0
votes
0answers
15 views

how to run a web app: users/groups to use for each component?

How do you organize your users/groups to run the different components of your web app? Any best practices? The answer of this question (What permissions should my website files/folders have on a ...
0
votes
1answer
16 views

Allow user to execute “repquota -g /”

I need to allow an user to execute "repquota -g /" from a script without superuser permissions on debian Wheezy. I would not allow all superuser permissions to the user (in my case it is the www-data ...
2
votes
2answers
32 views

Maintaining Linux file owner and group info in a multi-user system

I have a web application running on Linux (using CentOS 6) using a generic non-root user name, say app1. I've associated all the files under the folder /home/app1 with that user/group (using chown -R ...
0
votes
0answers
31 views

Samba Permissions Issues

I am having some issues with samba on my Fedora file share server. I've logged into the vncuser below on the server itself and I can access the directory, however I get permission denied errors when I ...
2
votes
2answers
55 views

How do I make it impossible for a Windows machine to delete a directory (not its contents) on a Linux Samba server?

The title says it all. (One of the rare occasions where it actually fits. :P)
-2
votes
1answer
33 views

Apache with directory listing does only show some files and folders

Using linux ubuntu. I have all my files in /var/www/. apache conf /etc/apache2/apache2.conf: #add Directory listings <Directory /var/www/> Options Indexes FollowSymLinks </Directory> ...
1
vote
1answer
32 views

Immutable flags are turned on automatically

OS: Ubuntu 12.04 (ISPconfig 3 installed) It seems that files and folders under /var/ are given the immutable flags once every week or so. Are any of you able to point me in any direction in order to ...
0
votes
0answers
41 views

Allow a user to access a single Git repository

Consider a server that hosts several Git repositories: $ ls -l /opt/git/ drwxrwxr-x 7 ubuntu root 4096 Jan 2 2014 george.git drwxrwxr-x 7 ubuntu root 4096 Dec 29 2013 john.git drwxrwsr-x 7 ...
3
votes
1answer
41 views

Read only permissions still allows to save

I have a weird permissions situation that I can not explain. Let me explain my users and group and then show you the folder permissions. drwxrwsr-x. 2 jenkinsuser applog 4096 Jul 15 09:56 . ...
0
votes
2answers
136 views

How to let user create folder and upload file, lamp permission [closed]

I use mkdir($folder_path, 0755) in localhost(MAMP) it works, but after I move to VPS I use LAMP it failed. Folder the direction path is /var/www/html/assets/images/ the images folder info: Owner: ...
3
votes
1answer
127 views

Automatically give Apache write permissions to newly added git clone files (-R g+rw)

I'm having a problem with allowing Apache to automatically have write access to an .htaccess file being pulled from a git repository. Here's my process: I'm logged in as a newly created user ...
1
vote
0answers
286 views

Docker: Permission denied on folders added with ADD

I'm trying to configure a postgresql installation using docker. FROM ubuntu:13.10 ADD . /db # install postgres # ... RUN chown postgres:postgres /db -R && \ chmod 700 /db -R USER ...
0
votes
1answer
54 views

How to let any server user modify files created by a samba guest on a public share (and the other way around)?

I have a linux server running samba with a public share accepting guest connections. Any window box on the network can edit/remove files on the share as long as the files are created by a guest (i.e. ...
0
votes
1answer
53 views

How to connect to CentOS after killing permissions?

So I will try to keep this short and simple. For our dev server at work, I was trying to add a new user last friday and I think instead of changing his file permissions I ended up changing group ...
0
votes
1answer
85 views

Mounted Gluster volume keeps reverting to “root” permissions

Ive got GlusterFS running on an AWS server and its mounted to another AWS server. The folder that is mounted though keeps reverting to "root" ownership, when this happens uploads fail from the web ...
1
vote
1answer
202 views

Window 2008 inherit permissions from parent on file created on linux nfs share connected to Windows

I have a Windows 2008 server with a NFS share called myhost/host_dev. The windows NFS share is set up to allow 'unmapped user access'. I am able to mount a Linux directory to that share using mount -t ...
1
vote
1answer
502 views

Why does Fedora 20 still deny access to home directories after enabling SELinux httpd_read_user_content and setting files to httpd_user_content_t?

On my Fedora 20, I've learned that to allow write access to files by processes like PHP via Apache, the process owner, which is in my case apache, must have write permissions to the files. Also, since ...
0
votes
1answer
56 views

Apache permission to write on user home folder

I'm performing server backup with php script and trying to save the output to home folder. * I have there available space Apache is the user that running the php script and don't have permission to ...
1
vote
1answer
142 views

Mounted HDD not having enough permissions from Apache/PHP

Piwigo gallery, on apache and php, CentOS 6. The root system is a RAID 128GB. /var/www/html is on the root file system. Mounted the 320GB hdd to /var/www/html/320 using defaults, it's an ext4 fs. ...
3
votes
2answers
1k views

Why would chmod give “No such file or directory” when running recursively?

I can change the permissions of the file directly: # chmod --changes --recursive ug+rwX /var/www/shared/tmp/cache/assets/BA0/280/sprockets%2F286302903364106648b609d708884f78 and I can also ...
1
vote
2answers
138 views

Permissions to edit network configuration

We ship a virtual machine to the clients which runs a web service. Clients need to install this virtual machine on one of their hosts using an hypervisor and just need to modify the network ...
0
votes
0answers
97 views

Netatalk shared folder shows as readonly on OSX

I have a few Mac clients connected to a Linux server running Netatalk 3.1.1. The server is connected to an AD domain, the clients are currently not. Previously all users were connecting under a single ...
0
votes
2answers
866 views

Nginx PHP-fpm permission

When i'm setting the user in nginx.conf to root root: user root root; then my website is working, but when i set it to nginx nginx i get error in the logs: connect() to ...
3
votes
3answers
250 views

Maintain setgid bit (after bower install or gulp build)

We run web servers where we have the following situation: The www-data user runs the web server and must have read+write access to the files The deploy user deploys all the code The bob and alice ...
1
vote
1answer
117 views

Correct Permissions VPS /var/www

This is a repost of an "off-topic" question on stackoverflow. My scenario is: I created a user and added that user to sudoers: visudo user ALL=(ALL) ALL Then sudo adduser user www-data and ...
1
vote
1answer
72 views

Virtual Host Web Files Not Being Served

I am attempting to serve web files via virtual host, but Apache keep blocking the directory's files. All that will show is the default Apache Welcome page. index.html gets a permissions error, and ...
1
vote
0answers
56 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
1
vote
2answers
66 views

Read-only files, prevent deletion

Here's my situation. I'm running a WordPress website that uses w3 total cache. A large portion of this website is at first dynamic, and then static. So I'm caching these pages as static HTML in a ...
0
votes
1answer
206 views

Linux permissions in /var/www: What settings can I use for good security practice and still maintain accessibility?

I'm primarily trying to set permissions inside of /var/www . We are using a project format which has the following structure in common for each project: /var /www /runtime /shared /project.com ...
1
vote
1answer
297 views

Owncloud data folder in /home

I've installed an owncloud server to share it with 7 others people. I have set a symbolic link from their data folder to their home (/var/www/owncloud/data/$USER -> /home/$USER/owncloud ). So every ...
0
votes
1answer
411 views

Permission denied on owned file

I'm having issues setting permissions for a specific user. I have a directory /srv/git/ in which I'm trying to create a sub-directory test containing one file testfile (owned by www:www-data). ...
0
votes
1answer
80 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
1
vote
3answers
128 views

nginx - linux permissions interesting issue

I'd like to get some answers or suggestions to my problem. So I'm getting a simple error: 2014/02/16 12:01:43 [error] 7384#0: *1 FastCGI sent in stderr: "Primary script unknown" while reading ...
0
votes
1answer
37 views

Recursively gave sudo group to all files in var

On a Debian server, in a hastened move, we changed the permissions of the /var directory recursively so that sudo was the associated group, and with write privileges, with these commands: chgrp -R ...
1
vote
1answer
179 views

Folder permissions for Apache vhost files on Samba share

In our website development environment, we have a central CentOS server running multiple vhosts via Apache. The vhost files are shared via SMB. Multiple developers in the office connect to this SMB ...
3
votes
2answers
347 views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
1
vote
1answer
920 views

Include AD domain admins group in Linux sudoers?

I'm working in a company whose network is configured through a Win Server Active Directory, with hundreds Windows of computers connected to the local domain. We are doing some tests to start ...
0
votes
1answer
48 views

How to restrict a Linux program's permissions

I'm running a native linux program from PHP using shell_exec. Specifically, calling antiword to extract text from Microsoft Word files users uploaded. However, as I've got no way of assessing ...
1
vote
1answer
80 views

What are the most optimal permissions for /bin/su?

I want users to be able to use "sudo su -", but not to switch user by password. What are the most optimal permissions for /bin/su? Right now it's: -rwsr-xr-x. 1 root root 42436 Jul 26 18:19 /bin/su ...
0
votes
2answers
65 views

login page permission has changed suspiciously [duplicate]

I have developed a website with php and apache server on linux centos I am not professional on security issues and I think some folks try to hack my website first please advice me which security ...
1
vote
2answers
76 views

How to allow an arbitrary group to mount a file system?

As far as I understood from the mount man page, by default only root is allowed to mount a filesystem. Filesystems with either the user or the users option can be mounted by any user. The owner and ...
-1
votes
1answer
79 views

Unable to change access permissions on external ntfs Harddrive [closed]

I am fairly new with Linux when it comes to mounting hard drives, so hopefully this is a simple question. I recently purchased a 3TB hard drive that would have read/write access with both Mac and ...
0
votes
2answers
1k views

Allow www-data to execute shell script

I have a shell script called boot.sh on an Ngnix server I am trying to call it via PHP, but I don't think I have permissions. How can I give www-data permission to run boot.sh - and only boot.sh ...
0
votes
1answer
11 views

Error accessing other groups files in apache

I am using Cloud9 IDE on my server, which creates files with default permission 640. As a result when I try to open those file via HTTP, apache shows permission denied error. When IDE is running as ...
0
votes
1answer
274 views

Webmin Apache ownership and ability for user to edit files in www root

I am using webmin to install apache and run Wordpress, and i am getting some permission errors. Here is what I have done so far: I have installed webmin apache, it is running under the user:group ...
1
vote
1answer
1k views

Apache logs other user read permissions [closed]

We have several developers who maintain the system and I want them to easily read the log files in /var/log/httpd without needing root access. I set the read permission for 'other' users but when I ...
0
votes
0answers
220 views

Permissions issue using symlink on public_html folder

I have two accounts on a centOS server. The first account has a normal public_html folder, the second account has a symlink to the first account public_html folder instead of a normal one. The first ...
1
vote
1answer
46 views

Is runing script with SUID bit set up work the same as runing same script with sudo (or root)?

I wanna run some script with root priviliges but by apache user. So I added SUID bit to script file but this doesn't work as I expected. Script file owner is root. rwsr-xr-x 1 root root 2438 paź ...
1
vote
1answer
119 views

How to prevent users from renaming files while providing write permissions on Linux [closed]

For some special purpose, I want to prevent non-root users of the Linux Server from changing/renaming the filenames. However, they can modify and write to the contents of the file. How to do this from ...
0
votes
1answer
101 views

Accessing images outside of httpdocs in plesk

I have a website which I am creating for a photographer, she uses dropbox to share images with some of her clients and she wants the clients who do not use dropbox to be able to access the images ...