Questions tagged [security]
Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).
169
questions
0
votes
0answers
27 views
How do I restrict SSID logon info on a user basis?
Currently, when a user logs on, the network last used is connected. Do not want this to happen when the "guest" user logs on if the previous user was on the primary network. Also, logon ...
1
vote
0answers
13 views
SSL certificate for multiple dock containers running on RPI 4
Hi guys I have a question regarding docker containers and ssl certificates.
I want to install more than one docker containers like pi hole , Bitwarden and motioneye .
To access them I have to type ...
0
votes
0answers
19 views
Prompt for password if system detects HID device is inserted
I have built a touchscreen device using an RPI4b and want to restrict access from people plugging in keyboards and mice into the USB ports and mess around. The app runs under pi and LXDE, so ...
1
vote
0answers
41 views
Can't bind systemd-networkd DHCP server to a specific interface
I have setup a Raspberry Pi Zero W as both Wifi Client and Wifi AP using @Ingo's guide.
Everything is working fine. The Pi is running mosquitto MQTT broker, Node-Red, lighttpd.
I'm currently in the ...
1
vote
0answers
82 views
Security announcements for Raspberry Pi OS
For Debian there is debian-security-announce mailing list since decades.
debian-security-announce Security announcements The security team
informs the users about security problems by posting ...
0
votes
3answers
188 views
How to get access via ssh as root - with public/private key
I don't understand why I get no access for root on my Raspberry Pi 4 while trying to use key-based authentification via ssh.
So far I generated a public/private rsa keypair using PuTTYgen:
I saved ...
0
votes
0answers
39 views
Using raspberry pi for firewall and snort IDS
Currently have PI setup where I plug my laptop into it via the ethernet cable and it receives internet from the PI being connected to the wifi network. Just wondering how much control I have over the ...
0
votes
1answer
152 views
Hardening RPi4 for persistent 24/7 connection to public wifi [closed]
Edited: Based on private feedback to improve Q specificity.
The public wifi is typical of that provided by libraries, airports and other public spaces that re-directs a browser to sign up or login via ...
0
votes
0answers
468 views
Security / Antivirus software for Pi OS - Raspberry Pi 4
I want to use a Pi 4 for internet banking. Now that hackers are specifically targetting Linux with new exploits i want a good security product.
I have contacted Linux security software vendors such as ...
2
votes
1answer
67 views
Access Denied when scanning for BLE (Bluetooth Low Energy) devices
I'm running an up to date version of Buster on a Pi 3B+ (v1.3) and my Python program dies with
txdbus.error.remoteerror:
org.freedesktop.DBus.Error.AccessDenied: Rejected send message
errors unless I ...
0
votes
0answers
33 views
Is there a Raspberry Pi “hardware-based security key”?
I am reading through a recent StackOverflow blog post entitled "Security considerations for OTA software updates for IOT gateway devices" and it got me thinking about applications for the ...
0
votes
1answer
305 views
Setting up a raspberry pi as a gateway firewall for security purposes?
so I have a Minetest server and I want to deploy it on the internet through my raspberry pi, so de RBPI acts as a firewall and IDS and all the traffic goes through it.
The Minetest server is on my ...
0
votes
1answer
56 views
Rasperry Pi wireguard configuration and user access
I'm trying to setup Wireguard on my Raspberry Pi, which kind of succeed, but now I have problems with additional configuration of it.
Is there a way to allow some users to see other computers in local ...
0
votes
1answer
69 views
Can any model of Raspberry-Pi hold malware outside the SD?
Suppose I acquire a second hand unit, or maybe I lend mine to a friend. Can I be reasonably sure the unit hasn't been malwared?
Consider the nightmare scenario. My friend borrows my Raspberry Pi but I ...
1
vote
2answers
116 views
Disable Single User Mode
If I forget my password to my Raspberry Pi, I can gain access again by using single user mode (here is an alternative link). The upside is that if I don't know my password, I can gain access. The ...
-1
votes
1answer
46 views
How to handle two networks (one for Smart devices and another to access internet) in a home automation setup?
I want to use my Raspberry Pi 4 as a secure home automation server that can handle two networks: one for accessing smart devices (over WiFi) and another for accessing the internet. This setup should ...
0
votes
2answers
100 views
Passwordless git server ssh keys not working unless password is enabled?
I am trying to have a git server on my raspberry pi that is passwordless with only ssh key authetication.
Sshing in with ssh key works fine, although when I try to push to a repository this is the ...
1
vote
0answers
36 views
Raspberry pi locking mechanism is insecure by default
I've followed a tutorial that lets me lock my Raspberry pi. Though I do not know which one it was I assume it was this one.
However when I lock it I could just press Crtl+Alt+F7 to get right back into ...
5
votes
1answer
306 views
Does Raspbian keep a security log file, and what is its location?
I set up an OpenVPN server on my Raspberry Pi running Raspbian and am wondering if there is a log file of security events that I can look at. I'm curious because I want to know if there are login ...
1
vote
0answers
83 views
CPU side channel mitigations on Pi 4 running Ubuntu 20.04?
I want to run a jumphost on Ubuntu 20.04 64 bit and Pi 4, as secure as possible. If I check lscpu of the vanilla install after running a dist-upgrade, I see this:
Architecture: ...
2
votes
1answer
84 views
Is older Raspberry Pi safe? When is the end of software support for them?
I am not asking about the discontinuation of manufacturing or selling of the hardware; I am talking about only the software.
There are famous old Android devices that the manufactures have abandoned a ...
0
votes
0answers
41 views
day / night motion alarm
I am going camping in a few months and I want to build a motion sensor alarm for my tent entrance for while I am asleep. Chances are nothing will set off the alarm, but if a bear or coyote comes ...
0
votes
1answer
464 views
How to disable services on DietPi (debian linux) and harden the security?
Fresh DietPi install has bitcoin client and all sorts of unnecessary services installed. Which ones can I remove and how? The goal is to have a simple system can displays a website (needs to be able ...
1
vote
1answer
86 views
How many parallel server applications are too much?
I am curious what general recommendations are.
I would like to set up the following application, ideally on one device (RPi4, 4GB):
InfluxDB and Grafana
PiHole
PiVPN and SSH
nginx (simple) ...
1
vote
1answer
126 views
How to disable password
I was getting ready to upgrade from a raspberry pi 3b+ to a pi 4 for retro pi gaming. I updated my SD card to prepare it for the new board, but I got a little "surprise".
After the card was updated it ...
0
votes
2answers
3k views
Any parental control tools for the Raspberry Pi 4?
Kids in my local elementary school are more reliant on online learning during worldwide coronavirus stay-at-home lockdown. Almost all of their schoolwork can be done within just a browser.
Does the ...
2
votes
1answer
101 views
How can I disable the [Run…] main menu item in Raspbian Buster
I'm creating a build to be used by others in a company as a very simple remote dial-in tool to be used in emergencies. I'm basing this on Pis Version 3 and above running on Buster.
The basic dial-in ...
3
votes
2answers
101 views
Raspberry Pi in client home and security
For a project, I got to put Raspberries in client's homes, by a lot of clients.
I also have to be able to ssh to them, so I can update them.
My solution for the ssh is to set up a VPN from a server ...
1
vote
1answer
150 views
Enabling Screen Sleep using RTSP stream
I have two IP cameras supporting RTSP, and I want to display their feeds on a monitor fed by a Raspberry Pi. My problem is that I do not want the monitor to be powered on 24/7, but only when a motion ...
0
votes
1answer
1k views
How to use Raspberry PI4 as a security device for the network?
How Can I use Raspberry Pi 4 as a antivirus or a security device in a Network?
I am trying to make the raspberry pi become a security device example below.
---(Internet)----(PI 4)-----(Local-PC)
...
0
votes
1answer
761 views
Motion security
I installed motion by apt and run as the default configuration. I open http://raspberrypi:8080 and I can see the camera's output. I will use it over the internet and I'm worried about the security of ...
2
votes
3answers
187 views
Raspberry Pi Security Issues: SSH ATTACK? Case Study
This might be a long post so please bear with me.
This is a scenario that took place a year back when I had very almost no knowledge of raspberry pi. Right now I am trying to learn some stuff about ...
2
votes
2answers
174 views
Does Raspberry Pi 4 supports pointer authentication?
I know that ARM Pointer Authentication feature is supported on all ARMv8.3-A processors, and this version was presented at 10/2016. RPi 4 Model B was released last year so there is a good chance the ...
2
votes
0answers
109 views
Pi cannot boot when encrypted USB SSD drive is attached
I have a Pi 4, running Raspbian 10 Buster. I have an attached SSD drive with LUKS encryption. When I restart the Pi, it wouldn't boot if the SSD is attached. Once I unplug it, it boots well and I can ...
0
votes
1answer
5k views
Adding Debian Security Repository GPG key
I'm kinda new when it comes to working with adding GPG keys. I am trying to use the debian security repository to the sources.list to further add security to my Pi but I am getting this error below. I ...
2
votes
1answer
4k views
Does Raspberry Pi 4 processor support AES-NI instructions?
In the interest of minimizing timing attacks on my OpenVPN and similar connections, does Raspberry Pi 4 support AES-NI instructions?
Some reference to AES is made in the technical reference manual, ...
1
vote
0answers
80 views
How can I build and install openssh server (sshd) with compiler security features
I noticed my raspberry pi's sshd does not seem to have PIE and ASLR enabled. I determined that using the answer here: https://unix.stackexchange.com/a/435038
I'm using Raspbian, is there another OS I ...
2
votes
1answer
37 views
How to securely share linux devices from client to another linux server
I have 3 I2C devices connected to my raspberry pi 3 i2c bus 1.
I want to share this whole I2C bus 1 (/dev/i2c-1) to another linux server, which is running in the cloud, through a secure TLS, username ...
3
votes
2answers
781 views
How can I create an encrypted container on a Raspberry Pi 4?
I'm looking for a tool similar to Veracrypt, Boxcryptor or Cryptomator which runs on the Raspberry Pi 4 (armv8). The above mentioned apps don't seem to support the arm architecture (or at least not v8)...
0
votes
0answers
112 views
Ensure Pi Connects Only to Trusted WiFi Network Via Certificate
This bleeds into Information Security Exchange, however I am posting it here:
Suppose I am extremely paranoid and want to ensure my Pis only connect to WiFi access points with a certificate signed by ...
0
votes
1answer
219 views
Can malware persist in the Pi outside of the OS/SD card?
Please let me know if this question is more appropriate for Security.
What kinds of damage can an attacker with physical access to a Pi cause?
In a desktop PC or laptop, an attacker with physical ...
1
vote
1answer
220 views
Bind sd card to a specific raspberry Pi
Is it possible to tie an SD card to a Raspberry Pi? I want it this way if you try the SD card in another Raspberry Pi that Linux does not start or that the SD card formats itself.
Furthermore, it ...
0
votes
1answer
52 views
Would it be possible to set up a security system like the one in jurassic park? [closed]
Would it be possible to set up a security system like the one in jurassic park (the book) using raspberry pi's? If so, how much time would it take, and how much would it cost? Using python as the ...
3
votes
1answer
666 views
Is the Raspberry Pi 4 vulnerable to the Spectre exploits?
Now the new Raspberry 4 has moved to ARM A72 cores, it's vulnerable to the spectre issues according to ARM.
Processor Variant 1 Variant 2 Variant 3 Variant 3a Variant 4
Cortex-A72 Yes Yes**...
0
votes
0answers
164 views
How do you set up Squid Proxy behind DHCP router?
I installed Squid on my RPi-3 for use behind a DHCP router. However, the pi will not route traffic back and forth between my computer because my router's DHCP settings. I don't want to give my router ...
1
vote
1answer
2k views
UFW Enabled, but not starting upon Pi reboot
I am running servers on several Pi's for VPN, OpenTTD, etc. I have installed ufw on all of them to try and keep them a little more secure. The server running the VPN is causing some issues as ufw ...
3
votes
1answer
483 views
Translation request for News re wpasupplicant during upgrade
During a routine upgrade (sudo apt-get upgrade), the following "news" appeared in my terminal window:
apt-listchanges: News
---------------------
wpasupplicant (2:2.6-19) unstable; urgency=medium
...
1
vote
1answer
91 views
Why is /boot/config.txt executable?
FYI, I installed the R-PI minimal image with dd myself onto an sd card
I was messing with the boot config when I realized that this file was set as executable. Looking at the config, I don't see why ...
0
votes
1answer
108 views
Raspbian Password Security
I'm building a Raspberry pi Raspbian server and wanted to know how secure the passwords are, as I intend to forward the port. Is it possible to SSH into a machine without the password?
Any input is ...
2
votes
1answer
1k views
What is the purpose of auto-login? Is it safe/secure?
Please excuse my ignorance. I have searched and I haven't found anything that addresses my question.
What is the purpose of auto-login and is it safe to enable?
I am using my Pi 3B to host a very ...
