First security steps after installing an Ubuntu Intrepid machine

Two cents to start securing your Linux Ubuntu Intrepid box: A firewall and an antivirus.

- Install a personal firewall e.g. firestarter
- $sudo apt-get install firestarter will install it (more here)
- More on how to use it here
- I recommend to run it at bootup time for all users (including the non-admin ones). Go to system>preferences>sessions and add /usr/sbin/firestarter
- For the non-admin ones, you need to edit the sudoers file as indicated here
- Use the System > Preferences > Session to include the command sudo firestarter

- Install an antivirus such as clamav
- $sudo apt-get install clamav-daemon
- More on how to do it (checking that it runs, scheduling an update, etc) here


Those are the first steps to keep the machine secure!

Creating & moving a virtual machine

We frequently use virtual machines from where we launch our security tools.

Virtual machine creation
Sometimes we need to create a virtual machine from scratch. Here we provide some initial tips about it:

In our last posting we talked about a simple way to make a physical machine virtual. This time we continue on the virtual world. We use VirtualBox as the platform where we create a virtual machine.

First hint: We recommend to use Sun VirtualBox rather than the Open Source Edition (provided that the license terms fit our needs). Using USB drives is easier in the software from Sun.

We find the instructions to build Sun VirtualBox here. The actual installation of a host operating system is easy following the wizard appearing when we run the Menu item Applications > System Tools > Sun xVM VirtualBox if e.g. we the host OS is Ubuntu.

Second hint: Create a hard disk with the possibility to grow in size i.e. VirtualBox call it a dynamically expandable storage.

Moving a virtual machine
On the source machine...
We copy to a removable media the .vdi file (normally residing on /home/.VirtualBox/HardDisks) - This can be a big file.

Third hint: If we do not see the hidden directories in the Ubuntu file browser, press CTRL + H.

On the destination machine...
We paste the .vdi file on the HardDisks folder in our VirtualBox installation and we start the New Virtual Machine wizard (just pressing New when running Sun xVM VirtualBox) and when we are asked about the hard disk to use, we simply point to the .vdi file we have just moved.

Fourth hint: Installing Guest Additions (use this link to download the software, it is not easy to find it) in the guest OS provide us with more video, audio and storage device recognitions capabilities. However...

Fifth hint: If we move virtual machines from one machine to another, we recommend to uninstall in source and re-install in destination. Guest additions is closely link to the architecture of the host system.

Happy security tool testing in your new virtual environment!

From a physical to a virtual machine

Sometimes it is smarter to install new security tools in a virtual machine rather than in our everyday's physical machine. Playing with virtual machines could facilitate the process of reverting back to the previous state.

VMware offers the possibility to download VMware converter. This tools helps you virtualising a physical machine. Just create an account in VMware site and you can download this tool, both in Linux and MS Windows flavours, through a link you receive in your inbox.

The process is simple, just install the converter in the physical machine you would like to virtualise and follow its wizard. Count on several hours to perform the process, depending on the size of the physical machine.

Once the conversion is done, you can simply use VMware player to access your new virtual machine. Before installing the newest and coolest security tool you want to test, copy the virtual machine directory to guarantee a backout possibility.



Welcome to the virtual world!

Security sites to recommend - articles for Spanish-speakers

For those able to read Spanish, there are already 8 articles in a popular security magazine recommending and introducing top-notch security sites. You can find them here:

1- pauldotcom.com
2- sans.org
3- commandlinekungfu.com
4- gnucitizen.org
5- irongeek.com
6- taosecurity.blogspot.com
7- www.socialengineer.org
8- jarlsberg.appspot.com
9- www.ethicalhacker.net
10- www.darkreading.com
11- ha.ckers.org
12- shadowserver.org 
13- www.securitywizardry.com
14- infosecisland.com

Happy reading!

Presentation at the V OWASP Spain Chapter meeting

This is an extract of the presentation given last 15 May 2009 at an OWASP Chapter Meeting. Thanks to the audience for their presence!

The presentation can also be downloaded from the OWASP site

Slide 1




Slide 2




Slide 3




Slide 4




Slide 5



Slide 6



Slide 7




Slide 8



Slide 9



Slide 10



Slide 11



Slide 12



Slide 13



Slide 14



Slide 15



Slide 16



How to contact the author? Send an email to resolvemos at gmail.com