Most current file systems have methods of administering permissions or access rights to specific users and groups of users. These systems control the ability of the users to view or make changes to the contents of the filesystem.

learn more… | top users | synonyms (1)

3
votes
2answers
807 views

How to tell the difference between “No such file or directory” and “Permission Denied”

I'd rather not parse STDERR, but I can't think of another way to tell the difference, programmatically, between the two: $ ls /net/foo.example.com/bar/test /net/foo.example.com/bar/test: Permission ...
2
votes
3answers
1k views

UBUNTU: ftp-server cannot change directory when user logs in

I have set up a FTP-server (vsftpd) for only one client user (ftuser). This user should have access to the folder /srv/webroot/user. The folder /srv and all subfolders are owned by me. I am not in the ...
0
votes
1answer
309 views

How do I allow users to add/modify files in a directory but not change the directory - Linux

How can I modify a directory so that it is owned by a group and users in that group can add and delete files and create sub directories but are unable to change the permissions on the parent ...
2
votes
1answer
266 views

Removing deny everyone permissions from GPO

As part of the workaround for CVE-2014-1776 I created a group policy object that applied Deny permissions to everyone on VGX.DLL. I am now trying to undo this group policy and having a lot of ...
0
votes
1answer
582 views

Capistrano fails to delete folders/files created by Apache

Problem Capistrano deploys a web application via SSH using deploy user. Apache/PHP runs under typical www-data user. Web server is creating cache files and folders at runtime inside the app path. ...
-1
votes
2answers
72 views

apt-get installation of nginx leaves files owned by root

This was originally posted on stackoverflow, but it was recommended that I post it here: http://stackoverflow.com/questions/23274818/apt-get-installation-of-nginx-leaves-files-owned-by-root/23346149 ...
-1
votes
1answer
77 views

Corrective action for file security after Windows server rename

I have renamed a Windows Server using the Control Panel feature. This worked fine at first. Today I noticed that I was unable to rename a certain file that I always was able to rename before. This ...
0
votes
1answer
98 views

Give user permission to create/delete particular file?

Is it possible to give a user permission to create/delete a file at a certain path, but not to modify other files in the same directory?. I'm using Ansible to provision a CentOS 6.4 box. I'd like to ...
1
vote
1answer
1k views

Rsync file permissions

I am building a script to copy files from a remote server. The problem is, the remote servers file permissions are pretty whack and I don't want to copy these over. The line in my script right now is ...
1
vote
1answer
15k views

What is the t in drwxrwxrwt or the value of t? [duplicate]

ls -al / shows a folder: drwxrwxrwt 2 root root 4096 Feb 26 09:00 tmp What does the last character t mean in drwxrwxrwt?
2
votes
2answers
2k views

Permissions won't cascade more than 1 level

Running Windows Small Business Server 2011 I have a file structure with a lot of sub folders (sometimes 5-6 levels deep). I have created access groups to grant access to my users, and also deny ...
-1
votes
2answers
83 views

Is ZIP archive capable of storing permissions?

I am using Maven Assembly plugin to bundle my application along with configuration/settings files. It allows to specify persmissions to be stored along with files, which is quite convenient. Still I ...
-1
votes
2answers
371 views

How to get Windows Server 2008 R2 File and Directory Permissions

I have a setup similar to this: e:\personal\username1\scans e:\personal\username2\scans e:\personal\username3\scans e:\personal\username3\scans Permissions are not inherited on these directories. I ...
1
vote
1answer
723 views

Owncloud data folder in /home

I've installed an owncloud server to share it with 7 others people. I have set a symbolic link from their data folder to their home (/var/www/owncloud/data/$USER -> /home/$USER/owncloud ). So every ...
2
votes
1answer
106 views

What is a secure set of permissions to give a set of files to be backed up?

On our server we have a number of users (i.e. clients) who need their code to be backed up. Their file permissions are usually 650 with user and group being user:user (where user is the actual user ...
0
votes
1answer
936 views

Can browse sysvol but not netlogon with Samba 4.1.5-SerNet-RedHat-7.el6 on CentOS 6.5

I have three servers: a Win2003 box running as the first AD DC, a 64-bit CentOS 6.5 box running Samba 4.1.5 x64 in AD DC mode, and a 32-bit CentOS 6.5 box running the same version of everything but ...
0
votes
3answers
217 views

make files on network shares undeletable

I am trying to make it so non administrator users cannot delete files on network shares. I've setup my NTFS permissions to do this and all seems to be working except when a user goes to save a new ...
0
votes
2answers
235 views

Using Jenkins to access mysql files on the same instance

I have a Jenkins installation and running mysql server on the same box. One of my jenkins jobs is supposed to tar up the /var/lib/mysql folder but I get the following error tar: ...
1
vote
1answer
597 views

How to Takeover a Folder when even Admins and SYSTEM has Access Denied?

I'm having a strange problem; a user seems to have 'tweaked' the permission of a folder so that not even a Domain Admin nor the SYSTEM account can take it over. icacls Folder /T /C /Q /RESET --> ...
1
vote
1answer
306 views

MongoDB starting gets terminating

I am installing the mongodb with the default configurations, and that gets started normally, but when I changed the dbpath value to point to different position it started giving me the exceptions, can ...
1
vote
1answer
597 views

Group permission inheritance and umask

Edit: in my case virtual_use_local_privs=TRUE did the trick. i'm trying to force newly created files and directories inside foo/ directory to be owned by nginx user and to set the right permissions ...
1
vote
0answers
132 views

How to secure tmp directory from hard link attacks when host doesn't allow partitioning

I'm a new sysadmin in the making, have learned that I need to have /tmp and /home directories on separate partitions in order to prevent possibilities of privilege escalation through hard links based ...
6
votes
1answer
859 views

Permissions when copying/moving on the same volume on a Windows 2008 R2 server

Does http://support.microsoft.com/kb/310316 still apply to 2008 R2? I see other questions here on SF like: How to workaround the NTFS Move/Copy design flaw? that discuss the issue, but I was ...
4
votes
3answers
158 views

How to maintain file/folder ownserhip and permissions over time?

We have folders on a number of our (debian) servers that require various users (both real and system) to be able to read and/or write. We've come up with a particular file permissioning and ownership ...
1
vote
1answer
222 views

Alfresco : Import FileSystem permissions w/ Bulk Filesystem Import Tool

I have Alfresco 4.2.c installed on a Windows Server 2012, linked, sync and SSO to a LDAP (working great). I'm trying to use BFI (https://code.google.com/p/alfresco-bulk-filesystem-import/) to import ...
2
votes
1answer
185 views

Preserving file rights when copying a folder on Windows Server

We have a shared network drive running Windows Server at work. One of the folders contains sensitive information that should only be visible to a small group of people. The problem is that if one of ...
1
vote
1answer
117 views

Adding Domain Admins Full access permissions to all files/folders on a drive

I am experiencing some DFSR-related issues where I am seeing quite a few 'access denied' errors as well as having my netbackup jobs skip most folders. I have noticed that when we migrated the users to ...
0
votes
3answers
3k views

root cannot access user's home folder shared via NFS

We have a local server that exports an NFS share, used as parent directory for Linux home folders in the network. The users authenticate via LDAP (running on the same server). Authentication works ...
0
votes
1answer
51 views

How to set up virtualhosts on Ubuntu dev machine in arbitrary directories, with write permissions for Apache and me?

I am on my XUbuntu 12.04 development machine, and I have installed the LAMP stack using tasksel install lamp-server. I've been trying to set up virtualhosts in my personal projects directories, ...
1
vote
2answers
141 views

Puppet - 2.7.x - Set SGID

Im trying to puppetize a module which will ensure I have the same path on servers for storing local log files for custom web applications. As such I would like to set the SGID to ensure that even if ...
1
vote
1answer
4k views

Inheritable NTFS permissions and preventing user folder access Windows Server 2003/2008

A little bit of background: We currently use Windows Server 2003 and AD to control users and their data(we are looking at updating to Server 2008 R2 at some point in the medium future, but not ...
0
votes
2answers
613 views

How do I set nginx's cache files to file permissions 777?

I'm trying to write a process that invalidates the cache on nginx (and doesn't re-warm the cache). By default, nginx has 700 on its cache files. The closest setting that I could find was: ...
1
vote
3answers
88 views

Is this normal that www-data still needs to have read and execute permissions on htdocs when using PHP-FPM?

I have setup an Apache+PHP-FPM environment and I have set the following in the PHP-FPM pool file: [www] user = mary group = mary listen = 127.0.0.1:9000 pm = dynamic pm.max_children = 8 ...
0
votes
2answers
96 views

IIS: directory only accessible from/over a specific subdomain

to explain my purpose, this example of a directory structure: C:\www\ C:\www\folder-1 The domain "example.com" has "C:\www\" as home directory, and the domain "member.example.com" has the home ...
2
votes
2answers
633 views

Samba/Cifs: Transferring executable permission bits to linux client

I'm trying to get my linux smb/cifs client recognize the executable bits that are set on some files on a share on a linux smb server. Here is our setup: Linux server exporting some directories via ...
1
vote
1answer
2k views

Managing folder access by subfolder permissions to simplify management on windows share

I have a Windows shared folder that contains a two level hierarchy. The permissions are managed by security groups. The interesting permissions are set in the second level. A first level folder should ...
2
votes
1answer
93 views

Dynamic Access Controls limit user access to file based on file metadata and SQL Server table

I'm looking into Dynamic Access Controls as a way to limit user access to files in my file share, but I don't know if it can do what I am trying to do. All of the files in my share have custom ...
1
vote
1answer
826 views

Can't delete directory as root

i've created a directory for a nodejs app some time ago, called blog. The app was started with forever start app.js, nothing special. Now i tried to delete the entire app with folder, i stoped the ...
1
vote
2answers
960 views

how to test as local SYSTEM account? (accessing remote files from Python)

I'm trying to access some remote files from a web application server. Let's call them servers M and R. Both are running Windows Server (2008 and 2003). The remote files are on server R on a file ...
1
vote
1answer
256 views

Windows 2008 Share Perimssions and NTFS Write Attributes Permission

It appears that there has been a subtle change in the way that share and NTFS permissions interact in Windows 2008 R2. In our application, we need to set the Write Attributes permission on in order to ...
4
votes
2answers
193 views

How to copy the permissions of a file to another?

Say I have two files: -rw-rw-r-- 1 webapp webapp 215 Jun 21 2012 index.php -rw-rw-rw- 1 root root 58 Dec 17 11:02 patch.log I would like to give patch.log the same permissions as ...
0
votes
1answer
127 views

Make my git user and apache user have read/write/delete access

I am having permission problems on my server. I use user developer to pull my git repository on the server. Then apache uses its own apache user to do write and execute code. I always have the ...
0
votes
1answer
81 views

Application Data Redirection Permissions [closed]

I setup application data redirection for my users (which is needed due to my users using different computers all the time and their expectation of getting the same user experience on each machine). ...
2
votes
4answers
13k views

Key-Based SSH Permission denied (publickey) Ubuntu 12-04

I have configured sshd to accept key-based ssh logins with LogLevel on DEBUG, and uploaded my public key to ~/.ssh.authorized_keys, where permissions are set as: 700 ~/.ssh 600 ~/.ssh/authorized_keys ...
1
vote
2answers
152 views

Removing Nested Folders where permissions are invalid and folder names are to long

I appears we have become a victim of not using the /XJ in a robocopy command, and we have ended up with a mass of nested folders. We want to get rid of them, but we can use the normal methods of ...
1
vote
1answer
225 views

Debian - File Permissions and umask

This might be a noob question, but here goes ^^: I've just set up a debian wheezy server, and Installed laravel on it. Anyway, I'm having some trouble both as to what the file permissions should be, ...
1
vote
1answer
116 views

NTFS permissions: clarifications sought

After reading the following page to update myself on how NTFS file, folder, and share permissions work, I am left with a few questions and hope to receive some answers on this group: ...
2
votes
1answer
100 views

Prohibit users to copy a file in a TSE environment

I'm using Windows Server 2008 R2 with Terminal Server. The users are using a Ms Access database. I would like to prohibit users to copy the database on their computer, but they must be able to use ...
1
vote
1answer
58 views

Server 2012 file server security - File access through software only? [closed]

I have just setup a server 2012 essentials R2 box as a test bed for my small business. Its running Essentials R2 as a VM on a Essentials R2 host. I have set it up to be the DC and DHCP server and ...
-1
votes
1answer
171 views

Why clustered windows service doesn't authenticate to share with machine name when share is resident on same node of cluster

I have a windows 2012 failover cluster set up with multiple roles, one file share role, and another a generic role for hosting Generic windows services configured to logon as Network Service. The ...