LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-09-2019, 12:47 PM   #16
TokTok
Member
 
Registered: Oct 2019
Posts: 230

Original Poster
Rep: Reputation: Disabled

Quote:
Originally Posted by ondoho View Post
Lock: baked right into Linux filesystems.
Code:
chmod 400 file
makes it read only, and readable only by the owner.
Just one of a million examples, read
Code:
man chmod
man chown
So that's not even touching on SELinux.

Hide: various trivial solutions exist. I use encfs for my porn collection.
Can you point me in the direction to where i can learn more about these features of linux *FileSystems* & what they do etc.?
 
Old 10-09-2019, 12:48 PM   #17
TokTok
Member
 
Registered: Oct 2019
Posts: 230

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by zeebra View Post
"chattr" can make files immutable, so they can't be edited or deleted.
Can you explain this ?
 
Old 10-10-2019, 12:54 PM   #18
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by TokTok View Post
What`s this encfs about / Can you explain it ?
Code:
apt-cache search encfs
apt install encfs
man encfs
 
Old 10-10-2019, 03:26 PM   #19
zeebra
Senior Member
 
Registered: Dec 2011
Distribution: Slackware
Posts: 1,824
Blog Entries: 17

Rep: Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635Reputation: 635
Quote:
Originally Posted by TokTok View Post
Can you explain this ?
chattr is a command (which is probably available in your distro) that sets filesystem attributes. These can be seen with the command lsattr. Theere are various attributes that can be set with chattr, and one of them is the +i attribute, which is "immutable". This means the file is pretty much untouchable, it cannot be deleted, edited or moved or anything like that. It can only be done to if the +i attribute of the file is removed by the superuser using the chattr command.

Furthermore it does not protect against formatting the disk.

You can find further info on the chattr command with
Code:
man chattr
.
Anyways, it does one of the things that you asked for in the first post, makes files non deletable, non editable etc. Not sure if it is part of GNU coreutils or where it is included, but I think it's pretty standard in all distroes, available.

I also think by saying this I can tell you if you're looking for "one program" that does all the security this and that, GNU/Linux does not work like that. Most things are done 1 thing in 1 program, another thing in another program, these are all small programs, but when you collect them all, you have alot of functions. Probably most of the security things you want are already available to you in many such small programs and commands.

Last edited by zeebra; 10-10-2019 at 03:29 PM.
 
Old 10-11-2019, 10:10 AM   #20
TokTok
Member
 
Registered: Oct 2019
Posts: 230

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by ondoho View Post
Lock: baked right into Linux filesystems.
Code:
chmod 400 file
makes it read only, and readable only by the owner.
Just one of a million examples, read
Code:
man chmod
man chown
So that's not even touching on SELinux.

Hide: various trivial solutions exist. I use encfs for my porn collection.
Do you know of any programes to do this with a click-Graphicle instead of cmd ?
 
Old 10-11-2019, 12:07 PM   #21
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by TokTok View Post
Do you know of any programes to do this with a click-Graphicle instead of cmd ?
Lock: your file manager.

Hide: encfs: initial setup via command line, subsequent usage via click on .desktop file. Or a Quick Search (tm).
 
Old 10-11-2019, 12:26 PM   #22
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,692

Rep: Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274
Initially I wanted to write: the software are available, can be installed, but the security mainly based on the configuration, not the software.
But now it looks like you need something else. I do not know what do you really need, what is your real problem, probably you can explain it a bit better.
From the other hand you got a lot of suggestion to read man pages of different good tools (and also you can find tutorials about them on the net - or view some videos too).
If there was no other idea, start with wiki pages and man pages. All are available on the net.
 
Old 10-14-2019, 10:00 PM   #23
evo2
LQ Guru
 
Registered: Jan 2009
Location: Japan
Distribution: Mostly Debian and CentOS
Posts: 6,724

Rep: Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705Reputation: 1705
Hi,

Quote:
Originally Posted by TokTok View Post
Does anyone know of any good security programs for linux like there are for windows ? Something that locks-hides files & folders so they can`t be edited or moved deleted ? Any that restricts access to certain features like start menu,control panel,registry and others, Folder Lock as a example.
If you're looking to lock down what a user can do with the gui (eg for a kiosk type setup), then you could have a look at gnome shell. Eg
https://help.gnome.org/admin/system-...p-mode.html.en

Evo2.

Last edited by evo2; 10-14-2019 at 10:48 PM. Reason: Typos
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Are there any good Linux-compatible streaming video capture/conversion programs? isaac3rd Linux - Newbie 3 09-25-2009 12:19 PM
Any good website design programs for Linux? Mikesoft Linux - Desktop 2 01-04-2007 01:32 PM
Before switching to Linux, are there any good alternatives to these programs? ralph76 Linux - Software 4 06-26-2004 01:48 PM
any good programs to play videos on Linux? ShawnD Linux - Software 15 09-01-2002 07:22 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:44 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration