Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.
6
votes
2answers
1k views
How can root user create file/directory unwritable for itself?
Normal users can chmod files to make them unaccessible like
evgeniy@ubuntu:~$ touch test
evgeniy@ubuntu:~$ chmod 444 test
evgeniy@ubuntu:~$ echo 'test' > test
bash: test: Permission denied
Can ...
6
votes
3answers
4k views
Apache runs as which user, group under OS X 10.6?
Anyone know the default user/group for Apache under OS X (10.6)? I'd like to set permissions correctly. Already enabled Web Sharing, etc.
6
votes
2answers
6k views
How do I set default permissions for SFTP for an Ubuntu Server?
We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)?
I'm also using setgid (chmod g+s) so that ...
6
votes
3answers
5k views
NTFS Folder has no owner, no permissions, can't be deleted
I have a folder a 2003 member server which can't be deleted. Nothing has any permissions (domain admin and running up a cmd prompt as "nt authority\system" using psexec) - always "access denied".
...
6
votes
1answer
8k views
What user should own /var/www on Ubuntu 9.04 Server?
I've got LAMP on Ubuntu 9.04 Server and the default installation has root:root owning the /var/www folder. I discovered this when another service, Hudson, could not write to that directory. I want ...
6
votes
1answer
3k views
Why doesn't SSHFS let me look into a mounted directory?
I use SSHFS to mount a directory on a remote server. There is a user xxx on client and server. UID and GID are identical on both boxes.
I use
sshfs -o kernel_cache -o auto_cache -o reconnect -o ...
6
votes
1answer
388 views
Make a program un-uninstallable by Local Admin
I have a system monitoring tool/service, that runs on individual desktops in the network. On the network each user is Local Admin. I would like to make it so that only Domain Admin can uninstall this ...
6
votes
2answers
6k views
Best permissions/ownership for apache document root
I need some help setting the correct permissions or ownership of the apache document root. Here is what I need:
different websites stored in /var/www/html/<site>
two users should update/manage ...
6
votes
1answer
105 views
Directory with read and write for a user is permission denied, but fine with execute permissions
I have some weirdness with my users/permissions. I currently have a user named world that has the groups world www-data admin. I have a directory at /var/abc which has the permissions 0644 or ...
6
votes
2answers
190 views
Freebsd Secondary Group not allowing folder deletion
TLDR: I have a user that is a member to a group as a secondary group. This user can delete files with 664 perms as a secondary user, but not directories with perms of 775.
Details: I have a user. ...
6
votes
2answers
6k views
Run nginx as a non-root user
I followed this process to installing nginx on my Ubuntu 10.04 Lucid Server http://library.linode.com/web-servers/nginx/installation/ubuntu-10.04-lucid
I got lost after the point of creating an init ...
6
votes
1answer
443 views
Set windows permissions to allow modify, but not execute
Is it possible to set permissions on a folder in Windows (Server 2003 64bit) so that an account can write and modify, but not execute?
If I set modify permissions, windows seems to insist I also set ...
6
votes
1answer
281 views
Is there a command that produces a diff of the permissions of target files?
Just as it sounds, I'm trying to find out if there is a (standard) command that will produce a diff of the permissions between two files and/or directory trees.
Ideally it would put out a patch file ...
6
votes
3answers
4k views
How many times can a simple user add a computer to windows domain?
In a course about Windows Server administration that I took at the university they told us that a normal user could add 10 computers to a domain. Over the years however I've added and removed way more ...
5
votes
5answers
499 views
Prevent linux from being replaced [closed]
This is somewhat related to physical security breach.
Consider a Linux server with all firewall and other security stuffs running in it. However, if someone gets physical access to the server, he ...
5
votes
5answers
2k views
Setting up a cron job that does a chmod/chown
I would like to set up a cron job that recusively does a chmod/chown on a directory (the dropbox directory).
This works when I execute the commands manually like:
sudo chown -R $USER ~/Dropbox
sudo ...
5
votes
12answers
1k views
What are the best practices in deciding what to lock down and what to allow with corporate users?
How do you decide what is permissible to allow users control over? With a given feature or functionality (say, setting shares on a folder, attaching certain filetypes in email, installing USB devices) ...
5
votes
5answers
6k views
what permission to write PID file in /var/run
Ubuntu
touch: cannot touch `/var/run/test.pid': Permission denied
I am starting start-stop-daemon and like to write the PID file in /var/run
start-stop-daemon is run as my-program-user
/var/run ...
5
votes
4answers
1k views
Clarify something about Linux directory permissions
I'm almost ashamed to admit that there is one thing I am still unsure about when it comes to file permissions.
Let's say I have a directory with 750 permission (drwxr.x...). Then I create some ...
5
votes
3answers
1k views
Can Linux file permissions be fooled?
I came across this example today and I wondered how reliable Linux file permissions are for hiding information
$ mkdir fooledYa
$ mkdir fooledYa/ohReally
$ chmod 0300 fooledYa/
$ cd fooledYa/
$ ls
...
5
votes
3answers
5k views
how to find files with incorrect permissions on unix?
I'm looking for a way to search a directory or directories and list all the files that have the wrong permissions for a public directory.
5
votes
10answers
2k views
How do you lock down workstations and still support legacy applications that require local administrator rights?
I know we all struggle to strike a balance between keeping our user's workstations locked down but still usable. I have a real problem with one client whose users are constantly installing toolbars, ...
5
votes
3answers
239 views
NTFS Permissions for root share that houses Home Directories Windows Server 2008 R2
I am using the AD Profile Tab to Auto create Home Directories at \server\home so the permissions are automatically created. What should the permissions (NTFS) be for the actual folder that the home ...
5
votes
5answers
7k views
Resetting NTFS Permissions Disk Wide
Someone messed up majorly in setting permissions on an NTFS drive and I'm looking at a way to reset all permissions to default. The OS will be reinstalled but I'm trying to salvage data from their ...
5
votes
4answers
2k views
Why can a user grant themselves the Log On As A Service right?
This article describes the (relatively laborious) steps you should go through to grant an Active Directory user the Log On As A Service right. However, if I install a service and manually specify my ...
5
votes
6answers
312 views
Web Designer Permissions on a Production Web Server
Just started working with a small group of front-end web developers who all login to the dedicated WHM/Apache production server with root to modify client web sites. They claim they do not want to ...
5
votes
3answers
2k views
Specify default group and permissions for new files in a certain directory
I have a certain directory in which there is a project shared by multiple users. These users use SSH to gain access to this directory and modify/create files.
This project should only be writeable to ...
5
votes
3answers
252 views
On Windows Vista, is there a way to allow an application to always run with elevated permissions?
Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...
5
votes
6answers
10k views
How can I remove local administrator permissions?
I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
5
votes
1answer
92 views
Permissions are a mess- advice for cleanup?
Walking into a new organization, permissions are a mess.
Over time, many many users have been given access to folders and files explicitely as needed instead of having established group policies for ...
5
votes
4answers
4k views
Permissions issue with virtual directory to UNC path
I have a virtual directory in my site (test environment). It is a UNC share which is also used as a public FTP.
It is configured to connect as a domain admin account and "Test settings" says ...
5
votes
8answers
21k views
svn won't accept my invalid certificate
I have a server running apache with a self-signed certificate (the server) with subversion hooked in
It requires a username to checkout or update from the repo.
I have a checkout from the repo that ...
5
votes
2answers
766 views
getting a 403 error
Constantly getting a 403 error.
You don't have permission to access /index.html on this server.
log file :
(13)Permission denied: access to /index.html denied
(13)Permission denied: access to ...
5
votes
5answers
1k views
Write-only access that can see the files present?
In our schools, we have network shares for different classes containing "Hand In, Hand Out" folders. Students put their work in the Hand In folder, and teachers put assignments in the Hand Out ...
5
votes
1answer
467 views
Permission denied when opening file as root with mode 777
I'm attempting to install and run syslog-ng but I'm blocked with the following error.
Error opening configuration file; filename='/etc/syslog-ng/syslog-ng.conf', error='Permission denied (13)'
I'm ...
5
votes
2answers
773 views
Samba, Apache and SVN. Getting the permissions right
I have two machines I work on:
Windows Client (Development Machine)
Linux Web Server (Ubuntu)
On the Linux server I have installed Apache, Samba and SVN.
I've created a samba share that maps to ...
5
votes
2answers
2k views
How to remove a non-empty directory which is not owned by the user in Linux?
If a directory "foo" is owned by user A and contains a directory "bar", which is owned by root, user A can simply remove it with rmdir, which is logical, because "foo" is writable by user A.
But if ...
5
votes
10answers
6k views
IIS6: How to troubleshoot a 404 error in an ASP.NET application?
I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this ...
5
votes
3answers
2k views
How do you get linux to honor setuid directories?
Some time ago while in a conversation in IRC, one user in a channel I was in suggested someone setuid a directory in order for it to inherit the userid on files to solve a problem someone else was ...
5
votes
3answers
224 views
What is preventing me from piping from a '600' file into mail within launchd?
In OSX 10.6 I'm running logcheck.sh via. launchd using this plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"
...
5
votes
3answers
1k views
Delegating account unlock rights in AD
I'm trying to delegate the rights to unlock user accounts in our Active Directory domain. This should be easy, and I've done it before... but every time the user tries to unlock an account (using the ...
5
votes
2answers
531 views
What is the proper way to set up the Apache document root in terms of privileges?
I have just installed Ubuntu 9.10 server edition on my machine and I wish to run my own personal local server with other users in the same LAN.
First, I was wondering what folder directory structure ...
5
votes
2answers
701 views
Delegate permissions to subfolder in TFS project
I need to give a TFS Project Group contributor privileges to a Source Control subdirectory in a TFS project. I can connect successfully as someone from this group but can't browse Source Control, ...
5
votes
2answers
194 views
Upgraded users to Win7. Now getting “path not found” when saving files or opening attachments
We have a Server 2008 AD environment with about 5k users. We just rolled out Windows 7 SP1 (were XP) with great success. However, about once a day we get a few calls that a user opens a file from ...
5
votes
5answers
2k views
Groups and Permissions: Nested UNIX groups
We are getting more and more outside developers (from different clients) and are beginning to need a better strategy than adhoc adding to our server and adding to them ourcompany group (which owns ...
5
votes
1answer
546 views
OS X clients ignoring Windows print server permissions
I'm in the process of testing a Windows Server 2008 R2 print server for a mixed OS X/Windows environment.
Any security permissions (AD groups) I set for the printers on the print server are not ...
4
votes
5answers
11k views
ubuntu: let a user run a script with root permissions
I have ubuntu 8.04 and I want to write a bash script that runs as root which every user can run.
I myself can do sudo.
How do I do that?
CLARIFICATION: I don't want to do it with sudo, because then ...
4
votes
8answers
234 views
Should We Abolish User Access to rm?
Lately, I've been hearing system administrators and managers ask about solutions to keep people from accidentally removing their data. These are very smart and dedicated people asking for a solution ...
4
votes
6answers
2k views
Bash Script To Repair Directory and File Ownership
My client had me deploy some folders out to a bunch of home directories for his customer websites. I did this with a Bash script, but it ended up using the root account permissions.
How do I make a ...
4
votes
3answers
2k views
How to view who owns a file?
I know to change an owner you put
chown user:group file
but what if I want to see who owns a file?
The issue I am having is I created a user at /var/www/new-user but when he uploads new files ...
