In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

0
votes
2answers
27 views

Apache 2: symlinks for readonly-mounted filesystems

I have a large data repository that, for security, I wish to keep mounted read-only for a VM running Ubuntu 14.04. This VM runs an Apache server, and I wish to symbolically-link certain files from ...
0
votes
1answer
58 views

Exchange 2013 Relay Permissions

I'm trying to set up a receive connector that will allow a web based CRM to relay mail. So far, it works, but only if the user I use to login is in the group "Domain Admins" in active directory. Here ...
0
votes
1answer
98 views

Icacls works from command line, not from batch file

The OS is Windows server 2012. I am trying to use command icacls C:\folder\targetfile /grant domain\usergroup:(rx) to give permissions on certain file. The command works when executed on command ...
0
votes
1answer
52 views

Can't reset permissions on amazon ec2

I've a big problem: when I try to sudo something, this is what append: sudo: /etc/sudo.conf is owned by uid 222, should be 0 sudo: /etc/sudoers is owned by uid 222, should be 0 sudo: no valid ...
2
votes
1answer
6k views

Samba default file creation mask calculation

Hi I have a question I dont seem find a relevant answer. The situation is that I set samba server and trying to create a file and folder form windows machine. Everything works as expected but there is ...
6
votes
2answers
542 views

Set windows permissions to allow modify, but not execute

Is it possible to set permissions on a folder in Windows (Server 2003 64bit) so that an account can write and modify, but not execute? If I set modify permissions, windows seems to insist I also set ...
0
votes
1answer
43 views

Default client printer permissions on 2003 terminal server

Is it possible to change default permissions of printers that are created on terminal server sessions by clients? We have a terminal server that is shared between our head and branch offices and ...
1
vote
1answer
44 views

Backing Up User home Folders in an Active Directory

Our Domain is currently Set up with a Server 2012 domain controller. We have Home profiles enabled, which is annoying because it grants the User and only the user access to their files. We need to ...
1
vote
1answer
1k views

Write-but-not-delete permissions on SAMBA

I installed samba on my linux server for public file sharing on the LAN. I works great currently, but I would like to add some security: People from LAN should be able to Read files present and Add ...
0
votes
1answer
29 views

How to get the file permissions and owner of a directory recursively and then apply those to another copy of the files on a new server

Is it possible to take a folder on an Ubuntu server that is full of files and sub-folders, hundreds of them and there are special file and folder owner and permissions set all within this folder. To ...
1
vote
1answer
181 views

permission denied when script tries to run

I have a PHP script that run's the following command using exec() /root/gsutil/gsutil <COMMAND> In my error logs I receive the following: sh: 1: /root/gsutil/gsutil: Permission denied Does ...
0
votes
1answer
268 views

Windows cant open mac shared files unless read only

I recently setup a mac server (Mavericks 10.9.5, Server 3.2.1) in our office environment, mostly mac but there are two windows pcs. The windows 8 machine can connect and open files/folders without ...
0
votes
2answers
485 views

cygwin permissions for executing .bat files

I have a .bat file, which contains the following contents ... jar cfm myjar.jar manifest.txt *.class ... Which executes well under windows command prompt, but when executed under cygwin, I get the ...
1
vote
0answers
14 views

Are there issues with making a ldap database group readable?

I'm managing several CentOS 6.5 machines using ldap and kerberos for user accounts and authentication. I want to back up the ldap database as well as other root owned files stored on server1 to ...
0
votes
0answers
49 views

How to manage permissions on shared filesystem in Linux and export it on Windows?

It is a bit complex scenario so I will try to make this a simple as possible for you. ENVIRONMENT I have a shared filesystem on Linux which I export on Windows using Samba4 and users which belong to ...
1
vote
0answers
42 views

Issue with folder permission in file server migration - Share Parmissions VS NTFS Permissions

I am migrating a file server form 2003 to 2012 R2. There are about 50TB of files with thousands of individual permissions. I have successfully migrated the files to the new server, including their ...
0
votes
0answers
39 views

Protect web directories from other SSH users but allow apache access?

So my linux box has 2 users : root (which I use) dev (the user that my developer uses) I have a few directories on my web server which I need to restrict access from the "dev" user. So, for ...
0
votes
1answer
20 views

Stop files from being write-protected on creation linux

When files are created in my webapps folder (tomcat) they are write protected by default. Is there any way to prevent this? I would like a program I have written to be able to create and delete this ...
3
votes
1answer
48 views

By mistake I changed the ownership of /var directory.

Instead of changing the ownership of /var/www directory, I changed the ownership of /var directory recursively (couple of days back). Now owner of every directory in /var is www-data. All my sites are ...
0
votes
1answer
21 views

Restrict reading access to a user for everything outside of a directory [closed]

I have set a users permission like this groupadd mygroup useradd -G mygroup ftp chown -R :mygroup /var/www chmod -R g+rw /var/www Now how can I restrict access for this user (or is it group?) to ...
0
votes
2answers
56 views

restore mongoDB databases from manual backup (not used mongodump): strange permission problems

Is it possible to restore databases which were manually copied from /var/lib/mongodb to eg. /home/foo/mongobackup ? I am not sure if the backup was made after stopping the mongod service. Either way, ...
0
votes
1answer
50 views

Give SFTP users and Apache write permissions on same folders

I have a centos6 web server where developers also upload by connecting through SFTP. So, to give developer login write permissions, I have change /var/www user to that user. My current permissions ...
0
votes
0answers
27 views

What Linux binaries should not be executable by Apache/PHP?

Trying to beef up security security on a shared hosting server after some recent attacks and noticed, while playing around with some of the malicious scripts, like Filesman, that many of these scripts ...
1
vote
2answers
6k views

configure apache/webdav readonly for user x, read/write for user y

I'm using Apache 2.2 on RHEL 6.x. I can get webdav setup as readonly for user x or readwrite for user x but can't figure out how to make it read only for user x and read/write for user y. I just have ...
0
votes
1answer
53 views

Samba: creation mask 777 and create mode 666 do not work

Something wrong when creating file from windows. smbd Version 4.1.6-Ubuntu Copying the same file from same PC to same folder inside the share. From share definition: shares-secret.conf: force ...
0
votes
1answer
36 views

Make error_log readable by apache

Setup: CentOS 6.6, Apache 2.2.15, php 5.5.21 I 'm building a php script that displays the content of the /var/log/httpd/error_log file. Unfortunately, it does not work. The error message states: ...
0
votes
1answer
75 views

Postfix - 5.7.1 relay access denied

I'm running postfix on RHEL6: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.6 (Santiago) # rpm -q postfix postfix-2.6.6-6.el6_5.x86_64 # I'm trying to implement following: ...
0
votes
0answers
40 views

Apache and users write permission issues

On my web server I have two distinct folders, /home/dev/ and /home/prod/, each containing several websites. As you can guess, each directory is owned by the corresponding user, devand prod. The ...
0
votes
1answer
86 views

rm: cannot remove - Permission denied

Anyone have any idea why I can't remove these? ~# find /var/lib/php5/ -xdev -depth -type f -size 0 -exec ls -al {} \; -exec lsattr {} \; -exec rm -rf {} \; -rwxrwxrwx 1 root root 0 Jan 23 05:20 ...
0
votes
1answer
403 views

How Do I Secure WordPress Blogs Against Elemento_pcx Exploit?

I have a client who has several WordPress 2.9.2 blogs that he hosts. They are getting a deface kind of hack with the Elemento_pcx exploit somehow. It drops these files in the root folder of the blog: ...
1
vote
1answer
234 views

What are the effects of a machine account being member of Domain Admins?

I recently stumbled over a workstation account being member of the Domain Admins group. I assume that this is not recommended, right? Nevertheless, I am curious what the actual effects of this ...
0
votes
1answer
24 views

550 error after setting permissions on folder [closed]

I'm running a Centos6 VPS with Plesk 11. I am unable to access a folder using FTP after changing the permissions to 666 using chmod. I can create the folder using SSH and can then enter the folder by ...
0
votes
2answers
215 views

Create Report in Microsoft Excel - Permissions Issue in Team Foundation Server 2010

I am trying to use the feature "Create a Report in Microsoft Excel" for Visual Studio TFS 2010. I am being prompted for a username and password in Excel for any given Team Project when right clicking ...
2
votes
3answers
6k views

What rights does “Replicating Directory Changes” actually grant in Active Directory?

We need to grant a service ID the Replicating Directory Changes to Active Directory. People are concerned that we might accidentally let the service ID write data in Active Directory, or have ...
1
vote
0answers
65 views

NFS Write Permissions — ls -l shows I have it; I actually don't

I have an NFS server serving several clients. Permissions work fine with all clients except one. The client mounts the nfs share fine, with permissions all correctly placed to the right users. ...
1
vote
1answer
154 views

Running Ansible task as a specific user

I am trying to run a specific Ansible task as a different user than the one who is running the playbook. My .yml file looks like this: --- - hosts: staging_servers tasks: - name: check ...
0
votes
0answers
44 views

SFTP permissions with domain users Ubuntu Server 14.04.1 LTS

If there was ever a linux question, it usually has something to do with permissions. Alright, so I'm trying to set up a sort of "double-blind" SFTP server. I'm looking to make a folder, ...
0
votes
1answer
39 views

Can't change folder ownership via SSH

For some reason, I have a folder that I cannot read nor change its ownership. If I do a ls command, this is what I get: drwxrwxrwx 4 myusername myusername 4096 Jan 26 20:35 media1 <--- OK ...
0
votes
2answers
896 views

Default File Permissions (Passenger, Rails, Ubuntu Server)

I've deployed a Rails application that is using page caching and is run via Passenger on Ubuntu Server. Rails caching simply uses Ruby's File.open to write the cached files. Unfortunately these files ...
1
vote
3answers
51 views

Windows File Permission common practices

As far as I understand and it was answered in this thread, that administrators still need an ACL to administer files even though they have the highest authority. On my system Administrators group is ...
3
votes
2answers
118 views

Windows Server 2008 - File Permissions and Administrator

This is what I did on my Windows 2008r2 Logged in as Administrator (UAC is disabled for a test sake) Select a folder Edit Advanced Permissions Uncheck"Include inheritable permissions" and click on ...
3
votes
1answer
147 views

Edit files in Vista

I want to modify a file in vista ( C:\Windows\System32\drivers\etc\hosts ) but I can't write it to disk. Similar thing happen with other files that are not under my user directory. C:\Users\me I am ...
3
votes
1answer
1k views

Why can't I install modules via NPM unless I'm root?

I'm using the latest version of stable node.js (0.8.19) $cd ~/downloads/node $./configure $make $sudo make install Doing this installed node.js Now, when I go to: $cd ~/myproject/node_modules ...
1
vote
1answer
27 views

Permission issues with tomcat7 on EC2

I finally managed to deploy my web service on to ec2 with tomcat 7 installed. It works perfectly fine on localhost but is receiving errors on ec2. I think it is because my code generates an xml file ...
1
vote
2answers
378 views

Exchange 2013 Calendar Issues

I have an ongoing Exchange 2013 problem with some users not being able to add/edit Calendar entries into the Calendars of other users. I'm hoping for a clue as to why this may be happening. We have ...
0
votes
1answer
70 views

Windows 2008 R2 Permissions of mapped drive between desktop and server

My Desktop is Windows 7 and my Server is Windows 2008 R2... On my desktop I'm just a standard domain user. On the server I'm part of the Administrators group. I map a drive to my server in Windows ...
3
votes
4answers
704 views

Windows XP: Modifying permissions - remove ability to run installers?

In this question, I outlined the situation at my workplace regarding some of the office workers' children and the computers that we've provided for them to use. Long story short, it turned out that ...
0
votes
2answers
65 views

Restricting users abilities on Linux (ratio / bandwitdh)

is it possible to easily set some users permissions on Linux? (actually my distro is Ubuntu server 9.04) I mean: give them a maximum amount of space for their home folder restrincting the bandwidth ...
0
votes
0answers
76 views

AD LDS - LDAP - How to set group's rights on container

I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article) ...
17
votes
2answers
3k views

Although 80 and 443 are system ports, how are most web servers able to bind to them anyway?

Running a web-service that binds to port 80 usually doesn't require sudoer privileges. Since ports 80/443 are system ports, meaning they can only be used by privileged users, how come those services ...