Questions tagged [security]

Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).

Filter by
Sorted by
Tagged with
-1
votes
1answer
630 views

Requirements to build a poisontap

I'm new to single board computing and to hardware. I've found PoisonTap to be an interesting project, tough I've got no idea where to start. What would be a list of concepts I'd need to know in order ...
-3
votes
1answer
1k views

Kali+Ubuntu+Parrot Security Armhf Image's on same multiboot SD card howto?

Ive installed a bunch of Armhf linux distros to the PI 3 and with allot of success. However i cannot find a good tutorial on installing them all on one SD Card. Im not talking about the preloaded OS'...
1
vote
1answer
2k views

System Calls From C Code

after many searches and tries, finally I found a way to protect my python code on my raspberry pi (for sure there is no 100% security), but let's say I made it a little bit harder. This method still ...
2
votes
1answer
1k views

Motion on_movie_end run a python script and bash script

I am using Motion to record videos. I have a Python script which sends the video to me when it ends (sendvideo.py). I have a bash script that clears the folder (clearmedia.sh) I have tried the ...
2
votes
1answer
873 views

Can I use auditd on a Raspberry Pi?

auditd is a kernel demon that can snoop on users using your server. Can it be used on a Raspberry Pi?
0
votes
1answer
1k views

Securing the Pi for use as a server

I want to use the Raspberry Pi 3 (B) as a web server and need SSH/VNC access. I will use VNC only over SSH, forwarding only port 22. Should I be worried about SSH? I removed user pi and created a new ...
2
votes
1answer
1k views

Until when does Raspbian Wheezy receive *security* updates?

I understand Raspbian has moved-on; to be Debian Jessie based. But, on the official Raspberry Pi website the update from Wheezy to Jessie is discouraged (as also discussed on this StackExchange ...
3
votes
1answer
4k views

SELinux on Raspberry Pi 3 running CentOS 7

Issue I'm running CentOS 7 on a Raspberry Pi 3 (image here: http://buildlogs.centos.org/centos/7/isos/armhfp/CentOS-Userland-7-armv7hl-Minimal-1602-RaspberryPi3.img.xz). I'm attempting to enable ...
0
votes
1answer
127 views

How to get sure that the Internet connection has been correctly transfered?

I'm currently working on a project of making an highly secured router with my RaspberryPi to navigate anonymously on the net. Yet, I'm not able to correctly transfer the Internet connection to the new ...
3
votes
3answers
2k views

Strange IP connected to ssh?

Just typed netstat and found this: Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 304 raspberrypi.home:ssh ...
2
votes
1answer
176 views

Is the Raspberry Pi safe

I just partnered with a company that is conducting a Facebook ad study. They sent me this CanaKit to attach to my computer in order to observe advertising info on facebook. I am not a programmer or ...
0
votes
1answer
1k views

How to secure my offline Raspberry Pi LAMP server against manipulation and copying?

I have spent a lot of time on researching on this topic but I haven't found any working solution for my problem respectively I'm not clear about some points. My goal is to distribute a encrypted/copy-...
11
votes
2answers
16k views

Are there any issues changing default username in Raspbian or Raspbmc?

I know that security by obscurity is not real security, however, why make it easy by keeping a well known username such as "pi". Therefore, what are the implications to changing the username of "pi" ...
-3
votes
1answer
458 views

Network Wide Security / Access Control Software [closed]

Is there a way to have a network wide, intrusion / attack detection system running on a Raspberry Pi? Kinda like fail2ban but for everything as well as access control to restrict certain devices from ...
3
votes
1answer
469 views

How to fix glibc vulnerability CVE-2015-7547

https://www.debian.org/security/2016/dsa-3481 Do we need to wait for a RASPBIAN upgrade to be available here? https://www.raspberrypi.org/downloads/raspbian/ I ran: sudo apt-get update && ...
4
votes
2answers
902 views

auth.log sshd entries

I set up my Raspberry a few weeks ago. Currently I just use it as an SSH server until I find the time to do something more interesting with it. The Raspberry runs a sshd server and is connected to my ...
7
votes
1answer
564 views

Is it still safe to use pidora?

Pidora is Fedora 20 based, Fedora 20 is in EOL (End Of Life). yum does not update anymore Is it still safe to use Pidora for hosting a webserver or fileserver?
0
votes
3answers
977 views

Locking a C++ binary to the RPi serial number

I see that each RPi has a serial number that is accessible by reading /proc/cpuinfo. How secure is it for me to tie such serial number to my C++ binary when I want to lock that binary to a single RPi ...
1
vote
1answer
209 views

Strange things in my logs

So, I actually have set up my Raspberry Pi as a public web server. I have the port forwarding set up and my FTP and SSH can be accessed by me remotely. Now I was looking around in my logs yesterday ...
2
votes
1answer
297 views

What factor might have affected SSH host authentication?

Recently when connecting with SSH to my Raspberry Pi, I got a host authenticity warning. I am aware of the way SSH authenticates host and what this message means, however I have no clue what might ...
3
votes
1answer
748 views

On-the-fly / mounted volume encryption for RPi

I have a Raspberry Pi B+, and I want a unitary, encrypted archive which I can read and write from/to at will. I want a single file on the RPi (or attached storage), which contains an entire directory ...
2
votes
1answer
957 views

Linking a Home Alarm Siren to Raspi

I want to hook my home security system's alarm into my Raspi, so whenever the alarm is triggered, my Raspi sends me a text message. The gentleman who installed the system said whenever the siren goes ...
0
votes
1answer
325 views

Lock down pi UI

I want my raspberry pi to boot to a UI (so I can RDP / VNC into it remotely) but I don't necessarily want people nearby to start poking around. How can I require a password upon login for the pi? I've ...
1
vote
2answers
921 views

sudo without password: More of an issue on Apple?

I asked this question over on the Raspberry Pi forums in an attempt to keep it low key, but I can't seem to find it now, so I'll ask it here. It is on-topic and definitely specific to the Raspberry Pi....
25
votes
2answers
27k views

How do I encrypt my Raspberry?

The Raspberry is all well and nice and can run pretty quick. But how can I protect my SD card from offline data attacks. SSH can be protected with a good password or a SSH key but if somebody gets ...
3
votes
1answer
2k views

Security issues in PHP executing PYTHON scrips

So I've got a PHP script thats capable of executing Python commands (to control GPIO), thanks to the users of StackExchange. My previous question here. Now I'm able to control the GPIO pins from a ...
2
votes
4answers
11k views

Network Security Toolkit on a Raspberry Pi

I am planning on putting either the NST (http://www.networksecuritytoolkit.org/nst/index.html) on my Pi or just downloading a lot of similar tools and then using my Pi as a security device to monitor ...
2
votes
2answers
159 views

Is it safe to post entire syslog to the net?

Is it safe to post the entire syslog from my PI to the web? Could someone use the data to hack into my pi? Could it make my network more vulnerable to attack?
52
votes
5answers
88k views

Using the Raspberry Pi as a router?

Has anyone used their Raspberry Pi as a routing device? Mainly I want to use it to monitor my network, and it would be great if it had an input and output for Ethernet, but it doesn't, so I am ...
29
votes
5answers
25k views

How do I create a new user?

Are there any security implications for creating (or not creating) a new user? If need be, how do I create a new user or change the default user?
0
votes
1answer
222 views

Multiple Raspberrys for different services

I'm currently running a Raspberry Pi 2 which hosts a mailserver environment (postfix, dovecot) a webserver (apache2, owncloud, roundcube) a VPN service (openVPN) and a backup service (rsnapshot). A ...
4
votes
1answer
382 views

When I connect to the SSH for the first time

Whenever I connect for the first time to my raspberry pi, a message appears telling me to trust that 'fingerprint'. How do I know that that is my raspberry pi's fingerprint? When I search the web, I ...
1
vote
1answer
102 views

Users and permissions on a Raspi which is both a home and an owncloud server [closed]

I'm a long time Linux desktop user but a total newbie in servers and security. Now I want to set up a Raspi (running Raspbian) to act as a CUPS print server, an NFS file server and backup storage, an ...
0
votes
2answers
1k views

How to crypt a specific folder in raspbian?

I wrote a bit of php code in my r-pi on which I installed raspbian. I would like know to protect this code from the possibility to being copied or read. I looking for a solution that crypt my ...
2
votes
2answers
1k views

How can you use face recognition on raspberry pi as a login to the pi?

I have created an owncloud server using RPI, Now I was wondering how to implement the face recognition as a login for the pi. I know I have to use the OpenCV.
2
votes
3answers
7k views

use ssh to control tty1

if I ssh in to my Pi that has a tv attached to the svideo I can set tty1 writable but it does not seem to "see" the input, the characters just appear on the screen. sudo chmod 666 /dev/tty1 echo msg1 ...
1
vote
3answers
9k views

Setting up Raspbian and WiFi on a private network

I just got raspbian installed on my SD card and am trying to get my Pi on my network. It's protected with WPA2 Personal. I opened up the gui network connect and added a new network with the proper ...
1
vote
1answer
878 views

Manufacturer wanted: Raspberry Pi case without SD card slot / protected SD card slot

Is there any Raspberry Pi enclosure (beside self-made cases) that does not provide access to the SD card from outside or does cover the SD card so that the card cannot be directly accesed? Background:...
29
votes
1answer
39k views

How do I update OpenSSL on Raspbian

It seems like Raspbian has not been updated yet to deal with the Heartbleed bug. sudo apt-get update then sudo apt-get upgrade doesn't update anything (this is a system which was freshly updated ...
1
vote
1answer
640 views

Arch Linux Encrypt entire drive

My Pi is set up as a PHP MySQL (Percona) server and I think that I have managed to make it quite resilient against online attacks but it is still very vulnerable against someone just taking out the SD ...
3
votes
1answer
131 views

Raspberry pi memory

When you use a Raspberry Pi, the OS runs off of an SD card. Is anything being saved on the actual raspberry pi hardware when you remove the card? Said differently, say I create a password on a my RP ...
1
vote
1answer
232 views

“Bind” linux kernel to a specific cpu?

I'd like to build a linux kernel that's specific to a given Raspberry, ie. one that won't boot on any other Raspberries. My idea is to bind the kernel to the cpu's serial number bit I haven't found ...
0
votes
0answers
73 views

Security aspects: set a password to recovery mode, encrypt a directory

I wish to give more security to my r-pi which will be left in a public place. Particularly, I would like know how to set a password to "revovery mode" encrypt a specific folder in which there is my ...
2
votes
3answers
956 views

How to play my music on my RPI outside my local network

I have ripped all my CDs to a hard drive. The hard drive is connected to my RPI at home, and I use it to play my music on my stereo and control it with my mobile using WIFI. Currently I'm using ...
0
votes
2answers
1k views

How do I protect Raspberry Pi Webcam over internet

I have already worked out how to use the Pi with a webcam and have even managed to link it to a port on the router and access from an external pc it over the internet. But I am very aware that it was ...
4
votes
1answer
3k views

Simple TOR gateway

I've got some problems with a simple TOR project I'm actually working on. My goal is to have TOR running on my Pi, so I can browse the web anonymously from another computer (on the same ethernet LAN) ...
2
votes
4answers
3k views

Restrict remote access to Pi from ONE computer

Disclaimer: I am not sure if this is a question for the Pi StackExchange site, but I am posting it here anyway. If it should be moved elsewhere, please do not hesitate to suggest where it should be ...
4
votes
3answers
3k views

peerguardian / moblock installation on raspbmc

Since I'm thinking of using my pi to do some downloads, i would like to setup a peerblock/peerguardian equivalent. I searched the internet, and I've found this. i'm using latest raspbmc, cat /...
2
votes
2answers
1k views

Raspberry Pi Air gap

can i Use a Raspberry Pi as a air gap set up? I have heard that some people will use a separate computer for decrypting messages. When they revive a message they will put it on a thumb drive and then ...
6
votes
1answer
2k views

Security issue on raspberry pi: too many open connections?

I have just run netstat on my raspberry pi and found out there more than 100 (!) open connections. Is this something I should be worried about? How do I stop my rasp pi from opening so many ...

1 2
3