1
vote
0answers
47 views

How to secure tmp directory from hard link attacks when host doesn't allow partitioning

I'm a new sysadmin in the making, have learned that I need to have /tmp and /home directories on separate partitions in order to prevent possibilities of privilege escalation through hard links based ...
-3
votes
2answers
86 views

Permissions and access security for a shared folder on a server

I need to set permissions to a folder for two people. I am not an administrator on the server but I have access to grant and remove permissions to folders. Not even the Server Admin should have ...
0
votes
1answer
71 views

file permissions for scripts that need write access

This question helped me quite a bit: What's the best way of handling permissions for apache2's user www-data in /var/www? I would like to take the above question further, I want to be able ...
0
votes
1answer
72 views

Restrict access to SQL Server backups based on user?

Let's say I have MS SQL Server 2012 Standard installed on Windows Server 2008 R2 Standard. It's a single SQL instance that runs under the windows domain account DOMAIN\sql_user. There's two databases, ...
1
vote
1answer
48 views

Create files but not modify the created file or any other file in a directory

Is it possible using Windows standard tools to create such a permission model where a user can create a file in a directory, but once the file has been created (file handle closed), the user can not ...
0
votes
2answers
196 views

Windows Security: can user read local files with only 'Log on as a batch job'?

A Windows Scheduled Task runs as serviceAccount@domain.tld on a 2008R2 server. The server's local disk has some files that Joe Blow should not see. Joe Blow knows the serviceAccount password. As far ...
-2
votes
1answer
49 views

Read a file created by root user on unix system [closed]

I have a file created by root user on unix system and the file is assigned to a particular group.All I want to do is read that file by logging in as user which is not root and not a part that ...
-2
votes
1answer
64 views

Investigate why user has access to a folder [closed]

How can I understand why a particular user has access to a particular shared folder? Security tab of the folder contains a long list of groups groups and the user is not a direct member of any of ...
2
votes
1answer
1k views

Should I use suPHP or DSO (mod_PHP) when php scripts need to manipulate files?

I recently asked a question on StackOverflow and I'm going to re-ask it here as a different question and with some changes and additional information. I have a bunch of php scripts that need the ...
1
vote
1answer
238 views

(Server 2008) Changing file permissions of a folder after moving it from another user

I've recently started using a GPO to force users 'My Directory' folder to forward to c:\home on the server. This is working fine so far. The issue I'm running into is that since nothing like this ...
1
vote
0answers
828 views

What does the red x icon mean next to a user in folder permissions (Windows 7)

In trying to debug various strange issues on a machine, I found something strange - when I go to C:\Users\administrator and get properties, security tab, it lists the users (the local admin account, ...
1
vote
1answer
390 views

How insecure are 775 permissions on Joomla core folders?

I recently uploaded a site with all folders set to -755 permissions and files to -644 permissions. But Joomla tells me "unwritable" for all folders listed under Directory Permissions. Now I changed ...
2
votes
2answers
1k views

creating security groups from scratch - best practices

I need to create security groups in AD. I can identify the groups that I need, let's say they are: Management,Finance,Sales & Engineering. And I can identify the resources that each group requires ...
-1
votes
2answers
738 views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...
1
vote
1answer
736 views

Security: How much access does TrustedInstaller need?

I'm trying to lock down my IIS and SQL servers. I have a checklist of items to check, but the checklist does not take into account the TrustedInstaller account, which seems to have file permissions ...
1
vote
2answers
74 views

Basic IIS7 permissions question

We have a website, with a file: www.example.com/apis/httpapi.asp This file is used by the site internally to make requests joining two systems on the website together (one is Classic ASP, the other ...
1
vote
1answer
668 views

File permissions on web server

I have just read this useful article on files permissions, and I am about to implement a as-strict-as-possible file permissions policy on our webserver. Our situation: we have a web server accessed ...
0
votes
1answer
124 views

Windows Domain Controller “Security Folder” Permissions

anybody know if on %WindowsPath%\security the "Authenticated Users" and "Server Operators" must have "Traverse Folder" permissions on a Domain Controller (Windows 2003). An external audit over my ...
0
votes
1answer
232 views

Wizard or script to assign folder permissions

I'm new to server support; spending most of my time in desktop support. I've been given a request to add read-only access to a list of subfolders on a Windows 2003 Server. Rather than adding the ...
3
votes
1answer
2k views

What should be the persmissions of apache ssl folder

I have my cert.pem and cert.key files in /etc/apache2/ssl folders. What would be the most secure permissions and ownership of: 1) /etc/apache2/ssl folder 2) /etc/apache2/ssl/cert.pem file 3) ...
1
vote
1answer
290 views

Security / Permissions when multiple sites accessing single directory : SuPHP

I am on a HostGator "Basic" Dedicated linux server. A current project calls for an image library that is accessible from multiple sites on the server. We are running SuPHP so each site has a ...
1
vote
2answers
222 views

Should I set permissions to 777 for setup and config file?

I am writing a large PHP application (with setup) for the first time and am wondering about the security precautions I should take for permissions. setup.php uses uses fopen/fwrite to generate a ...
0
votes
1answer
286 views

Secure file ownership/permission sets for different files in /var/www

I'm trying to establish a set of secure ownership/permission standards for /var/www on my server. The ownership is either apache or not-apache, and the permissions are anything from 000-777. Here's ...
1
vote
1answer
2k views

In a “Full Control” folder, deny “rename & delete” on some specific subfolders

I have a folder 'Clients' where users can create & delete files and folders as they want. I allowed the groups of users Read, Read&Execute, Modify & Write Permission. I want to create in ...
4
votes
3answers
110 views

Why give owner anything other than 7 for file permissions?

In Unix-like OS's, what's the point of giving the owner of a file anything less than 7 (rwx) for file permissions? The owner can trivially change the owner permissions for his/her files, and so can a ...
1
vote
0answers
592 views

Windows Server 2008 Web Edition can't change permissions

I'm used to using Windows Server 2003 but decided to get a Vista Web Edition for IIS7 and to run our MVC applications on. I have installed copSSH that I use for SFTP, and when I upload my files I am ...
2
votes
4answers
2k views

Finding all files in NTFS with specific user or group in ACL

Executive summary: I want to find all the directories and files a particular user or group has access to. In more detail: I'm looking for a command-line tool to recursively search an NTFS directory ...
0
votes
3answers
5k views

Can I see Folder Permissions on Windows in a Tree View?

Is there a way to see folder/file permissions in a collapsable tree view in Windows? What I think I need is something like: + folder1 - EntAdmins[RWX],JoeBloggs[R--],Administrators[RWX]] + folder2 - ...