Most current file systems have methods of administering permissions or access rights to specific users and groups of users. These systems control the ability of the users to view or make changes to the contents of the filesystem.

learn more… | top users | synonyms (1)

1
vote
3answers
176 views

The secure linux server by dir permissions

I am using php on Linux / Apache server. I have Three type of directories like as |_ Writeale Directory |_ PHP Files |_ Image Files Writeable Directory would used only by PHP to writing some txt, ...
1
vote
3answers
14k views

Apache2 - How to setup the directory permissions of website folder?

I'm using a CentOS for serving PHP webpages. I have various websites inside "/svr/www"... My problem is that I created folders like: /svr/www/website1.com /svr/www/website2.com And this folders ...
1
vote
2answers
55 views

Securing file content in folders under Windows

Is there a way to allow a user to create a file in a folder under Windows, but not allow them to edit the contents of the files? This would be analogous to setuid on FreeBSD systems, where files ...
1
vote
2answers
2k views

Windows 2008 folder has lost all permissions, can't be deleted, edited or permissions changed

I was testing a batch file that used the following dos command rmdir test2 /s /q, this command failed part way through and now I seem to have folders that have no permissions. For example, in the ...
1
vote
2answers
920 views

adduser with a read / write to only one directory

I have CentOS with one ssh user which is root. How do I make one more user for my web developer so he can scp files over to /var/www/html ? Its gonna be a static page, so mysql and alike are out of ...
1
vote
2answers
1k views

How to check and change permissions of files and folders for web server in windows?

I have installed Apache server on Windows 7. When I try to access the server by its IP address I get in Chrome: Forbidden You don't have permission to access / on this server. In IE I ...
1
vote
2answers
15k views

How do I find out how an Active Directory group is being used?

Here's the scenario. I have an Windows 2003 Active Directory security group that was created in 2007, and no one remembers what it is for. Is is possible to find out what permissions in our AD ...
1
vote
2answers
941 views

How do I setup Linux running in a VMware Fusion VM so directories created in shared storage have write access?

I have Ubuntu (Ubuntu 8.04.3 LTS) running in a VMware Fusion VM, and I'm sharing my Mac's home directory using Fusion's sharing feature. I've created a subdirectory in my home directory and used the ...
1
vote
1answer
24 views

Linux CentOS: A server throws weird error messages, can you speculate why?

There's a server in my company which is part of the production environment. On the server there's an ActiveMQ server running. I logged into the Active-MQ UI and tried to create a new queue. When I ...
1
vote
1answer
49 views

How do you control the file ownership of a socket managed by launchd

I'm working on writing a daemon that talks to other daemons in the same project over UNIX sockets. For security purposes, it's critical that these daemons only talk amongst themselves (and can't, for ...
1
vote
1answer
48 views

Changing default ownership for files created by a user

I gave user "jdoe" access to SCP files onto a Unix server hosting Wordpress. Files this user creates within the /var/www/Wordpress folder (and subfolders) need to be owned by www-data or at least the ...
1
vote
3answers
971 views

Why can't apache create log files?

I have a simple LAMP stack on CentOS setup. Apache is setup with vhosts and each developer has their web files inside their user folder. The directory structure is like so (for the user test): ...
1
vote
1answer
63 views

Adding Domain Admins Full access permissions to all files/folders on a drive

I am experiencing some DFSR-related issues where I am seeing quite a few 'access denied' errors as well as having my netbackup jobs skip most folders. I have noticed that when we migrated the users to ...
1
vote
2answers
115 views

Puppet - 2.7.x - Set SGID

Im trying to puppetize a module which will ensure I have the same path on servers for storing local log files for custom web applications. As such I would like to set the SGID to ensure that even if ...
1
vote
1answer
428 views

Can't delete directory as root

i've created a directory for a nodejs app some time ago, called blog. The app was started with forever start app.js, nothing special. Now i tried to delete the entire app with folder, i stoped the ...
1
vote
2answers
109 views

Removing Nested Folders where permissions are invalid and folder names are to long

I appears we have become a victim of not using the /XJ in a robocopy command, and we have ended up with a mass of nested folders. We want to get rid of them, but we can use the normal methods of ...
1
vote
1answer
51 views

Can not move SQL Primary File

In the process of moving/upgrading old SQL server 2005, I need to move some sharepoint PWA datafiles. After detaching the database from the files, I am trying to copy/move the DB files from their old ...
1
vote
2answers
75 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
188 views

PHP file upload system security implications

i've build a small upload system using PHP, it is working just fine for now however, the problem i have is the way i've got it to work. I don't have much of a background in security, but is what i'm ...
1
vote
1answer
1k views

How to list all NTFS and share permissions associated with a user or security group?

We are doing some tidying up of Active Directory on our SBS 2003 domain controller. A number of security groups exist which I am 95% sure are redundant. I want to be 100% sure they are not used ...
1
vote
1answer
2k views

How to make IIS 7 application pool run under an AD account?

I have an internal company web application that needs read permissions on certain folders in our LAN. The permissions on these folders are controlled by our Active Directory server. Since by default ...
1
vote
1answer
188 views

Git prime/hub website deployment: documentroot changes save fine but permission denied for subdirectories

Following the instructions in A web-focused Git workflow I set up a prime and hub repository on my web server and then cloned the hub to my machine at home. I started testing commits and pushes with ...
1
vote
1answer
95 views

Create files but not modify the created file or any other file in a directory

Is it possible using Windows standard tools to create such a permission model where a user can create a file in a directory, but once the file has been created (file handle closed), the user can not ...
1
vote
2answers
3k views

ICACLS Substitute Failing “No mapping between account names and security IDs was done.”

Running a really simple ICACLS command after I copied a directory over to a new server with permissions intact. I need to change a SID from an old server user group to a new server user group. ...
1
vote
1answer
218 views

Set default file permissions: Creating files on Linux with group write permission

I am running openSUSE 11.0 on a server which is copying (and processing) a lot of files. The new folders, which were received by some service running, have the default permissions drwxr-sr-x and the ...
1
vote
1answer
283 views

How to give “only append” access to user in windows , for logging purposes

Hi I have a powershell script which takes some data and dumps into a logfile whenever its executed.The script resides in single location and shortcut is distributed to all. I want to log the events ...
1
vote
1answer
94 views

File Permissions - Service vs Console

We have just setup a new build Windows 2008 R2 server for our Jenkins CI system. Our issue appears to be related to file permissions being different depending on whether a process is a service, or a ...
1
vote
1answer
292 views

How to check for the existence of unreadable files before passing it to a fastcgi backend?

I have several PHP sites which I want to separate in terms of permissions. Therefore I created a new user and set up a PHP pool for those users. Consider the below configuration: PHP-FPM is running ...
1
vote
2answers
538 views

nginx and php-fpm - Cannot write PHP error log

I am using Nginx and PHP-FPM on Linux. I am not sure whether the issue is that PHP is not writing to the location specified in the PHP.ini, or if it just isn't working at all. Some of the logs ...
1
vote
1answer
147 views

file content is different when running with administrator permissions

I'm having weird situation where i "see" diffrent versions of the same file when running program as administrator and when running it as non-privileged user. The file is sqlite's db3 file which ...
1
vote
1answer
334 views

Should backups be owned by root:backup?

I have a central backup server running Debian which holds backups of various other hosts in the network, stored in a structure like /media/backup/imap /media/backup/wiki With imap and wiki being ...
1
vote
1answer
436 views

(Server 2008) Changing file permissions of a folder after moving it from another user

I've recently started using a GPO to force users 'My Directory' folder to forward to c:\home on the server. This is working fine so far. The issue I'm running into is that since nothing like this ...
1
vote
1answer
176 views

Data loss through permissions change?

I seem to have deleted some files on my media drive, simply by changing the permissions. The Story I have many operating systems installed on my computer, and constantly switch between them. I ...
1
vote
1answer
405 views

Default permissions for courier imap folders

I'm using courier imap. When a mail client creates a new folder, it's created on the filesystem with 640 permission. I need it to be writable by the group, or 660. I currently have ...
1
vote
1answer
342 views

Safely execute custom script parts as sudo

In /usr/local/bin I've the following script called sdown /usr/local/bin$ cat sdown #!/bin/bash if [ $# -lt 1 ]; then echo "no time set" else sudo shutdown -h $1 fi Permssions are 788: ...
1
vote
1answer
221 views

Windows 2008 + IIS + Backup folder permissions or script to view all folders with X permissions?

I know how to backup IIS 7 configuration, but unaware of a way to backup which folder requires write permissions. If a server was to go down and I needed to restore, I could restore the config and ...
1
vote
1answer
4k views

vsftp “Access is denied” when writing as an authenticated user

I have set up vsftpd for private FTP. Only authenticated users in the ftp group can login. Also, every user is chrooted to its home directory (/home/username) chroot_local_user=YES I can log in, ...
1
vote
1answer
1k views

Don't have access to view objects permissions

Last week I provisioned a new Windows 2008 R2 box from my hosting company and copied my databases files to the file system. It became necessary to reimage the OS on the box so they left the database ...
1
vote
1answer
505 views

How insecure are 775 permissions on Joomla core folders?

I recently uploaded a site with all folders set to -755 permissions and files to -644 permissions. But Joomla tells me "unwritable" for all folders listed under Directory Permissions. Now I changed ...
1
vote
1answer
275 views

Audit folder permissions on a windows server

I have a number of servers in the corporate domain that seem to randomly lose ACL permissions to the TEMP folders (c:\temp, c:\windows\temp and any temp folder defined in the environment variables). ...
1
vote
1answer
324 views

What must the file permissions be for x-sendfile to work with apache

I have a Ruby-on-Rails application that I am hosting with Apache and Phusion-Passenger (on Ubuntu Server). In this app I have a controller method that basically protects access to some files based on ...
1
vote
1answer
209 views

Limit AD group access to share files but not folders

I have an AD security group of accounts that I need to have access to some folders. They need to be able to traverse these folders into sub-folders, where they will be writing files. But these ...
1
vote
1answer
971 views

Security: How much access does TrustedInstaller need?

I'm trying to lock down my IIS and SQL servers. I have a checklist of items to check, but the checklist does not take into account the TrustedInstaller account, which seems to have file permissions ...
1
vote
3answers
5k views

How can give group in active directory folder access by group policy

I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have ...
1
vote
1answer
258 views

Ubuntu sftp default save permissions issue

I have a server running Ubuntu 8.04 LTS with sftp running on it. My problem is that when I access the server with sftp (using the username of one of my admin accounts, not 'root') and upload a file ...
1
vote
2answers
1k views

List existing file server permission groups/users

So we have taken over a new client and their existing file server is frankly a mess. We have migrated their old file server from a 2k box to a 2k8 DFS cluster and now I'm looking at rebuilding both ...
1
vote
1answer
312 views

Security / Permissions when multiple sites accessing single directory : SuPHP

I am on a HostGator "Basic" Dedicated linux server. A current project calls for an image library that is accessible from multiple sites on the server. We are running SuPHP so each site has a ...
1
vote
2answers
473 views

Server 2008 has been trying to “stop sharing” for > 3 hours. What do I do?

I copied a few million files from one disk array to another on a Server 2008 box. Then I wanted to move the share that people used to access those files, so it would point at the new location of the ...
1
vote
2answers
1k views

Can't move directories across disk boundaries with “move” at command line?

I need to move a huge list of directories from disk C (internal) to disk E (usb) on a Windows Server 2008 box. I'd planned to just make a big .bat file with thousands of "move" commands. Low-tech, but ...
1
vote
1answer
87 views

File Permissions: Who are the user, group, and others on my web server? What perms should i use for uploaded files, php files, etc.?

I am using cPanel with apache 2 and php 5.2. I have a file upload script, which currently puts the uploaded files in a directory with 0777 perms and the file itself also has 0777 perms. this is ...