/fstab
/dev/mapper/swapswapswapdefaults0 0
If I reboot I get the message "/dev/mapper/swap" doesn't exist. It seems, that crypsetup doesn't setting up the encrypted block device. SElinux is in permissive mode.
I'm using a hp dualprocessor athlon 11 g42-415dx notebook pc and my wireless wont work i put the passcode in wicd program and it says bad password. So i tried the pin code on the wireless router and that didnt work so am i doing something wrong or is there something wrong with the hardware? i got the wired connection to work but cant get wireless its a little more complex.
View 1 Replies View RelatedI have some init scripts that launch some daemons that I wrote. I want Linux to generate a coredump anytime something crashes. I activated coredumps in /etc/security/limits.conf by adding the next line:
* hard core 100000 After rebooting, I run ulimit -a and I can see that coredumps are not activated: > root@computer:~# ulimit -a > core file size (blocks, -c) 0 First, I checked if there is any file script on my system that deactivates coredumps (greping ulimit -c 0 ), but I didn't find anything so far.
Then, I created a bogus c program..to double check if it's working, and I can confirm that it's not. The program is this
[Code]...
one of the coolest features of Fedora imho is sandbox -X, which I used extensively in F12. However, in F13 I yum install /usr/sbin/seunshare prints:
Code:
[...]--> Processing Dependency: policycoreutils-python = 2.0.82-13.fc13 for package: policycoreutils-sandbox-2.0.82-13.fc13.x86_64
--> Finished Dependency Resolution
Error: Package: policycoreutils-sandbox-2.0.82-13.fc13.x86_64 (fedora)
Requires: policycoreutils-python = 2.0.82-13.fc13
[Code]....
I use iptables firewall (v1.4.1) installed on FC8. I'm trying to limit the inflow traffic for the port 1723 to certain MAC addresses. To experiment with the mac option, I've written the following iptables rule:
Quote:
iptables -A INPUT -m -mac --mac-source 10:08:08:08:08:10 -j ACCEPT
It didn't work. It gave me this error message:
Quote:
iptables v1.4.1: Couldn't load match `-mac':/usr/local/libexec/xtables/libipt_-mac.so: cannot open shared object file: No such file or directory
Try `iptables -h' or 'iptables --help' for more information. Does that mean the mac module wasn't installed/enabled?
I run apache on a non standard port(82).I just installed unity to play around with it and while I was playing with it I installed prixfixe through software center to edit the menus.While prixfixe was installing my computer was acting very slow which was odd, but not completely unusual.During this time I ran ps aux which showed that my apache server was taking up most of the processing power.I was about to stop my web server,but I waited just in case the web server was updating a few things (I run ampache).
My computer finished installing the software and then I ran some command with sudo (I can't remember what the command was), but it threw back some message saying "setid blabla". I restarted my computer and when I got to my gdm my normal user account did not show up. There were no accounts and the restart/shutdown buttons didn't work.Now I'm running on a livecd and checking out my apache access logs, apache error logs,and kernel logs,but nothing looks out of place..
I am trying to use CentOS 5.4 to set up a secure laptop, largely because of it's SELinux functionality. Unfortunately I couldn't get wireless to work properly using the default NetworkManager so I installed wicd. Initially it buggered up my whole installation but after relabelling files using SEL I can now use my system again. but.. I can't use it with SELinux enabled, as it denies the required accesses for wicd to work. I also get similar SELinux denials for wpa_supplicant. A couple of snippets from /var/log/audit/audit.log -
[Code]....