In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

0
votes
1answer
853 views

AD LDS - LDAP - How to set group's rights on container

I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article) ...
0
votes
1answer
21 views

Lost access to IP restricted server

So we have a server that has IP restrictions set for SSH, cPanel..etc and our static IP has been recently changed before we could update the IP restrictions meaning we have lost access. The support ...
207
votes
2answers
47k views

Why is “chmod -R 777 /” destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault (reinstall ...
0
votes
0answers
41 views

GPO software installation from SAMBA server denied

I have a similar issue at 2 sites: W10p desktops provisioned from scratch, pulling installation (MSI) binaries from local SAMBA server. I've created a dedicated share (\nas\provisioning) & tried ...
0
votes
1answer
18 views

Permission denied for dovecot to access mail directory

I have setup a mail server using Postfix & Dovecot on CentOS 7. When I try to fetch email using thnderbird or any other email clients, I get this error in my maillog file: Jun 19 01:38:23 ...
0
votes
2answers
53 views

Nginx wordpress cannot upload files on CentOS 6.8

I kept getting this error when I upload a photo to my site. Unable to create directory wp-content/uploads/2016/06 The configures are like this . For /etc/nginx/conf.d/default.conf server { ...
0
votes
1answer
31 views

How am I granted access to a protected Windows share without entering a password?

I was logged in to a local administrator account on a Windows 2012 R2 server yesterday and noticed I was granted immediate (passwordless) access to the C$ admin share on another 2012 R2 server. These ...
2
votes
0answers
32 views

Preserve Linux Capabilities in Debian Package

I'm building a package containing a web service that needs to listen on port 443. The service itself is written in Go, so I can't use authbind to manage the port permissions. Instead, I've opted to ...
0
votes
0answers
21 views

CentOS 7 group permissions not allowing access to folder

I have a CentOS7 box, "box1", domain joined using Winbind + RID method. I have a folder (NFS mount) @ /shares/share. The permissions are: root@box1:/shares# ls -n /shares/ total 8 drwxrws--- 2 0 ...
16
votes
1answer
606 views

Check that a given user has a given privilege

Given a pair of a user and a privilege I need to determine if a user has the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
0
votes
1answer
34 views

PHP can't write to a directory

I am trying to configure our server for a client's website that we host. Their site is PHP, which I'm not terribly familiar with, so I don't know if it works in some weird way. (All our sites are in ...
5
votes
6answers
20k views

How can I remove local administrator permissions?

I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
15
votes
4answers
20k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
0
votes
0answers
36 views

How to Control Hosted Exchange External Distribution Group Access

I am helping an SMB find an email/calendar/contact solution that fits these contact criteria: External contacts are stored centrally (not in personal address books) Contacts are grouped into ...
3
votes
1answer
30 views

Active Directory permissions dissapears

I have recently configured Active directory delegation and in one specific OU inherited permissions disappears from all users except one I have recently created for tests. Non of the users are a ...
0
votes
1answer
32 views

Query AD for users with create users access rights

My company has requested a list with all the users and groups from AD that have access rights to create users and in which OU's they have these rights. Is there a way to get a complete list via ...
0
votes
1answer
195 views

File Sharing Methods

So, I've been looking around, and haven't found any information that lays out the differences between the two file sharing areas in the Folder Properties Sharing tab, as in the image below. There seem ...
0
votes
0answers
18 views

Kerberized NFS mount suddenly failing, permission denied errors

I'm trying to track down a bug with an NFS mount that seems to have appeared rather suddenly. Most of the time, if I try to ls /mnt, I get output that looks like this: ls: cannot access /mnt/dir1: ...
0
votes
0answers
13 views

Samba Archive bit - Allow for group

I have a samba server with a few Network Shares, map archive is set to yes. But when i want to set the archive-bit from windows only the owner of the file is allowed to do so. The group gets a ...
-2
votes
1answer
37 views

Change the permission and ownership of a sub directory in centos

I m having the following sub folder structure. /public/trunk/src/common/site/ I want to change the ownership and permission for site and their sub directories alone. How can i achieve that? Thanks
1
vote
1answer
35 views

Puppet changing source file permissions

I'm setting up jail shells using puppet to maintain a copy of the required libraries within the jails. Using the following puppet code I can successfully copy the files across: file { "/home/${...
0
votes
2answers
56 views

Is there a way in Linux where one non root user can check if another non root user is using OpenSSL or not without sudo permission?

Consider this scenario where User-A and User-B are both non-root user are running inside a server. User-A is running different Program P1 (pid-2814),P2(pid-2815) whereas User-B is running different ...
0
votes
0answers
18 views

Ubuntu shared folder permissions

I have a SMB share, "Share1" which I have mounted on another Ubuntu server. My problem is that when transmission adds a file on that share, it gets permission denied. It can create the folder, but ...
0
votes
1answer
35 views

WordPress can't install plugin even file permission is correct

I have apache2 server, of course apache2 is running on www-data account. All my WordPress files is own by root:webmaster, and have the g+w permission. Three of the accounts in webmaster group are ...
2
votes
0answers
34 views

FTP account for just one directory

Background information: I'm using Serverpilot to manage my Ubuntu server which doesn't provide any FTP service. There is a user: serverpilot With the home directory: /srv/users/serverpilot/ And ...
6
votes
2answers
4k views

Denied root access to user mounted FUSE file system

Let me start with giving you the details of my setup: I am running Fedora 13 on an x86_64 arch. I have mounted a remote directory using sshfs: jim@localsite $ sshfs jim@remotesite:/home/jim /home/...
0
votes
0answers
46 views

Does Docker's CAP_NET_ADMIN allow a container to affect the host network, or only it's own?

I have a docker container running a password authenticated SFTP server (client requirement - I've already lost that battle). In order to mitigate the risk of brute force attacks, I had thought to ...
0
votes
1answer
42 views

IIS_IUSRS Can Access a File, but Application Pool Identity User Cannot

I am trying to understand IIS file permissions. A given file has "full control" permissions for IIS_IUSRS. But it seems all Application Pool Identity users cannot access the file. (I have noticed ...
9
votes
5answers
14k views

What is the most secure way to allow a user read access to a log file?

My application requires read access to /var/log/messages, which belongs to user and group root. What is the minimal exposure level required on /var/log/messages so my application can read it? ...
0
votes
1answer
21 views

laravel apache directory permissions

So, I'm beyond perplexed! I just spun up a new RHEL 7.2 instance on AWS. I successfully installed Apache, MariaDB, & PHP. Then I successfully installed Laravel 5. Everything worked and is working ...
0
votes
2answers
182 views

How to add new text,but unable to modify old text [closed]

how do I set permission for a file on Windows such as .docx so that network user can ONLY add new text into the file.They must NOT be able to edit the old text,but the CAN add new ones. What I'm ...
0
votes
0answers
108 views

polkit.service - Authorization Manager fail to activate

Major issue with polkit service how to fix this its trying and failing to activate polkit every time. Sorry if noob question. systemctl status polkit.service ● polkit.service - Authorization ...
0
votes
1answer
76 views

group permissions on directory being ignored for user

It seems that there is a Linux user (on an Ubuntu 12.04.4 server) who is unable to access a shared directory, even though that user belongs to the group which owns the directory. Here is an example ...
-2
votes
1answer
25 views

Windows server Allow and deny [closed]

What is the deal with this. According to my count there are for possible permissions allow (checked) deny (checked) not allow (empty) deny (checked) allow (checked) deny( empty) allow (empty) deny (...
10
votes
8answers
32k views

'Permission denied' to a file I own?

My user, bob, can't access files that he (theoretically owns). I'm running Fedora Core 8. It probably easier to shown than tell: > ls -al . total 32 drwxrwxr-x 7 bob bob 4096 May 18 14:33 . ...
0
votes
0answers
27 views

Assigning default drive permissions

Been looking around everywhere but can't seem to find the answer to this - hopefully someone can assist. Scenario: I have a Windows 2012 R2 server that has a C: drive only. Someone wants to add in a ...
1
vote
1answer
58 views

SSH - Permission denied (publickey) - AWS EC2 [closed]

I am using Bitnami for a Ghost blog. Trying to SSH into the server so I can make changes to the theme via text editor (Atom) and I am having issues SSHing into the server. (MacOSX) $ ssh bitnami@ec2-...
28
votes
1answer
20k views

Vagrant set default share permissions

When running a vagrant instance the project folder is mounted on /vagrant automatically. However is mounted with the following permissions # ll -d /vagrant drwx------ 1 vagrant vagrant 612 Jun 13 14:...
1
vote
1answer
684 views

Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges

My system: CentOS 6.5 + MySQL 5.6 I have created a backupuser for mysqldump: CREATE USER 'usr_backup'@'localhost' IDENTIFIED BY 'XXX'; GRANT USAGE ON *.* TO 'usr_backup'@'localhost' IDENTIFIED BY "...
1
vote
1answer
91 views

Control Windows permissions on Samba share from linux

I have a Debian 8 with Samba 4 as a AD domain member. The DC is Windows Server 2008. The shares are able to handle Windows permissions - I use IDMAP backend = rid, since I cannot add uidNumber and ...
-2
votes
1answer
25 views

Web server files being publicly served despite permissions set to user/group only

I'm running an Apache2 server on Raspbian that serves an instance of DokuWiki, however I seem to be running into permissions issues. For some reason all my directories and the files in them are ...
5
votes
4answers
13k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
0
votes
0answers
28 views

Win Server 2003, security permissions are reset by SYSTEM. Why?

I've got a Windows Server 2003 with a physical drive (let's say Z:/) It's shared within my company. In the past two days the users were complaining that they do not have access to files on that drive. ...
4
votes
1answer
2k views

ssh agent forwarding fails with “Could not open a connection to your authentication agent”

I receive a Could not open a connection to your authentication agent error message when I attempt to connect from an intermediate server to a third server using the agent forwarding option (-A) of an ...
11
votes
3answers
21k views

Changing host permissions for MySQL users

I have the following grants for a user/database mysql> SHOW GRANTS FOR 'username'@'localhost'; +---------------------------------------------------------------------------+ | Grants for username@...
8
votes
4answers
9k views

How do I clear the “s” permission on a directory in Linux?

I have a directory that is showing up with the permission mask drwsrwsr-x. When I try to reset the permissions to 755 the S still remains. What is the "s" and why cant I change the permissions ...
-2
votes
1answer
40 views

Setup web folder for multiple developers and Apache [duplicate]

I'm trying to setup a web folder on LAMP with Ubuntu 14.04 where : Apache/PHP can read everything inside. (r-x for folders and r-- for files) Multiple users in a "devs" group can do anything inside. ...
0
votes
0answers
31 views

CentOS passwd file error

A co-worker tried to change the home directory of our root user and should have entered: root:x:0:0:root:/var/www/vhosts:/bin/bash ... but instead, entered: root:x:0:0:root:/root:/var/www/vhosts ...
0
votes
0answers
32 views

Windows File Security settings

I would like some input on a problem I am working on. The scenario is as following. I have a folder which has security settings (permissions) that are inherited. One of them is a permission entry for ...
20
votes
2answers
17k views

Amazon Cloudfront with S3. Access Denied

We're trying to distribute out S3 buckets via Cloudfront but for some reason the only response is an AccessDenied XML document like the following: <Error> <Code>AccessDenied</Code&...