Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

138
votes
2answers
9k views

Why is “chmod -R 777 /” destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault ...
86
votes
7answers
93k views

How do I share a Git repository with multiple users on a machine?

I have a Git repository on a staging server which multiple developers need to be able to pull to. git-init seems to have a flag very close to what I'm looking for: --shared, except I'd like multiple ...
73
votes
4answers
44k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. ...
65
votes
14answers
3k views

What's wrong with always being root?

I have a feeling this is a stupid question, but this is something I've wondered for awhile. I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
30
votes
6answers
32k views

How to setup linux permissions for the WWW folder?

Updated Summary The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
29
votes
4answers
60k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other ...
24
votes
2answers
763 views

Why is it bad to have root writing files to a directory not owned by root?

This came up in a comment to another question and I'd love it if someone could explain the reasons for this to me. I suggested having Apache log the errors for a given VHost to a user's home ...
19
votes
4answers
3k views

What is the first digit for in 4-digit octal Unix file permission notation?

3-digit: 644 ugo (user group other) 4-digit: 0644 ?ugo (??? user group other) What is the first octal digit for in 4-digit octal Unix file permission notation?
19
votes
5answers
5k views

Minimum permissions for a user to perform a mysqldump?

I want to start scheduling remote mysqldump crons, and I'd prefer to use a special account for that purposes. I want to grant that user the minimum permissions for getting a full dump, but I'm not ...
18
votes
7answers
16k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
17
votes
1answer
9k views

Vagrant set default share permissions

When running a vagrant instance the project folder is mounted on /vagrant automatically. However is mounted with the following permissions # ll -d /vagrant drwx------ 1 vagrant vagrant 612 Jun 13 ...
17
votes
5answers
27k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
17
votes
2answers
12k views

What is the sticky bit in UNIX file systems? When is it used?

What is the sticky bit in a UNIX file system? As an admin when and how would you use it?
16
votes
3answers
12k views

Is a reboot required to refresh permissions after adding a user to a new group?

On ubuntu server, I've noticed more than once now that after adding a user to a group that user doesn't have group permissions until I reboot the system. For example: User 'hudson' needs permission ...
15
votes
5answers
20k views

Files mounted over NFSv4 are owned by 4294967294, UIDs and GIDs match

I have two identical linux machines (identical images launched in amazon EC2) and I am trying to mount an exported directory over NFSv4. Here is what the mounted directory looks like on the client ...
14
votes
12answers
19k views

Why does sudo command take long to execute?

I've been picking up Linux (Fedora 10, then 11) over the past few months (and enjoying it immensely-- it's like discovering computers all over again, so many things to learn). I've added my user to ...
14
votes
5answers
18k views

Apache: Isn't chmod 755 enough to set up symlink or alias on Apache httpd on Mac OS 10.5?

On my Mac OS 10.5 machine, I would like to set up a subfolder of ~/Documents like ~/Documents/foo/html to be http://localhost/foo. The first thing I thought of doing is using Alias as follows: Alias ...
14
votes
1answer
26k views

Postgresql: what does GRANT ALL PRIVILEGES ON DATABASE do?

I'm trying to grant all privileges on all tables of a given database to a new postgres user (not the owner). It seems that GRANT ALL PRIVILEGES ON DATABASE my_db TO new_user; does not do that. After ...
14
votes
2answers
74k views

Using ICACLS to set permissions on user directories

I'm trying to reset permissions on user directories and having a bit of trouble with the last step of my script. My script basically takes ownership of the entire user directory, resets the ...
13
votes
7answers
8k views

Copy permissions to identical tree on linux / unix

i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions. how can i transfer the permissions layout from ...
13
votes
3answers
552 views

Which MySQL users are necessary?

My MySQL server has a number of strange users which I did not add. Are these all necessary? 'root'@'127.0.0.1' 'root'@'localhost' 'root'@'SERVERNAME' 'root'@'::1' ''@'SERVERNAME' ''@'LOCALHOST' If ...
13
votes
1answer
7k views

Why doesn't SSHFS let me look into a mounted directory?

I use SSHFS to mount a directory on a remote server. There is a user xxx on client and server. UID and GID are identical on both boxes. I use sshfs -o kernel_cache -o auto_cache -o reconnect -o ...
13
votes
3answers
849 views

Windows File Permissions and Attributes

I'm somewhat confused about the whole Windows file security scheme. I come from a unix background, so I don't fully understand the relationship between file permissions/security settings and the ...
12
votes
3answers
17k views

What User Should NGinx and PHP be running as?

Permissions are something that have confused for me a while with Linux. So at the minute both my NGinx and PHP-FPM instances are running with the user and group : www-data Is this standard? I ...
12
votes
4answers
12k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
11
votes
2answers
1k views

What is the “+” in “drwxrwsr-x+”

I'm working a website we maintain, and I use Capistrano to deploy. I've kind of inherited the stuff, so I'm not the one who set everything up. When I deploy to the server, it fails and nothing is ...
11
votes
2answers
12k views

Linux: how to give a user permission to restart apache?

I have a script running under a non-root user which, under certain conditions, should restart apache httpd. What would be the simplest way for me to allow the user to do that? I'm using Ubuntu ...
11
votes
3answers
30k views

Can't connect to default admin share on Windows 2008

I have a Windows 2008 Server that I'm trying to connect to the default administrative share \\servername\c$ I can connect to it using the default Administrator account. But if I try to connect using ...
11
votes
1answer
5k views

What does the @ symbol mean in a file's permission settings?

I'm on MacOSX, I did ln -s on a directory and these are the results: -rwxrwxr-x@ 1 shiki admin 970332 Mar 6 16:38 apc.so -rwxrwxr-x@ 1 shiki admin 653884 Mar 6 16:38 eaccelerator.so ...
11
votes
4answers
23k views

With SQL Server (2008), can you grant create table permission within a schema?

Working with security in SQL Server 2008, I'm trying to grant a user CREATE TABLE permissions, but only within a specific schema. Does CREATE TABLE permission only apply at the database level? Can I ...
10
votes
5answers
12k views

what permission to write PID file in /var/run

Ubuntu touch: cannot touch `/var/run/test.pid': Permission denied I am starting start-stop-daemon and like to write the PID file in /var/run start-stop-daemon is run as my-program-user /var/run ...
10
votes
3answers
7k views

Apache runs as which user, group under OS X 10.6?

Anyone know the default user/group for Apache under OS X (10.6)? I'd like to set permissions correctly. Already enabled Web Sharing, etc.
10
votes
1answer
21k views

How does one get setfacl to set ACL permissions recursively on Ubuntu 9.04 server edition?

I'm setting up a new server and wanted to give ACL a shot over the chown:chgrp:chmod style permissions. The man page for setfacl indicates that the '-R' option can be used to set the ACL ...
10
votes
4answers
11k views

How to allow non-root user to listen on privileged port?

I want syslog to run as a non-root user on my linux box. That makes it impossible for it to bind to port 514 - because that's a privileged port. Is there any way I can grant non-admin user "foo" the ...
10
votes
4answers
22k views

How can I set full premissions to a user in a specified dir?

How can I set full permissions to a user in a specified dir in linux?
10
votes
2answers
19k views

“'' is not a valid login or you do not have permission” on sql server installation

I have tried installing SQL Server 2008 multiple times on my machine, and I always receive this error about 3/4 of the way through: '' is not a valid login or you do not have permission. I use SYSTEM ...
10
votes
5answers
3k views

How to setup a central repository on a Windows 2008 server

I would like to setup a central Mecurial repository on a Windows 2008 server which only allows both push and pull access to certain users. This is to allow developers working remotely to push/pull ...
10
votes
5answers
2k views

Why is /dev/urandom only readable by root since Ubuntu 12.04 and how can I “fix” it?

I used to work with Ubuntu 10.04 templates on a lot of servers. Since changing to 12.04 I have problems that I've now isolated. The /dev/urandom device is only accessible to root. This caused SSL ...
10
votes
4answers
8k views

How to get full control of umask/PAM/permissions?

// Updated Feb 8 - Outstanding issues in brief: How to umask directories differently from files? How to umask on Nautilus copy/paste? How to set umask for SSHFS? OUR SITUATION Several people from ...
9
votes
8answers
18k views

How to repair/restore ubuntu 10.04 after 'sudo chmod / 777'

See Also: Why is “chmod -R 777 /” destructive? I changed file permissions recursively on the root directory / by executing sudo chmod -R / 777, and after that my system won't ...
9
votes
5answers
2k views

Bypass ssh key file permission check

I have an encrypted FAT volume (for compatibility) containing a private key file and other sensitive data. I want to connect to my server through SSH using my private key, but of course, as FAT ...
9
votes
4answers
23k views

Account to read AD, join machine to domain, delete computer accounts and move computers to OUs

I want to create an account that will perform the following: Join computers to a domain (not restricted to 10, like a normal user) Check for computer accounts in AD Delete computers from AD Move ...
9
votes
1answer
16k views

What can user do with VIEW SERVER STATE permissions?

In SQL Server 2008 there is a permissions VIEW SERVER STATE. What rights this permission give to user? What SQL Server mean by SERVER STATE?
8
votes
4answers
7k views

Need to fix file permissions in a user's home directory

Does anyone have a tool or script that will recursively correct the file permissions on a directory? On an Ubuntu Linux machine, a bunch of files were copied to a USB disk with full 777 permissions ...
8
votes
4answers
2k views

Linux : Losing group ownership of files

I have a project with a number of files that I created in Linux. And I needed to give another user write permission on them. So I created a "dev" group of which he and I are members and changed the ...
8
votes
3answers
540 views

My server Admin wants me to set public write permissions on a directory

I'm relatively new to web development, so please be patient. I'm primarily an iPhone developer, but have recently done a site for someone else using shared hosting. I could write to files in PHP on ...
8
votes
4answers
1k views

Can a file that is executable be read?

If a file has permissions -rwx-wx-wx can it be read by other and group users, or can it only executed and written? Is there some way to read an executable file by executing it?
8
votes
5answers
9k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
8
votes
2answers
8k views

How do I set default permissions for SFTP for an Ubuntu Server?

We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)? I'm also using setgid (chmod g+s) so that ...
8
votes
2answers
1k views

What is the canonical use for the “sys” and “adm” groups?

Since the beginning of time (or as long as I remember anyway) linux systems have had a "sys" and an "adm" group. What is the canonical use for them? Would it be appropriate to use either for a "super ...