New answers tagged security
0
votes
How to tell which application UFW is blocking
Probably best to check ufw logs.
sudo less /var/log/ufw*
If there is not logs about blocking, check logging level. Remember that higher levels of logging can fill your disk fast.
FILE: /etc/ufw/ufw....
- 73
1
vote
Echo with obfuscation
$ echo "helloworld" | sed -E "s/(.{3})(.{5})/\1*****/"
hel*****ld
(.{3}) - the masking starts after the 3rd letter
(.{5}) - the quantity of letters that will be replaced by *****. ...
- 131
0
votes
How to lock a Linux/Debian/KDE system to one program (a password-protected kiosk mode for Kodi)?
The solution is to use cage.
It's not yet available in Debian 11 and also can't be built on it.
However, it's already in "Debian 12 testing".
I will update this once it's in Debian 11 stable ...
- 3,430
-1
votes
Linux local Password Policy doesn't apply when creating new user
I configured the file /etc/security/pwquality.conf . Now everything works perfectly!
- 1
0
votes
Linux local Password Policy doesn't apply when creating new user
The easiest way I see - just execute password --expire user once, that user is created. In this case, you (as root) do not care about password complexity. But the user would have to set a new password ...
- 1,198
31
votes
Are there security consequences from not giving printf a format to use?
In:
printf "$var"
There are two problems:
variable data passed as the format. Could be a problem if $var is under the control of an attacker
option delimiter (--) missing, so $var could be ...
- 467k
4
votes
Are there security consequences from not giving printf a format to use?
Since you're talking about the shell printf command not the C printf(3) function, there possible vulnerabilities are more limited with proper quoting of "$var". The shell command won't ...
- 38.9k
Top 50 recent answers are included