Most current file systems have methods of administering permissions or access rights to specific users and groups of users. These systems control the ability of the users to view or make changes to the contents of the filesystem.

learn more… | top users | synonyms (1)

1
vote
1answer
73 views

user and groups for LAMP

I have written a script that installs a LAMP environment and a few other helpful programs. All of this has been installed under root. I would now like to create a new user called webmaster that will ...
1
vote
1answer
255 views

Why are nginx configuration files read-only on FreeBSD?

After installing Nginx on FreeBSD 8.3 from ports, the configuration files in /usr/local/etc/nginx all have read-only permissions. Is there a reason for this? Am I not supposed to edit them? Or can I ...
1
vote
2answers
71 views

ubuntu file permissions under /

I want to make my ubuntu 12.04 server a little more secure. Actually I would like to have paranoid security as of file permissions and a usable system as well. (this is my main goal) For starters I ...
1
vote
1answer
598 views

Change USB device owner

I have a USB printer that when I connect to the computer it's owned by the user root and the group lp, and it's file permission is rw-rw----, so I have to print via apache/php script. To solve this ...
1
vote
2answers
620 views

All my files uploaded have unusable permissions

I've just moved to a new server and have come across some strange permissions issues. Every file I upload has permissions of 600, owned by the user account and is also in the same group. With this ...
1
vote
1answer
425 views

Why can't a user in my group write to this file?

I have a file on server that can be written by a group. The group is called "deploy" and the user is "mima." I have verified "mima" is in "deploy" with: $ id mima uid=1001(mima) gid=1002(mima) ...
1
vote
1answer
239 views

Windows 2008 Share Perimssions and NTFS Write Attributes Permission

It appears that there has been a subtle change in the way that share and NTFS permissions interact in Windows 2008 R2. In our application, we need to set the Write Attributes permission on in order to ...
1
vote
1answer
325 views

group permission not working

I'm installing gitlab at my server but I got a permission problem: I have two users, 'git' and 'gitlab', both are part of group 'git', the home dir of 'git' has the drwxr----- permissions. Therefore ...
1
vote
1answer
262 views

Restore /var owner and group (mysql and apache needed)

Huh, I feel kinda dumb right now. Just did an chown -R www-data:www-data .* and voilá, /var is all messed up. Already fixed some to root, but mysql refuses to start. How can I restore the ...
1
vote
1answer
2k views

Permission error with git on linux with bare shared repo

I've got a bare central repo that has this option turned on: git config core.sharedRepository true For some reason, the other users on this CentOS machine that pulls/pushes from the central repo ...
1
vote
3answers
177 views

The secure linux server by dir permissions

I am using php on Linux / Apache server. I have Three type of directories like as |_ Writeale Directory |_ PHP Files |_ Image Files Writeable Directory would used only by PHP to writing some txt, ...
1
vote
3answers
14k views

Apache2 - How to setup the directory permissions of website folder?

I'm using a CentOS for serving PHP webpages. I have various websites inside "/svr/www"... My problem is that I created folders like: /svr/www/website1.com /svr/www/website2.com And this folders ...
1
vote
2answers
55 views

Securing file content in folders under Windows

Is there a way to allow a user to create a file in a folder under Windows, but not allow them to edit the contents of the files? This would be analogous to setuid on FreeBSD systems, where files ...
1
vote
2answers
2k views

Windows 2008 folder has lost all permissions, can't be deleted, edited or permissions changed

I was testing a batch file that used the following dos command rmdir test2 /s /q, this command failed part way through and now I seem to have folders that have no permissions. For example, in the ...
1
vote
2answers
938 views

adduser with a read / write to only one directory

I have CentOS with one ssh user which is root. How do I make one more user for my web developer so he can scp files over to /var/www/html ? Its gonna be a static page, so mysql and alike are out of ...
1
vote
2answers
1k views

How to check and change permissions of files and folders for web server in windows?

I have installed Apache server on Windows 7. When I try to access the server by its IP address I get in Chrome: Forbidden You don't have permission to access / on this server. In IE I ...
1
vote
2answers
15k views

How do I find out how an Active Directory group is being used?

Here's the scenario. I have an Windows 2003 Active Directory security group that was created in 2007, and no one remembers what it is for. Is is possible to find out what permissions in our AD ...
1
vote
2answers
996 views

How do I setup Linux running in a VMware Fusion VM so directories created in shared storage have write access?

I have Ubuntu (Ubuntu 8.04.3 LTS) running in a VMware Fusion VM, and I'm sharing my Mac's home directory using Fusion's sharing feature. I've created a subdirectory in my home directory and used the ...
1
vote
1answer
55 views

Linux CentOS: A server throws weird error messages, can you speculate why?

There's a server in my company which is part of the production environment. On the server there's an ActiveMQ server running. I logged into the Active-MQ UI and tried to create a new queue. When I ...
1
vote
1answer
56 views

How do you control the file ownership of a socket managed by launchd

I'm working on writing a daemon that talks to other daemons in the same project over UNIX sockets. For security purposes, it's critical that these daemons only talk amongst themselves (and can't, for ...
1
vote
1answer
55 views

Changing default ownership for files created by a user

I gave user "jdoe" access to SCP files onto a Unix server hosting Wordpress. Files this user creates within the /var/www/Wordpress folder (and subfolders) need to be owned by www-data or at least the ...
1
vote
3answers
1k views

Why can't apache create log files?

I have a simple LAMP stack on CentOS setup. Apache is setup with vhosts and each developer has their web files inside their user folder. The directory structure is like so (for the user test): ...
1
vote
1answer
74 views

Adding Domain Admins Full access permissions to all files/folders on a drive

I am experiencing some DFSR-related issues where I am seeing quite a few 'access denied' errors as well as having my netbackup jobs skip most folders. I have noticed that when we migrated the users to ...
1
vote
2answers
126 views

Puppet - 2.7.x - Set SGID

Im trying to puppetize a module which will ensure I have the same path on servers for storing local log files for custom web applications. As such I would like to set the SGID to ensure that even if ...
1
vote
1answer
630 views

Can't delete directory as root

i've created a directory for a nodejs app some time ago, called blog. The app was started with forever start app.js, nothing special. Now i tried to delete the entire app with folder, i stoped the ...
1
vote
1answer
58 views

Can not move SQL Primary File

In the process of moving/upgrading old SQL server 2005, I need to move some sharepoint PWA datafiles. After detaching the database from the files, I am trying to copy/move the DB files from their old ...
1
vote
2answers
80 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
207 views

PHP file upload system security implications

i've build a small upload system using PHP, it is working just fine for now however, the problem i have is the way i've got it to work. I don't have much of a background in security, but is what i'm ...
1
vote
1answer
1k views

How to list all NTFS and share permissions associated with a user or security group?

We are doing some tidying up of Active Directory on our SBS 2003 domain controller. A number of security groups exist which I am 95% sure are redundant. I want to be 100% sure they are not used ...
1
vote
1answer
2k views

How to make IIS 7 application pool run under an AD account?

I have an internal company web application that needs read permissions on certain folders in our LAN. The permissions on these folders are controlled by our Active Directory server. Since by default ...
1
vote
1answer
197 views

Git prime/hub website deployment: documentroot changes save fine but permission denied for subdirectories

Following the instructions in A web-focused Git workflow I set up a prime and hub repository on my web server and then cloned the hub to my machine at home. I started testing commits and pushes with ...
1
vote
1answer
110 views

Create files but not modify the created file or any other file in a directory

Is it possible using Windows standard tools to create such a permission model where a user can create a file in a directory, but once the file has been created (file handle closed), the user can not ...
1
vote
2answers
3k views

ICACLS Substitute Failing “No mapping between account names and security IDs was done.”

Running a really simple ICACLS command after I copied a directory over to a new server with permissions intact. I need to change a SID from an old server user group to a new server user group. ...
1
vote
1answer
287 views

Set default file permissions: Creating files on Linux with group write permission

I am running openSUSE 11.0 on a server which is copying (and processing) a lot of files. The new folders, which were received by some service running, have the default permissions drwxr-sr-x and the ...
1
vote
1answer
324 views

How to give “only append” access to user in windows , for logging purposes

Hi I have a powershell script which takes some data and dumps into a logfile whenever its executed.The script resides in single location and shortcut is distributed to all. I want to log the events ...
1
vote
1answer
100 views

File Permissions - Service vs Console

We have just setup a new build Windows 2008 R2 server for our Jenkins CI system. Our issue appears to be related to file permissions being different depending on whether a process is a service, or a ...
1
vote
1answer
312 views

How to check for the existence of unreadable files before passing it to a fastcgi backend?

I have several PHP sites which I want to separate in terms of permissions. Therefore I created a new user and set up a PHP pool for those users. Consider the below configuration: PHP-FPM is running ...
1
vote
2answers
585 views

nginx and php-fpm - Cannot write PHP error log

I am using Nginx and PHP-FPM on Linux. I am not sure whether the issue is that PHP is not writing to the location specified in the PHP.ini, or if it just isn't working at all. Some of the logs ...
1
vote
1answer
159 views

file content is different when running with administrator permissions

I'm having weird situation where i "see" diffrent versions of the same file when running program as administrator and when running it as non-privileged user. The file is sqlite's db3 file which ...
1
vote
1answer
363 views

Should backups be owned by root:backup?

I have a central backup server running Debian which holds backups of various other hosts in the network, stored in a structure like /media/backup/imap /media/backup/wiki With imap and wiki being ...
1
vote
1answer
479 views

(Server 2008) Changing file permissions of a folder after moving it from another user

I've recently started using a GPO to force users 'My Directory' folder to forward to c:\home on the server. This is working fine so far. The issue I'm running into is that since nothing like this ...
1
vote
1answer
178 views

Data loss through permissions change?

I seem to have deleted some files on my media drive, simply by changing the permissions. The Story I have many operating systems installed on my computer, and constantly switch between them. I ...
1
vote
1answer
436 views

Default permissions for courier imap folders

I'm using courier imap. When a mail client creates a new folder, it's created on the filesystem with 640 permission. I need it to be writable by the group, or 660. I currently have ...
1
vote
1answer
364 views

Safely execute custom script parts as sudo

In /usr/local/bin I've the following script called sdown /usr/local/bin$ cat sdown #!/bin/bash if [ $# -lt 1 ]; then echo "no time set" else sudo shutdown -h $1 fi Permssions are 788: ...
1
vote
1answer
237 views

Windows 2008 + IIS + Backup folder permissions or script to view all folders with X permissions?

I know how to backup IIS 7 configuration, but unaware of a way to backup which folder requires write permissions. If a server was to go down and I needed to restore, I could restore the config and ...
1
vote
1answer
4k views

vsftp “Access is denied” when writing as an authenticated user

I have set up vsftpd for private FTP. Only authenticated users in the ftp group can login. Also, every user is chrooted to its home directory (/home/username) chroot_local_user=YES I can log in, ...
1
vote
1answer
1k views

Don't have access to view objects permissions

Last week I provisioned a new Windows 2008 R2 box from my hosting company and copied my databases files to the file system. It became necessary to reimage the OS on the box so they left the database ...
1
vote
1answer
534 views

How insecure are 775 permissions on Joomla core folders?

I recently uploaded a site with all folders set to -755 permissions and files to -644 permissions. But Joomla tells me "unwritable" for all folders listed under Directory Permissions. Now I changed ...
1
vote
1answer
281 views

Audit folder permissions on a windows server

I have a number of servers in the corporate domain that seem to randomly lose ACL permissions to the TEMP folders (c:\temp, c:\windows\temp and any temp folder defined in the environment variables). ...
1
vote
1answer
344 views

What must the file permissions be for x-sendfile to work with apache

I have a Ruby-on-Rails application that I am hosting with Apache and Phusion-Passenger (on Ubuntu Server). In this app I have a controller method that basically protects access to some files based on ...