Miphix's questions

This is kind of a 2 part question and you'll understand why when done reading. To start, I was trying to figure how to cause an "enter" action inputted into standard output so that the script can inject a password into standard input (yes, I'm aware there are ssh-keys. It's more for the challenge of doing it). First, how do you do an "enter" in a bash script? I feel like \n is different in a small way. And, what does \e do. It's not documented in man bash.

To help clarify, I'm attempting to perform an "enter" functionality that would start an openssh-client connection.

#!/bin/bash

ssh [email protected] [options] [interpreted enter command/token]
&& sleep 5s
&& echo "supersecretpassword" [interpreted enter command/token]

quickly followed by what other dreamy piles of fairy dust i can come up with.

The title of this question is the error message I receive after installing apt-mirror and apache2. As per the instructions set out by all the guides I've encountered. It informs me to modify /etc/apt/mirror.list with a directory that I've created for the repository to end up.

ie set base_path /dir

I've added the repos I want in my list as well. Once I've entered the following

$ sudo apt-mirror

It returns with the error in the title

apt-mirror: can't create /srv/local-repo:/mirror directory at /usr/bin/apt-mirror line 342

I investigated that file:line, and I'm too amateur to decipher the issue.

I would like to update my Ubuntu servers and desktops offline without Internet connection. To update Ubuntu servers and desktop do I need separate mirror?

I have LVM configured for an encrypted home folder. Naturally this implies that swap falls into the crypto catagory. I have installed a second disk with a swap partition already ready to go and ready to be plug into the 'matrix'. Since I shortsightedly didn't consider LVM to handle the swap partition. I'm wondering is it possible to enter the new swap partition into fstab restart and be comfortable knowing it'll work. Or, do I have to continue with LVM?

===Edit for terminology correction===

I've skimmed google, and the only information I could find was, Ubuntu has voice command capabilities. Since Ubuntu T.V. via PPA is more or less just an interface and uses the original OS as it's foundation. Is it safe to assume that it can work via voice control?

I've been recently spending my time refining my iptable rules to be a little more robust than Ark linuxs Simple stateful firewall to include defense against some other known and nefarious attacks. One of these attacks includes a denial of service that tricks the victim to persistently reply to itself until it is no longer network-able.

$ iptables -A INPUT -d 47.156.66.17/32 -j DROP

The above rule assumes I'm using 47.156.66.17/32 as my IP and CIDR. Naturally, I'm not always at home with my laptop and don't always get the same IP and CIDR. My question to you my fellow ubuntu fans. Is this, how do I make the IP dynamic and responsive enough where it annalyzes the IP address per network without having to instate the rules for every connection? Plug and forget is the idea.

Would I have to put a second set of rules that initiate every time the network goes up and down or can it be as simple as tossing it into iptables-persistent, go have a lovely sandwhich at the local cafe and happily surf my heart out?

I'm mostly asking this as it's apart of an assignment that asks me to.

"configure the default settings of linux for when you create a new user, their home directories are in /project/users directory by default."

I've already figured out how to set other automatic standards that are requested except this one. I have looked around the /etc/xdg directory and was further baffled by /etc/skel. I have googled the nine lives out of it and searched with a number of different wordings how to do it on this site. If it has been covered already, refer me to it and I will delete this question. Thank you for your help every one.

I'm looking projects for things involved in Ubuntu. I find the environment of the screen to which you give your full disk encryption passphrase to be bland and would love to change it. Is this an editable feature and what other fun projects do you have in mind that I could try my hand at.

Since Linux is vulnerable to a number of similar vulnerabilities as windows. I'm trying to find a daemon that catalogs and alerts me/user of any and all file changes as well as file additions. Is there one out there or do I have to make one of my own?

I'm attempting to figure out how to obtain the IP address that represents my connection over a tor network. What do I type into a terminal to see this information. Ultimately, I'm attempting to create an auto-log of my tor connections for security purposes.

I have access to the MAC address and signal strength. He's not jamming my network, but he is bridging my wireless network. I want to connect to his network and figure out what he's doing. Any advice or resources will be appreciated.

The nature of the question here is broad enough truly to include Ubuntu. I was just picking around forums analyzing this and that and line 11 puzzled me. What I would like to know is, what exactly is it doing? Am I wrong to believe it's related to the touch and mkdir commands? Or is that file assumed already created?

1 #! /bin/sh
2    
3 export EXTERNAL_STORAGE=/mnt/storage
4 PYTHONPATH=/mnt/storage/com.googlecode.pythonforandroid/extras/python 
5 PYTHONPATH=${PYTHONPATH}:
/data/data/com.googlecode.pythonforandroid/files/python/lib/python2.6/lib-dynload 
6 export PYTHONPATH 
7 export TEMP=/mnt/storage/com.googlecode.pythonforandroid/extras/python/tmp 
8 export PYTHON_EGG_CACHE=$TEMP 
9 export PYTHONHOME=/data/data/com.googlecode.pythonforandroid/files/python 
10 export LD_LIBRARY_PATH=/data/data/com.googlecode.pythonforandroid/files/python/lib 
11 /data/data/com.googlecode.pythonforandroid/files/python/bin/python "$@"

Ufw has a command that lists out profiles to which you can further explore their profile definitions

$ ufw app list

And

$ ufw app PROFILE {app profile title}

I was wondering how you can create a profile for an undefined program, like virtual box and have that profile run the same definitions I have given iptables for my Ubuntu distro.

Not only am I trying to use Ubuntus firewall to service my virtual machine. I am also sincerely curious as how to create a profile for an application that doesn't come with one.

As a serious security researcher, I'm looking for an answer to securing a Ubuntu installation against unwanted intrusion. This should include how I can:

• Log and alert remote connection attempts,
• Log and alert when a file changes, as well as restoration of those files on request,
• Is it necessary to Harden the TCP/IP stack of the machine?

My end use case scenario is going to be in Virtualbox for ease of restoration, so it would be great to know what I need to do to get the image started.

Would the following iptables definitions work the same as fail2bans purpose?:

• $ iptables -N IN_SSH

• $ iptables -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH

• $ iptables -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 3 --seconds 10 -j DROP
• $ iptables -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 4 --seconds 1800 -j DROP
• $ iptables -A IN_SSH -m recent --name sshbf --set -j Accept
• $ iptables -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH

P.S.: Would some one give the code to properly box off scripting?

I have a terribly limited download allowance and have multiple computers. So, my questions folks is. Would I be able to save what has been installed thru apt-get and any other terminal installations I attempt?