Most current file systems have methods of administering permissions or access rights to specific users and groups of users. These systems control the ability of the users to view or make changes to the contents of the filesystem.

learn more… | top users | synonyms (1)

147
votes
3answers
95k views

What's the best way of handling permissions for apache2's user www-data in /var/www?

Has anyone got a nice solution for handling files in /var/www? We're running Name Based Virtual Hosts and the apache2 user is www-data. We've got two regular users & root. So when messing with ...
22
votes
2answers
19k views

What does a + mean at the end of the permissions from ls -l?

What is the plus sign at the end of the permissions telling me? ls -l total 4 drwxrwxrwx+ 2 benson avahi-autoipd 4096 Jan 27 17:37 docs Here's the context: cat /etc/issue \CentOS release 5.3 ...
20
votes
8answers
2k views

Restrict a Linux user to the files he owns

Imagine a server setup of a shared webhosting company where multiple (~100) customers have shell access to a single server. A lot of web "software" recommends to chmod files 0777. I'm nervous about ...
14
votes
7answers
8k views

Copy permissions to identical tree on linux / unix

i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions. how can i transfer the permissions layout from ...
10
votes
2answers
434 views

How are r— directory permissions supposed to work on Linux?

I have created directory a created has these permissions - the other user has drwxr--r-- 5 user user 4096 2012-09-15 19:30 sites When do an ls -l on the directory as another user ls -l ...
9
votes
2answers
2k views

DFS replication and the SYSTEM user (NTFS permissions)

Question for which I'm having trouble finding an answer on Google or Technet... Does granting the SYSTEM user permissions to DFS-shared files and folders have any effect on DFS replication? (And ...
8
votes
3answers
551 views

My server Admin wants me to set public write permissions on a directory

I'm relatively new to web development, so please be patient. I'm primarily an iPhone developer, but have recently done a site for someone else using shared hosting. I could write to files in PHP on ...
8
votes
1answer
3k views

setfacl to reset file to default permissions?

I have a directory with the following default ACLs: default:user:phptutor:rwx However, none of the files/directories in that directory have that default permission (because it was added after they ...
8
votes
3answers
9k views

Can Samba support full Windows-ACLs?

I've set up a Samba 3 host with AD integration and an ACL enabled filesystem. Using a windows client I can set users and groups permissions. Up to now, Samba just maps to POSIX ACL's rwx permissions, ...
7
votes
3answers
3k views

A network share folder is invisible to users

I have a network share folder that I was recently cleaning up permissions to. I took off the four individual names from the access permissions to the folder, and added a new security group (Universal) ...
7
votes
1answer
604 views

Do /usr/local and /usr/local/bin need to be group-writable? If so, why?

While it's possible that it's a fluke of a package I installed or the VPS image, it appears that /usr/local and /usr/local/bin (both of which are owned by root:staff) are group-writable by default on ...
7
votes
4answers
468 views

Is it Secure to Grant Apache User Ownership of Directories & Files for Wordpress

I'm currently setting up WordPress on an Ubuntu server 12 everything runs fine but there is an issue when it comes to automatically updating and uploading media via WP as Apache "www-data" user does ...
7
votes
1answer
5k views

What do you do to fix corrupted or blocked permissions on company file shares?

Lately I have been working with one of our storage guys on a project that has involved some scrutiny of big file shares that have been used by the company for years. Frequently, we run into ...
6
votes
2answers
948 views

Why can the root user edit read-only files, but a regular user with sudo access can't?

If you try to append to a file with no write permissions (say, the /etc/sudoers file which is is owned by root and has 0440 permissions), if you're the actual root user, this works. However, if you're ...
6
votes
3answers
21k views

How do I force specific permissions for new files/folders on Linux file server?

I'm having an issue with my install of Ubuntu 9.10 (file server) and its samba permissions. Logging in and reading works fine. However, creation of new directories by users restricts access for other ...
6
votes
4answers
7k views

What is the most secure way to allow a user read access to a log file?

My application requires read access to /var/log/messages, which belongs to user and group root. What is the minimal exposure level required on /var/log/messages so my application can read it? ...
6
votes
3answers
3k views

wget starts downloading then stops “cannot write to”

I'm using wget to mirror some files across from one server to another. I'm using the following command: wget -x -N -i http://domain.com/filelist.txt -x = Because I want to keep the directory ...
5
votes
3answers
2k views

Can Linux file permissions be fooled?

I came across this example today and I wondered how reliable Linux file permissions are for hiding information $ mkdir fooledYa $ mkdir fooledYa/ohReally $ chmod 0300 fooledYa/ $ cd fooledYa/ $ ls ...
5
votes
2answers
2k views

push commits to git (gitolite) repository messes up file permissions (no more trac access)

already posted here so feel free to answer there. everytime i commit/push something to the git server the file permissions change (all added/edited files in the repository have no read and execute ...
5
votes
4answers
9k views

Permission issues with Samba and OS X

I'm having some serious permission issues with Mac client machines (OS X Snow Leopard) connected to a UNIX server (running CentOS) through Samba. No matter which permissions I set for a file on the ...
5
votes
2answers
919 views

Improved ACL editor for Windows file permissions

I have recently been doing a lot of updates to our network drive permissions... such as consolidating direct user permissions into group permissions. The built-in ACL editor (Advanced Security ...
5
votes
1answer
368 views

How to not move permissions on fileserver file move

I have a problem with a NetApp file server with Windows XP clients. The files are on a single SAN drive. The users regularly move files from \\storage\share to their personal folder at e.g. ...
5
votes
1answer
4k views

How to set default umask for Tomcat webdav servlet?

The title says it all. I need Tomcat's webdav servlet to create files with rw-rw-r-- rights, but it keeps creating it as rw-r--r--. I tried to set up umask in /etc/profile, but it didn't help ...
5
votes
1answer
5k views

Folder permissions, red x on user object

On shared folders on the file server, for the domain user name object under the security tab, the icon has a red x. There are no symptoms, the users have full access, there is just a red x on the ...
5
votes
1answer
442 views

Permissions when copying/moving on the same volume on a Windows 2008 R2 server

Does http://support.microsoft.com/kb/310316 still apply to 2008 R2? I see other questions here on SF like: How to workaround the NTFS Move/Copy design flaw? that discuss the issue, but I was ...
5
votes
1answer
108 views

Who is the “author” of a file (Gnu “ls” manual)

In the manual for Gnu "ls," I see this: --author with -l, print the author of each file Does anybody know what the “author” of a file means in this context? This is (maybe?) not the ...
4
votes
5answers
626 views

-rwxr-xr-x@ meaning

I have a file with an @ after the permissions -rwxr-xr-x@ 1 riccardotacconi staff 215 14 Sep 14:21 Capfile Do you know its meaning. I am deploying a Rails application using Capistrano. That ...
4
votes
3answers
7k views

Log file permissions in Linux

I am trying to write a simple script that monitors /var/log/messages file. The file by default doesn't have read permission for users, when I allow read access to this file my script works perfectly, ...
4
votes
4answers
6k views

Allow user to change permissions on a folder, but not remove/change Domain Admins access?

We're a small college, and I have one file share for an athletics team that I want to turn over to the coach. We don't track or have a group for athletic team members in Active Directory, and the ...
4
votes
3answers
1k views

Are Windows file permissions bound to the file, or the file system location?

Do Windows file permissions follow: The file, or... The file system location Say I have a file at "C:\MyFile.txt". I set some very specific permissions on this file. Later, I copy a new file ...
4
votes
4answers
15k views

Copy file permissions from one directory to another

Over the weekend I copied our company data from one hard drive to another larger one. I thought permission would have copied across but they haven't. What is the best (and quickest) way to copy the ...
4
votes
3answers
1k views

How do I add permissions to group to match user permissions?

Some one messed up /usr/local/ permissions, so that nobody else can access it. Now I would like to duplicate user permissions to group permissions, since chmod g+rx -R /usr/local is unsafe. How should ...
4
votes
1answer
3k views

What should be the persmissions of apache ssl folder

I have my cert.pem and cert.key files in /etc/apache2/ssl folders. What would be the most secure permissions and ownership of: 1) /etc/apache2/ssl folder 2) /etc/apache2/ssl/cert.pem file 3) ...
4
votes
3answers
201 views

Proper permissions for two developer team on PHP5 Apache Linux server

I was hoping someone could point me in the right direction regarding Linux permissions. I understand how to calculate what permissions are, understand the methodology behind changing them and can ...
4
votes
3answers
110 views

Why give owner anything other than 7 for file permissions?

In Unix-like OS's, what's the point of giving the owner of a file anything less than 7 (rwx) for file permissions? The owner can trivially change the owner permissions for his/her files, and so can a ...
4
votes
1answer
142 views

What security mechanism prevents write access to certain folders in Windows?

There are certain folders in Windows 2012 R2\8.1 where the contents are not writable - one example is Program Files\WindowsApps (which stores apps downloaded from the Windows Store). Obviously this is ...
4
votes
1answer
139 views

Tool to see nested permissions?

Here's the situation. Often I need to tell how a user is getting access to a specific folder. I can see in "Effective permissions" that they have read/write/etc, but because of nested groups I can't ...
4
votes
1answer
611 views

etckeeper, Git checkout, and broken file permissions in /etc

I wanted to figure out why, after a etckeeper commit, I had a problem with rebooting (already solved thanks to this great thing). I played with etckeeper, did git checkout some_commit_sha for a quick ...
4
votes
3answers
131 views

How to forbid drag'n drop for a Windows XP folder?

Some of users here sometimes mistakenly drag'n drop a folder. Is it possible to forbid them to move and rename a folder? They are all using Windows XP. The folder is on the network. They should be ...
4
votes
3answers
135 views

How to maintain file/folder ownserhip and permissions over time?

We have folders on a number of our (debian) servers that require various users (both real and system) to be able to read and/or write. We've come up with a particular file permissioning and ownership ...
4
votes
3answers
6k views

Is it possible to grant rename permissions, but not delete, in NTFS?

We have a folder for employees to scan contracts to. After scanning, they're supposed to rename them according to our conventions so they can be processed further. In response to a recent incident, ...
3
votes
3answers
1k views

Copy a file's owner permissions to group permissions

How can I copy a file's user/owner permissions to it's group permissions? For example if the permissions are 755 I want them to become 775. Clarification: 755 -> 775 123 -> 113 abc -> aac Bonus if ...
3
votes
2answers
121 views

How to copy the permissions of a file to another?

Say I have two files: -rw-rw-r-- 1 webapp webapp 215 Jun 21 2012 index.php -rw-rw-rw- 1 root root 58 Dec 17 11:02 patch.log I would like to give patch.log the same permissions as ...
3
votes
5answers
394 views

Backup unix files to filesystem which doesn't allow chgrp/chown etc

I unfortunately have no choice but to backup some files from a ext3 parition on a server to a filesystem which does not allow me to set and edit the normal file attributes (NFS, with all_squash set so ...
3
votes
2answers
965 views

Allow non root access to /root folder

I have a folder that normally lives under /root and is usually used by a root user. I need to allow another user (other than root) to use it now, but it has to remain under /root. Is that possible? ...
3
votes
2answers
546 views

How to tell the difference between “No such file or directory” and “Permission Denied”

I'd rather not parse STDERR, but I can't think of another way to tell the difference, programmatically, between the two: $ ls /net/foo.example.com/bar/test /net/foo.example.com/bar/test: Permission ...
3
votes
3answers
1k views

How can I programmatically change file permissions from one AD domain user to a separate AD domain user?

We are in a colocated RackSpace facility in San Antonio, with an active directory named "SAT". We are being moved to their Dallas/Ft. Worth facility, with an active directory named "DFW". These ...
3
votes
2answers
3k views

Setting umask for all users

I'm trying to set the default umask to 002 for all users including root on my CentOS box. According to this and other answers, this can be achieved by editing /etc/profile. However the comments at ...
3
votes
1answer
6k views

Dovecot 2 /auth-userdb permissions

Error in log file: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not ...
3
votes
2answers
973 views

Symbolic link to mysql database

I had to make a symbolic link on one of databases to another location on MySQL (Debian 6.0). So /var/lib/mysql/dbname points to /home/user/dbname, but MySQL gives MySQL error: 1017 (Can't find file: ...