Difference between revisions of "Linux security"

From Gender and Tech Resources

m
m
Line 1: Line 1:
 
blabla
 
blabla
  
== Maintaining integrity of your system (intrusion detection) ==
+
== Setting up root mail ==
 +
 
 +
== Installing intrusion detection ==
  
 
== Turning camera off ==
 
== Turning camera off ==
 +
 +
Hackers gain access to their victims’ computers with remote-access Trojans (RATs) – malware that gives an intruder administrative control over its targeted computers, including, in this case, the ability to remotely control webcams. It’s an invisibly-installed malware program spread via email attachment or by tricking victims into visiting a booby-trapped site.
 +
 +
Tape the camera. It may even be possible to turn it off in BIOS (depending on your version). Better yet, if you know what driver module is controlling the webcam, you can disable the driver with <code>modprobe -r</code>. Check with:
 +
 +
$ lsmod | grep "uvc"
 +
 +
If stuff like this appears, your webcam device uses an uvc driver:
 +
<pre>uvcvideo              79005  0
 +
videobuf2_vmalloc      12816  1 uvcvideo
 +
videobuf2_core        47787  1 uvcvideo
 +
videodev              126451  3 uvcvideo,v4l2_common,videobuf2_core
 +
media                  18305  2 uvcvideo,videodev
 +
usbcore              195340  7 uvcvideo,ums_realtek,usb_storage,ehci_hcd,ehci_pci,usbhid,xhci_hcd</pre>
 +
 +
To disable the cam:
 +
 +
$ modprobe -r uvcvideo
 +
 +
To enable the cam:
 +
 +
$ modprobe uvcvideo
 +
 +
If not an uvcvideo driver, try <code>$ sudo lsmod | grep "video"</code> and use the <code>modinfo</code> command to find out more about a particular module:
 +
 +
$ modinfo [modulename]
 +
 +
Then replace the "uvcvideo" in the above modprobe command with the name of your driver module.
 +
 +
To disable the webcam at boot (if file not exists, create it):
 +
 +
$ sudo geany /etc/modprobe.d/blacklist.conf
 +
 +
At bottom of the file add this line: <code>blacklist uvcvideo</code> (or the name of your driver instead of "uvcvideo").
 +
 +
Save the file and reboot. Your webcam is no longer functioning.
  
 
== Turning microphone off ==
 
== Turning microphone off ==
 +
 +
Open the alsa control panel for muting the microphone:
 +
 +
$ sudo alsamixer
 +
 +
You can also use the same method as use above for the webcam. A list of recognisable alsa modules can be found here http://alsa.opensrc.org/ALSA_modules
  
 
== Managing passwords ==
 
== Managing passwords ==

Revision as of 08:43, 25 July 2015

blabla

Setting up root mail

Installing intrusion detection

Turning camera off

Hackers gain access to their victims’ computers with remote-access Trojans (RATs) – malware that gives an intruder administrative control over its targeted computers, including, in this case, the ability to remotely control webcams. It’s an invisibly-installed malware program spread via email attachment or by tricking victims into visiting a booby-trapped site.

Tape the camera. It may even be possible to turn it off in BIOS (depending on your version). Better yet, if you know what driver module is controlling the webcam, you can disable the driver with modprobe -r. Check with:

$ lsmod | grep "uvc"

If stuff like this appears, your webcam device uses an uvc driver:

uvcvideo               79005  0 
videobuf2_vmalloc      12816  1 uvcvideo
videobuf2_core         47787  1 uvcvideo
videodev              126451  3 uvcvideo,v4l2_common,videobuf2_core
media                  18305  2 uvcvideo,videodev
usbcore               195340  7 uvcvideo,ums_realtek,usb_storage,ehci_hcd,ehci_pci,usbhid,xhci_hcd

To disable the cam:

$ modprobe -r uvcvideo

To enable the cam:

$ modprobe uvcvideo

If not an uvcvideo driver, try $ sudo lsmod | grep "video" and use the modinfo command to find out more about a particular module:

$ modinfo [modulename]

Then replace the "uvcvideo" in the above modprobe command with the name of your driver module.

To disable the webcam at boot (if file not exists, create it):

$ sudo geany /etc/modprobe.d/blacklist.conf

At bottom of the file add this line: blacklist uvcvideo (or the name of your driver instead of "uvcvideo").

Save the file and reboot. Your webcam is no longer functioning.

Turning microphone off

Open the alsa control panel for muting the microphone:

$ sudo alsamixer

You can also use the same method as use above for the webcam. A list of recognisable alsa modules can be found here http://alsa.opensrc.org/ALSA_modules

Managing passwords

Using a firewall

Safer browsing

   ...

Encryption

Further hardening of armour