Skip to main content

Questions tagged [security]

For questions relating to application security and attacks against software. Please don't use this tag alone, that results in ambiguity. Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. If your question is not about a specific programming problem, please consider instead asking it at Information Security SE

Filter by
Sorted by
Tagged with
0 votes
1 answer
21 views

Windows - Block application on specific commandline parameters

Is it possible to block a process when it's started with specific commandline parameters? I'm looking at Applocker but it doesn't seem to have the ability. Contrived example but suppose I don't mind ...
Lieven Keersmaekers's user avatar
1 vote
0 answers
26 views

What is the reason of using `%_pkgverify_level signature` in RPM macro instead of `%_pkgverify_level all`

What is the reason for using %_pkgverify_level signature in the RPM macro instead of %_pkgverify_level all? The mitigation of CVE-2021-3445 is to set %_pkgverify_level all or %_pkgverify_level ...
Waiho's user avatar
  • 33
0 votes
0 answers
50 views

In Ubuntu server how to make an image file accessible from my server to the internet? [closed]

I have a single JPEG image that i want to be accessible to the internet from my server. I have created a folder within /var/www/ and done the chmod 644 but i keep getting access forbidden. How can i ...
Gregory C's user avatar
  • 101
0 votes
2 answers
37 views

What is the linux / ubuntu / rhel term for Syspreping an image on Windows?

In the Windows world, you can take a VM, apply all of your software and Windows updates to it then save it as a new base image in .vhd or iso format. We call this sysprep, and its great to allow you ...
FoxDeploy's user avatar
  • 213
1 vote
0 answers
34 views

How is consent recorded in Entra ID and does it ever expire?

A user may consent to permissions for an application in Entra ID, thereby authorizing the application to perform actions on behalf of the user. Furthermore, admins may consent to permissions on behalf ...
Shuzheng's user avatar
  • 439
0 votes
0 answers
18 views

How to fetch a token for MS Graph given a resource with the `User.Read` scope in its list of configured permissions using Azure CLI?

After having preauthorized the Azure CLI for an application object (resource), I often use the following command to fetch a token for the preauthorized scope(s), e.g. user_impersonation: az account ...
Shuzheng's user avatar
  • 439
0 votes
0 answers
37 views

Do I need service mesh to secure my k8s cluster communication

Many articles across the internet recommend using service mesh solutions like Istio or Linkerd to secure network communication inside a Kubernetes cluster. At the same time, popular CNI plugins like ...
Nikita K's user avatar
  • 101
0 votes
0 answers
79 views

How to create manually a KSP container object in "SafeNet Key Storage Provider"

I've a Windows PKI system running with Luna Network HSM 7 and need to use a certificate which its private key resides in the HSM and not exportable by design of the system. This cert was generated ...
Metin Ozkan's user avatar
1 vote
2 answers
320 views

Sensitivity label works in Outlook web app but not desktop app

We are currently using M365 Business Premium licence and hence are using Azure Information Protection Premium Plan 1. We created an 'Internal' sensitivity label on compliance.microsoft.com, with "...
Vishal Bakshi's user avatar
1 vote
3 answers
205 views

Why it's recommended to run Postfix in a chroot jail?

I understand that chroot allows to isolate Postfix, so if an attacker gives an access to one of a Postfix program, he cannot maliciously change something outside of the chrooted directory. Seems that ...
Ilya Ordin's user avatar
0 votes
2 answers
70 views

wpa enterprise, shared user, security

I recently started working at a company with a WPA 2 enterprise network, where multiple Devices (let's say all) share the same Radius user account. Basically the employees use the enterprise network ...
hmb's user avatar
  • 11
-1 votes
1 answer
56 views

IIS - terminate connections on server-level exceptions

I'm working on some Security Technical Instruction Guides (STIGs) and I have a new rule with the following discussion text: The web server defines a set of exceptions for every HTTP status code. Each ...
DerHaifisch's user avatar
0 votes
0 answers
20 views

Two Squid Chaining but different IP segment

Can two proxy servers be chained together, where one server has access to the internet and the other can only access internal networks? How can I configure this setup? IP addresses information: ...
Chen Siang's user avatar
1 vote
0 answers
46 views

Why does the 'commandLine' property in WMI's 'win32_Process' return null for processes run by non-administrative users?

I have created a non-admin user, and trying to get details of Win32_Process but i'm either not getting any value or incorrect value for commandLine argument. I followed below steps to create the non-...
Saumya Chattopadhyay's user avatar
0 votes
1 answer
64 views

postfix bounce_queue_lifetime and maximal_queue_lifetime

i have done a lot of research but still cannot clearly understand what is the difference between postfix bounce_queue_lifetime and maximal_queue_lifetime in main.cf. Although I've read a lot of ...
iamaduwb's user avatar
-3 votes
1 answer
149 views

Making production-ready + securing a server (Ubuntu 22.04, NodeJS, nginx)

I started working for a startup as a full stack developer. The product is a SaaS that has been developed by an external company, and they take care of the hosting as well. My boss wants the app on our ...
Sam Leurs's user avatar
  • 105
0 votes
2 answers
63 views

Why is https communication not working with iptables?

I'm trying to configure iptables for security settings. Basically, I set up a whitelist and tried to test it. I set the following settings to allow ssh, http, and https to my server by allowing input ...
john_smith's user avatar
0 votes
2 answers
54 views

OpenVPN - Properly sharing keys/certificates

I enabled OpenVPN on the router at work so that we can connect to different devices like our NAS and RDP into the computers there without opening those ports to the internet. One cause of concern that ...
Andrew Cline's user avatar
0 votes
0 answers
58 views

Create custom SELinux policy with full access

I have a process my_process which should have access to all processes, files, ports, network traffic, etc. This process needs to work with SELinux. How can I configure the appropriate policy? I tried ...
Mark Tah's user avatar
0 votes
0 answers
29 views

limit container connection on specific ip address

I just run a container on 8000:8000 my server 192.168.1.10 so if I run curl 192.168.1.10:8000 from another server (like 192.168.1.50) it will return hello-world from my API. I want to limit the ...
Mahdi's user avatar
  • 1
1 vote
1 answer
611 views

How to enable Kerberos authentication with a specific user when disabling RC4_HMAC_MD5 encryption type?

I have a problem and I hope some of you stumbled on the same problem and solved it. I have two accounts on a specific domain (let's say account A and account B). When I have RC4_HMAC_MD5 encryption ...
Triterium's user avatar
0 votes
1 answer
457 views

Windows Server - many event id 4625 authentication failures

In a small network environment, we have one Windows Server with Domain Controller, DHCP and DNS. When every non-domain Windows client connects to the network, a lot of 4625 logon failure events are ...
Fabio S's user avatar
  • 101
0 votes
1 answer
240 views

Can't stop attack on nginx server

I'm currently struggling with my Digitalocean droplet (Ubuntu 22.10) which is under some sort of attack (maybe DDOS). The server hosts a containerized application that runs on nginx. Every time I ...
Gianmarco Santi's user avatar
0 votes
1 answer
176 views

VPS https and redirect for domain

I recently bought a vps ( apache + ubuntu) and created ssl-certificates for my domain by using acme.sh --issue --dns -d example.com -d www.example.com and got them. But for my domain I want https to ...
intero's user avatar
  • 1
0 votes
1 answer
2k views

Unauthorized error when trying to get a ssl certificate with certbot

I recently bought a domain, hosting and a Ubuntu 22.04 vps, all on godaddy. The domain and hosting work, I can access the site by typing the url in. But when I try to get a ssl certificate with ...
intero's user avatar
  • 1
0 votes
0 answers
93 views

Remove old kernels with security implications / vulnerabilities

Some scanning tools (Qualsys, Sentinel, etc) detect installed old kernels and will report them as problems if those kernel versions have vulnerabilities. Is there a way to remove them if they have ...
Geoffrey Wiseman's user avatar
0 votes
0 answers
128 views

Why did my Azure virtual machine reboot amid omsagent/omi activity?

A virtual machine of mine, running RHEL8 in Azure, was down for a couple minutes. Turns out it rebooted. Telemetry and logs show no issue. There were no dnf updates and no scheduled update window. ...
Nemo's user avatar
  • 260
0 votes
1 answer
778 views

How to assign certificate to IMAP/S and SMTP/S in Exchange 2016?

Please advise me because I pull all my hair out. I have Exchange 2016 and I want to assign one officially signed-off certificate to the IMAP/S port 993/tcp and SMTP/S port 465/tcp . I went through ...
supi007's user avatar
  • 96
0 votes
0 answers
44 views

several tomcat apps running as user, using single java jdk installation owned by root

We administer server with java web applications: alfresco/solr running on tomcat. Up to now java jdk sources of same versions were extracted/copied in several directories next to each other, so ...
groovehunter's user avatar
0 votes
0 answers
37 views

Create an internal alias to external service with istio

Using istio is it possible to make an internal alias to a service outside the service mesh that was defined using a ServieEntry and control access to the external service? For example suppose I have a ...
Wanderer's user avatar
  • 133
2 votes
1 answer
497 views

FAPolicyD overhead slowing down a server

We have a server with the Alma Linux 9.3 OS. By default (as well as all current RHEL-like OSs) it has fapolicyd enabled. There is also an application server (WildFly/JBoss/Java) running on that server....
McLayn's user avatar
  • 193
0 votes
1 answer
128 views

Login prompt reports 4 failed login but the log shows only 1 entry

I just logged into my small homeserver and I saw this message: Last failed login: Sun Jan 14 17:08:42 CET 2024 from 192.168.1.111 on ssh:notty There were 4 failed login attempts since the last ...
matteo-g's user avatar
  • 103
0 votes
1 answer
320 views

How to use LAPS client for local Active Directory on an AzureAD joined laptop to request passwords for other LAPS endpoints on local AD?

I've prepared a new laptop that is AzureAD joined, and installed the LAPS client for local Active Directory. Running the LAPS client results in the message "LDAP Server is unavailable". As ...
poypoy's user avatar
  • 5
0 votes
1 answer
113 views

Why would /etc/krb5.keytab change?

A half-dozen boxes out of hundreds reported a changed /etc/krb5.keytab all within a few minutes of each other on a random Saturday. No one was logged in at the time of the changes. I have asked for ...
Chris K's user avatar
  • 15
0 votes
1 answer
460 views

Why would IT lock down SeIncreaseWorkingSetPrivilege?

Question: Why would anyone lock down the SeIncreaseWorkingSetPrivilege == Increase a process working set == https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-...
Martin's user avatar
  • 599
0 votes
0 answers
94 views

Failed to create Azure Streaming API settings with error AdvancedHunting-DeviceFileEvents_CustomCollection' is not supported

I want to export Microsoft Defender logs to a SIEM tool. I have done the following: Created a event hub namespace ns-defender Created a event hub inside the namespace eh-defender Clicked on ...
Europa's user avatar
  • 113
0 votes
0 answers
58 views

Domain registration email not in bailiwick to prevent in case of domain hijacking. How to do it without using personal email?

In the part II of the blog posts serie on Good practices for the registration and administration of domain portfolios, ICANN mentions these good practices: Don't use personal email for registration ...
jwtrees's user avatar
  • 111
0 votes
0 answers
27 views

Following Istio TCP Traffic authorization tutorial and getting 'connection rejected' instead of 'connection succeeded'

I'm following the Istio security authorization TCP Traffic tutorial. On step 5, Verify that sleep successfully communicates with tcp-echo on port 9002., I get a connection rejected result rather than ...
crudestudio's user avatar
0 votes
0 answers
95 views

GPG not decrypting PGP file in cmd line / script

Using Kleopatra / GPG4win Have keys / secrets installed. Key trust is set to ultimate, validity is full, not expired. See it listed when doing gpg --list-secret-key and gpg --list-keys, everything ...
Burell's user avatar
  • 1
0 votes
1 answer
1k views

Docker- Giving Container access to Host's CA certs

I was wondering security wise if there was anything wrong with volume mounting the host's ca certs into a container. I.e, docker run \ -v /usr/local/share/ca-certificates:/usr/local/share/ca-...
Snappawapa's user avatar
0 votes
2 answers
425 views

Windows AD getting hammered by unknown system, need to find out source

Mostly unmanaged network. Firewall at perimeter, Unifi Wifi. No other real visibility. Win SVR 2016. Event viewer shows 60k+ events of entirely event id 12294: "The SAM database was unable to ...
Codefire's user avatar
1 vote
1 answer
72 views

Which applications use .NET shared framework

We have a production server running at the premises of our client. An external security scan was performed on this server indicating the Microsoft ASP.NET Core Shared Framework has some ...
svh's user avatar
  • 23
0 votes
0 answers
102 views

How to identify which process made dns query for a particular host?

I can get logs for dns query made to a particular nameserver by auditd, but how can I get process which made dns query for a host.
SUNITA GUPTA's user avatar
0 votes
1 answer
106 views

Securing a secret key on a linux server to be consumed by a software running on the server

I'm not an expert in server security and I have a question regarding a situation where server is being compromised. I have a nodejs app which is a bot that only have https connection to read from some ...
Mostafa's user avatar
0 votes
0 answers
182 views

Inquiry regarding Security considerations for Nginx Docker image

I am currently exploring the usage of an Nginx Docker image within our project. I am seeking more information about the security considerations and best practices associated with using your Docker ...
Ramyashree's user avatar
-1 votes
1 answer
630 views

ASP.Net: Problems loading WebResource.axd

(See also IIS - Ajax Problems when migrating to Windows Server 2022 and https://stackoverflow.com/questions/77523244/ajax-problems-when-migrating-to-windows-server-2022?noredirect=1#...
Bernd Morgeneyer's user avatar
0 votes
3 answers
271 views

Is opening SMTP port with default Sendmail config safe?

My self-hosted web app (Ubuntu VPS) needs the ability to send noreply@ notifications to users when something goes wrong. I don't really need the ability to receive emails but I would like to comply ...
sashkent3's user avatar
0 votes
0 answers
404 views

JAVA UnsupportedOperationException (The Security Manager is deprecated) on Windows 10 + OpenJDK

I am using OpenJDK on Windows 10. C:\Users\divym>java -version openjdk version "1.8.0_332" OpenJDK Runtime Environment (Temurin)(build 1.8.0_332-b09) OpenJDK 64-Bit Server VM (Temurin)(...
m.divya.mohan's user avatar
0 votes
0 answers
235 views

How to get the OpenVPN *REMOTE* server version?

Getting the local openvpn client version number is easy: openvpn --version. But I am wondering how to get the server version running remotely? Thanks! I tried nc and nmap. But none of them provided me ...
faze's user avatar
  • 101
0 votes
0 answers
95 views

Security of keys while keeping my code clean

I'm using a Google Cloud function to call a 3rd party API in my application. The API key/secret will depend on the user in my application. I would like to send a request from the cloud function to my ...
Eric's user avatar
  • 113

1
2 3 4 5
139