Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

1
vote
1answer
182 views

How do ProFTPD/centOS handle directory permissions for virtual ftp users?

On proftpd/centos I configure the use of virtual user. I can login as a virtual user but I do not have write permission for this users. The proftpd.conf looks like: ServerName ...
-2
votes
1answer
75 views

Adding secondary groups and running processes

I made oracle member of a secondary group. Do I have to restart Oracle before it can write to directories owned by this secondary group?
1
vote
0answers
39 views

Lost web permission after upgrading CentOS from 5.6 to 5.10

I upgraded CentOS from 5.6 to 5.10 using the following simple commands while logged in as root: yum update yum upgrade Now, I can no longer access web pages. All requests, regardless of type of ...
0
votes
0answers
214 views

svn: E175013: Unable to connect to a repository at URL

I'm trying to get xbt-tracker from googlecode.com/svn but for some reason I get the following: svn co http://xbt.googlecode.com/svn/trunk/xbt/misc xbt/misc svn: E175013: Unable to connect to a ...
0
votes
0answers
75 views

Destination Folder Access Denied error when accessing SAN share (EMC Celerra File Server)

There is a shared folder hosted on an EMC SAN to which Everyone has Full Control to the share's root. The SAN's Administrators group is set as the shared folder's owner. Beneath the root are a number ...
0
votes
0answers
14 views

NFSv4 ACL with directory create perm, but can not read/write files under the directory

Next is what I need to do: Two users admin-x as directory administrator, user-m as the data producer, user 1: admin-x user 2: user-m In the directory named '/share' which with nfsv4 acls set on it, ...
0
votes
0answers
26 views

monit service permission starting a linux service

I'm running monit to monitor a linux service i wrote which basically makes sure that a mounted partition exist. the service start action is: mount -a the service stop action is: umount /...../.... ...
0
votes
0answers
10 views

Folder Ownership for Multiple WordPress Sites on Single Server [duplicate]

I have a new droplet that will be running multiple client sites. I setup the server to use Varnish, Nginx and MySQL on the latest version of Ubuntu and server blocks in Nginx. While I have got it all ...
1
vote
1answer
50 views

What are the most optimal permissions for /bin/su?

I want users to be able to use "sudo su -", but not to switch user by password. What are the most optimal permissions for /bin/su? Right now it's: -rwsr-xr-x. 1 root root 42436 Jul 26 18:19 /bin/su ...
1
vote
1answer
125 views

Samba default file creation mask calculation

Hi I have a question I dont seem find a relevant answer. The situation is that I set samba server and trying to create a file and folder form windows machine. Everything works as expected but there is ...
0
votes
0answers
114 views

NFS export all_squash and anonid

I have a server, S, and a set of clients, C, which I want to share files using NFS. In particular, some clients should have their user-ids remapped as they do not have a user that corresponds to the ...
4
votes
2answers
99 views

What are the minimum permissions for a Windows share to be anonymous-read only?

I am in the long and arduous process of resolving my confusion over Windows permissions, and would love to get some clarity over the following. I would like to provision a Windows share such that any ...
0
votes
1answer
42 views

zabbix change permission scheme

I have situation something like that: In zabbix I have two maps and I am looking for a solution how to set up access to the user had the ability to watch just one map. Please on advice it is possible ...
1
vote
1answer
83 views

Can't delete directory as root

i've created a directory for a nodejs app some time ago, called blog. The app was started with forever start app.js, nothing special. Now i tried to delete the entire app with folder, i stoped the ...
0
votes
1answer
22 views

IUSR_machinename Group Membership?

I've been searching for a while and am having trouble finding the answer. I have an IIS6 server running WebDAV for HTTP PUT uploads through anonymous access. The uploads work fine and the newly ...
0
votes
1answer
21 views

Read-only access to external mailbox exchange2010

I try set permission RO for external mailbox. I try do this with this solution http://exchangeshare.wordpress.com/2009/07/07/how-to-setup-read-only-mailbox-in-exchange-20032007 And doesn't work. I ...
1
vote
1answer
44 views

SQL error log can't create/write to file

I'm quite new to server administration but a keen learner, so if I miss anything or you need any extra info let me know and I'll do my best to provide it ASAP :) I'm running WordPress on a developer ...
0
votes
1answer
36 views

Recommended way to make /srv/ftp writable?

I have installed vsftp, and because I'm on debian it automatically created the user ftp. I have set nopriv_user=ftp. Apart from that I haven't made any changes. This ftp server is only going to allow ...
0
votes
3answers
99 views

Bizarre - Domain Admin has no rights to modify domain scripts directory

Here is a quickie that has had me scratching my head. Not a showstopper, so an answer isn’t urgent, but still. I am trying to modify the logon scripts directory to include a login script. I have gone ...
0
votes
0answers
41 views

NTFS Permissions Confusions

I seem to be falling into this weird loop of permission problems. We have a file server and everyone has their user share and their department share. All is working well. The permissions are set to ...
0
votes
0answers
188 views

KVM guest cannot write to 9p share owned by non-root

I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
1
vote
0answers
38 views

Weird permissions getting set on directories after rsync

I've got a drive on a Mac (OSX 10.7.5) that I'm sharing on the LAN. In the system preferences, the share is set so System Administrator has Read & Write access, System Group has Read Only, and ...
0
votes
0answers
19 views

Unable to change default log apache diretory

I would like to change the default directory of apache server: # mkdir new_log # chmod 755 -R new_log/ # chown -R apache:root new_log/ # semanage fcontext -a -t httpd_log_t "/new_log(/.*)?" # ...
1
vote
1answer
53 views

Secure Method for RAID Device Permissions for Network Storage

I manage a smallish network that supports a dozen or so employees. We have about 8 TB of data that lives on several NAS devices. I built a 20 TB RAID file server (with a XFS single partition) recently ...
0
votes
2answers
61 views

login page permission has changed suspiciously [duplicate]

I have developed a website with php and apache server on linux centos I am not professional on security issues and I think some folks try to hack my website first please advice me which security ...
0
votes
0answers
24 views

Scripts not running as www-data on Ubuntu Server

I have a dedicated server running Ubuntu 10.04 LTS. Every other apache setup I've used defaults to running scripts as www-data. This one, however, is running everything as my username on the server ...
0
votes
1answer
111 views

ssh agent forwarding fails with “Could not open a connection to your authentication agent”

I receive a Could not open a connection to your authentication agent error message when I attempt to connect from an intermediate server to a third server using the agent forwarding option (-A) of an ...
0
votes
0answers
12 views

How to logged in user rights to see process information for processes started by that user as a service on Win Server 2008?

What do I need to to enable logged in user to access processes created by this user via service? Goal Run service as build user, login as build user and dump information about processes started by ...
-2
votes
1answer
26 views

mySQL upgrade caused root ownership of files [closed]

I recently upgraded mySQL to 5.5 on my Centos box. It failed on restart as some of the files had taken root ownership instead of being owned by mysql user/group. Its working now, after 30 mins of ...
1
vote
2answers
49 views

How to allow an arbitrary group to mount a file system?

As far as I understood from the mount man page, by default only root is allowed to mount a filesystem. Filesystems with either the user or the users option can be mounted by any user. The owner and ...
0
votes
0answers
16 views

Somehow a local directory on my computer was added to my server (filezilla ftp)

On my ftp server (filezilla) a local directory was added. This directory is a complete copy of what is on my ftp server except with the improper naming and directory of C:\...etc This directory is ...
0
votes
1answer
46 views

How can I change the Postgres data_directory folder location?

I use Ubuntu 12.04, postgresql 9,1 postgis 1.5. I want to change database location. I use instruction http://www.whiteboardcoder.com/2012/04/change-postgres-datadirectory-folder.html The only ...
1
vote
1answer
40 views

NTFS permissions: clarifications sought

After reading the following page to update myself on how NTFS file, folder, and share permissions work, I am left with a few questions and hope to receive some answers on this group: ...
0
votes
0answers
113 views

Scripting for bulk NTFS permission xcacls.vbs vs PowerShell

I have a batch file with about 1000 lines using xcacls.vbs for customizing NTFS permissions for complex folder structure (removes of grants, removes of inheritance, then grants plus some explicit ...
1
vote
0answers
55 views

What are recommended permissions for files in /var/log?

I am working on tightening the security for various servers (mainly Debian Linux), and one of the tasks is to tighten permissions on files in /var/log so that files are not world readable. But there ...
0
votes
1answer
104 views

Why is `www-data` (Ubuntu / Apache user) listed in the `/etc/at.deny` file?

I have a cgi script that is resending an email on a failed attempt 5-10 minutes after a user accesses a page. My thought was to do this using the at command from a python call (os.system("at now + 5 ...
2
votes
4answers
180 views

Permissions required for a local user to query services

I'm trying to write an application, that is running as a local user on the server, and needs access to enumerate services, and potentially even control them (start/stop). Is being a part of the ...
0
votes
1answer
125 views

How Can I Open and Print a Word Document Using a VBScript Called From the Web?

The university I work for allows students to register their bikes for indoor storage during the winter. This is done through a website. At the end of the process, a DYMO label printer connected to the ...
1
vote
1answer
149 views

Chroot issue, broken pipe

I need to give access to a developer to our server vía ssh. I hosted his web on /home/miuser and some other web applications in /home/... I have this config in my Subsystem sftp internal-sftp Match ...
2
votes
1answer
520 views

Unable to modify registry as admin on Windows 2012

On Windows 2012, I'm trying to change the AppIDFlags value in the registry key HKEY_CLASSES_ROOT\AppID\{E62A7A31-6025-408E-87F6-81AEB0DC9347} to allow interaction with the desktop as documented here: ...
1
vote
1answer
90 views

Restoring NTFS permissions

I have two large file shares where the following has occurred: A (currently unknown) administrator took ownership of the share. The administrator broke inheritance on the share, and removed the ...
-1
votes
1answer
37 views

Unable to change access permissions on external ntfs Harddrive [closed]

I am fairly new with Linux when it comes to mounting hard drives, so hopefully this is a simple question. I recently purchased a 3TB hard drive that would have read/write access with both Mac and ...
1
vote
1answer
65 views

Difference between “Descendant User Objects” and just “User Objects”

i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me ...
-1
votes
2answers
54 views

What user is the script run as after Carbon Copy Cloner ends scheduled task?

On Mac OS X I keep data on a local server mirrored with the same data on a remote server with a scheduled backup task done with Carbon Copy Cloner. After the backup is done a bash script is run as ...
0
votes
1answer
34 views

Shared hosting (just host) and ftp access

I have a shared hosting account with justhost, what i need is to give an FTP access to a site operator, to his website. The website is a sub-folder under the www folder. I know how to limit his FTP ...
0
votes
1answer
370 views

Allow www-data to execute shell script

I have a shell script called boot.sh on an Ngnix server I am trying to call it via PHP, but I don't think I have permissions. How can I give www-data permission to run boot.sh - and only boot.sh ...
2
votes
2answers
123 views

Grant user from one domain permissions to shared folder in another domain

I have two computers set up like this: \\myPC (local Windows 7 SP1 machine); it is in domain1; \\remotePC (Win Server 2008 with SQL Server - a HyperV virtual machine); it is in domain2. In domain2 ...
2
votes
1answer
320 views

How can I set audit controls on files owned by TrustedInstaller using Powershell?

I am trying to set audit controls on a number of files (listed in ACLsWin.txt) located in \%Windows%\System32 (for example, aaclient.dll) using the following Powershell script: $FileList = ...
0
votes
0answers
54 views

In Linux, what's the best way to delegate administration responsibilities, like for Apache, a database, or some other application?

In Linux, what's the best way to delegate administration responsibilities for Apache and other "applications"? File permissions? Sudo? A mix of both? Something else? At work we have two tiers of ...
0
votes
1answer
11 views

Error accessing other groups files in apache

I am using Cloud9 IDE on my server, which creates files with default permission 640. As a result when I try to open those file via HTTP, apache shows permission denied error. When IDE is running as ...