Collaborate Disseminate
If I am not wrong, Ubuntu 24.04.01 LTS has the "dirname" linux binary in a suid bit file with relative path, not absolute (which is a security issue due to that a user can change his "PATH" variable to use an own "… Continue reading relative path in suid binary – what prevents a local privilege escalation?
I’m trying to understand SUID privilege escalation and I’m trying to recreate some issues.
But both all my scripts and binaries drop the SUID-Bit and get executed with the user with which I’m executing the them.
Therefore my question how c… Continue reading Ubuntu 24.04 and SUID
Canonical released Ubuntu 24.10 Oracular Oriole, which brings notable advancements, including an updated kernel, new toolchains, and the GNOME 47 desktop environment, along with significant enhancements in software security. “Oracular Oriole sets a new… Continue reading Ubuntu 24.10 Oracular Oriole brings tighter security controls
Ubuntu 24.10 ‘Oracular Oriole’, the latest version of the popular Linux distro, introduces several enhancements including a revamped GNOME Initial Setup for ARM64 devices, updated file management features, and a more seamless experience with dialog box… Continue reading Ubuntu 24.10 ‘Oracular Oriole’ Released, Celebrating 20 Years of Ubuntu
Canonical today announced the immediate availability of Ubuntu 24.10 Oracular Oriole, the latest release of its Linux distribution.
The post Canonical Celebrates 20 Years of Ubuntu with 24.10 Release appeared first on Thurrott.com.
Continue reading Canonical Celebrates 20 Years of Ubuntu with 24.10 Release
Considering T-Pot System Placement
Which are the commands to configure Ubuntu firewall from the terminal, in order for the T-pot to work properly.
Continue reading commands to setup Ubuntu firewall rules from the terminal for T-Pot
Ubuntu and its flavors (Lubuntu, etc.) now have a Pro feature (free for personal use) that provide security patches for basically all common software (over 20,000 packages), for several years in long-term support releases.
I’m not sure how… Continue reading Ubuntu Pro: How does the updating process work? [migrated]
News have been going around about the PondRAT exploit that can come from certain Python packages. I have a bunch of Python projects and, while I’m pretty sure I haven’t directly downloaded any of the packages listed, correct me if I’m wron… Continue reading checking for the existence of PondRAT malware and eliminating it from Linux (Ubuntu)
Ubuntu snap is quite a hot topic. Therefore I am curious, what security risks are known for it?
Which misconfigurations are possible? And are there any misconfigurations which can be used to escalate to root user?
Continue reading Ubuntu – snap potential security issues (for privilege escalation)
On my system (Ubuntu 22.04) I have encrypted my private key with a passphrase and added it to the ssh agent with ssh-add.
On use of the key, I am prompted with the option "Automatically unlock this key whenever I’m logged in".
In… Continue reading Auto-unlock private key: which implications?