Most current file systems have methods of administering permissions or access rights to specific users and groups of users. These systems control the ability of the users to view or make changes to the contents of the filesystem.

learn more… | top users | synonyms (1)

164
votes
3answers
113k views

What's the best way of handling permissions for apache2's user www-data in /var/www?

Has anyone got a nice solution for handling files in /var/www? We're running Name Based Virtual Hosts and the apache2 user is www-data. We've got two regular users & root. So when messing with ...
31
votes
2answers
28k views

What does a + mean at the end of the permissions from ls -l?

What is the plus sign at the end of the permissions telling me? ls -l total 4 drwxrwxrwx+ 2 benson avahi-autoipd 4096 Jan 27 17:37 docs Here's the context: cat /etc/issue \CentOS release 5.3 ...
22
votes
8answers
3k views

Restrict a Linux user to the files he owns

Imagine a server setup of a shared webhosting company where multiple (~100) customers have shell access to a single server. A lot of web "software" recommends to chmod files 0777. I'm nervous about ...
14
votes
7answers
10k views

Copy permissions to identical tree on linux / unix

i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions. how can i transfer the permissions layout from ...
13
votes
1answer
65k views

What is a S-X-X-XX-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX called in Windows security?

I copied two trees, a source and a destination, that I copied with robocopy like this: robocopy /MIR C:\Windows\System32\tasks\ C:\temp\robocopyTasks\out\ robocopy /E /Copy:S /IS /IT ...
13
votes
5answers
876 views

Copy file permissions, but not files in Unix

(From : http://stackoverflow.com/questions/15245144/copy-file-permissions-but-not-files, closed because off-topic) I have two copies of the same directory tree. They almost have the same files in ...
10
votes
2answers
649 views

How are r— directory permissions supposed to work on Linux?

I have created directory a created has these permissions - the other user has drwxr--r-- 5 user user 4096 2012-09-15 19:30 sites When do an ls -l on the directory as another user ls -l ...
10
votes
2answers
4k views

DFS replication and the SYSTEM user (NTFS permissions)

Question for which I'm having trouble finding an answer on Google or Technet... Does granting the SYSTEM user permissions to DFS-shared files and folders have any effect on DFS replication? (And ...
9
votes
2answers
609 views

My server Admin wants me to set public write permissions on a directory

I'm relatively new to web development, so please be patient. I'm primarily an iPhone developer, but have recently done a site for someone else using shared hosting. I could write to files in PHP on ...
9
votes
1answer
4k views

setfacl to reset file to default permissions?

I have a directory with the following default ACLs: default:user:phptutor:rwx However, none of the files/directories in that directory have that default permission (because it was added after they ...
8
votes
1answer
7k views

What should be the persmissions of apache ssl folder

I have my cert.pem and cert.key files in /etc/apache2/ssl folders. What would be the most secure permissions and ownership of: 1) /etc/apache2/ssl folder 2) /etc/apache2/ssl/cert.pem file 3) ...
8
votes
3answers
28k views

How do I force specific permissions for new files/folders on Linux file server?

I'm having an issue with my install of Ubuntu 9.10 (file server) and its samba permissions. Logging in and reading works fine. However, creation of new directories by users restricts access for other ...
8
votes
3answers
11k views

Can Samba support full Windows-ACLs?

I've set up a Samba 3 host with AD integration and an ACL enabled filesystem. Using a windows client I can set users and groups permissions. Up to now, Samba just maps to POSIX ACL's rwx permissions, ...
7
votes
3answers
4k views

A network share folder is invisible to users

I have a network share folder that I was recently cleaning up permissions to. I took off the four individual names from the access permissions to the folder, and added a new security group (Universal) ...
7
votes
1answer
751 views

Do /usr/local and /usr/local/bin need to be group-writable? If so, why?

While it's possible that it's a fluke of a package I installed or the VPS image, it appears that /usr/local and /usr/local/bin (both of which are owned by root:staff) are group-writable by default on ...
7
votes
4answers
9k views

What is the most secure way to allow a user read access to a log file?

My application requires read access to /var/log/messages, which belongs to user and group root. What is the minimal exposure level required on /var/log/messages so my application can read it? ...
7
votes
4answers
599 views

Is it Secure to Grant Apache User Ownership of Directories & Files for Wordpress

I'm currently setting up WordPress on an Ubuntu server 12 everything runs fine but there is an issue when it comes to automatically updating and uploading media via WP as Apache "www-data" user does ...
7
votes
1answer
6k views

What do you do to fix corrupted or blocked permissions on company file shares?

Lately I have been working with one of our storage guys on a project that has involved some scrutiny of big file shares that have been used by the company for years. Frequently, we run into ...
6
votes
2answers
1k views

Why can the root user edit read-only files, but a regular user with sudo access can't?

If you try to append to a file with no write permissions (say, the /etc/sudoers file which is is owned by root and has 0440 permissions), if you're the actual root user, this works. However, if you're ...
6
votes
3answers
1k views

How do I add permissions to group to match user permissions?

Some one messed up /usr/local/ permissions, so that nobody else can access it. Now I would like to duplicate user permissions to group permissions, since chmod g+rx -R /usr/local is unsafe. How should ...
6
votes
5answers
24k views

Copy file permissions from one directory to another

Over the weekend I copied our company data from one hard drive to another larger one. I thought permission would have copied across but they haven't. What is the best (and quickest) way to copy the ...
6
votes
1answer
62 views

Forward SFTP user to chroot subdirectory after authentication

I've set up a SFTP server using OpenSSH, everything works fine and the users I created can connect. After authentication, the users find themselves directly inside /chroot, a directory they are not ...
6
votes
1answer
861 views

Permissions when copying/moving on the same volume on a Windows 2008 R2 server

Does http://support.microsoft.com/kb/310316 still apply to 2008 R2? I see other questions here on SF like: How to workaround the NTFS Move/Copy design flaw? that discuss the issue, but I was ...
6
votes
3answers
4k views

wget starts downloading then stops “cannot write to”

I'm using wget to mirror some files across from one server to another. I'm using the following command: wget -x -N -i http://domain.com/filelist.txt -x = Because I want to keep the directory ...
5
votes
3answers
3k views

Can Linux file permissions be fooled?

I came across this example today and I wondered how reliable Linux file permissions are for hiding information $ mkdir fooledYa $ mkdir fooledYa/ohReally $ chmod 0300 fooledYa/ $ cd fooledYa/ $ ls ...
5
votes
4answers
1k views

Effectively handling 2+ million files

I have a file based DB that has about 2M files stored in 3 levels of subdirectories. 2/2/6253 2/2/6252 ... File a vary from 30 bytes to 60 KB. Whole DB is Read Only. DB is about 125 Gigabytes big. ...
5
votes
2answers
2k views

push commits to git (gitolite) repository messes up file permissions (no more trac access)

already posted here so feel free to answer there. everytime i commit/push something to the git server the file permissions change (all added/edited files in the repository have no read and execute ...
5
votes
4answers
9k views

Permission issues with Samba and OS X

I'm having some serious permission issues with Mac client machines (OS X Snow Leopard) connected to a UNIX server (running CentOS) through Samba. No matter which permissions I set for a file on the ...
5
votes
2answers
1k views

Improved ACL editor for Windows file permissions

I have recently been doing a lot of updates to our network drive permissions... such as consolidating direct user permissions into group permissions. The built-in ACL editor (Advanced Security ...
5
votes
1answer
426 views

How to not move permissions on fileserver file move

I have a problem with a NetApp file server with Windows XP clients. The files are on a single SAN drive. The users regularly move files from \\storage\share to their personal folder at e.g. ...
5
votes
1answer
721 views

etckeeper, Git checkout, and broken file permissions in /etc

I wanted to figure out why, after a etckeeper commit, I had a problem with rebooting (already solved thanks to this great thing). I played with etckeeper, did git checkout some_commit_sha for a quick ...
5
votes
1answer
6k views

How to set default umask for Tomcat webdav servlet?

The title says it all. I need Tomcat's webdav servlet to create files with rw-rw-r-- rights, but it keeps creating it as rw-r--r--. I tried to set up umask in /etc/profile, but it didn't help ...
5
votes
1answer
7k views

Folder permissions, red x on user object

On shared folders on the file server, for the domain user name object under the security tab, the icon has a red x. There are no symptoms, the users have full access, there is just a red x on the ...
5
votes
1answer
112 views

Who is the “author” of a file (Gnu “ls” manual)

In the manual for Gnu "ls," I see this: --author with -l, print the author of each file Does anybody know what the “author” of a file means in this context? This is (maybe?) not the ...
4
votes
4answers
964 views

How to add a line to the end of a file which I can access via sudo?

I have tried: sudo "some string" >> test.txt But I am getting permission denied warning. Can anyone help?
4
votes
3answers
2k views

Copy a file's owner permissions to group permissions

How can I copy a file's user/owner permissions to it's group permissions? For example if the permissions are 755 I want them to become 775. Clarification: 755 -> 775 123 -> 113 abc -> aac Bonus if ...
4
votes
5answers
696 views

-rwxr-xr-x@ meaning

I have a file with an @ after the permissions -rwxr-xr-x@ 1 riccardotacconi staff 215 14 Sep 14:21 Capfile Do you know its meaning. I am deploying a Rails application using Capistrano. That ...
4
votes
2answers
193 views

How to copy the permissions of a file to another?

Say I have two files: -rw-rw-r-- 1 webapp webapp 215 Jun 21 2012 index.php -rw-rw-rw- 1 root root 58 Dec 17 11:02 patch.log I would like to give patch.log the same permissions as ...
4
votes
3answers
8k views

Log file permissions in Linux

I am trying to write a simple script that monitors /var/log/messages file. The file by default doesn't have read permission for users, when I allow read access to this file my script works perfectly, ...
4
votes
4answers
8k views

Allow user to change permissions on a folder, but not remove/change Domain Admins access?

We're a small college, and I have one file share for an athletics team that I want to turn over to the coach. We don't track or have a group for athletic team members in Active Directory, and the ...
4
votes
3answers
1k views

Are Windows file permissions bound to the file, or the file system location?

Do Windows file permissions follow: The file, or... The file system location Say I have a file at "C:\MyFile.txt". I set some very specific permissions on this file. Later, I copy a new file ...
4
votes
3answers
9k views

FTP and Apache permission issues

Im having issues as to which user should own my www directory - ftp or apache? When set to the ftp user, the user can add, remoe and easily modify files but php file system actions generate permission ...
4
votes
4answers
6k views

How to configure PHP CLI on linux ubuntu to run as www-data?

I have a symfony2 application on my ubuntu. Symfony has a plenty of useful console commands (like php app/console cache:clear or php app/console assets:install web). The problem is If I run them as ...
4
votes
1answer
7k views

Dovecot 2 /auth-userdb permissions

Error in log file: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not ...
4
votes
3answers
276 views

Proper permissions for two developer team on PHP5 Apache Linux server

I was hoping someone could point me in the right direction regarding Linux permissions. I understand how to calculate what permissions are, understand the methodology behind changing them and can ...
4
votes
3answers
111 views

Why give owner anything other than 7 for file permissions?

In Unix-like OS's, what's the point of giving the owner of a file anything less than 7 (rwx) for file permissions? The owner can trivially change the owner permissions for his/her files, and so can a ...
4
votes
1answer
6k views

What is the best way to fix NTFS file permissions to inherit parent?

When XP clients move files on the same volume, the permissions are moved with it. With Windows 7 clients and up, when a file is moved, the permissions are inherited. Unfortunately, we still have a ...
4
votes
1answer
430 views

What security mechanism prevents write access to certain folders in Windows?

There are certain folders in Windows 2012 R2\8.1 where the contents are not writable - one example is Program Files\WindowsApps (which stores apps downloaded from the Windows Store). Obviously this is ...
4
votes
1answer
271 views

Tool to see nested permissions?

Here's the situation. Often I need to tell how a user is getting access to a specific folder. I can see in "Effective permissions" that they have read/write/etc, but because of nested groups I can't ...
4
votes
3answers
134 views

How to forbid drag'n drop for a Windows XP folder?

Some of users here sometimes mistakenly drag'n drop a folder. Is it possible to forbid them to move and rename a folder? They are all using Windows XP. The folder is on the network. They should be ...