In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

2
votes
1answer
1k views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
1
vote
0answers
141 views

What is a safe alternative to wildcards in /etc/sudoers?

In the /etc/sudoers file on my Red Hat server, I have this line: %webdevgroup ALL=NOPASSWD: /bin/chmod * /home/http/* This is clearly a bad idea, since someone could do something like this: sudo ...
0
votes
3answers
66 views

Delete file as different user under PHP

I'm running PHP as user www-data and Nginx is running as user nginx. I need to delete files in /var/cache/nginx/, which is owned by user nginx and I want to do it using PHP. Is there a way to allow ...
0
votes
0answers
251 views

nginx and php-fpm permission

I have a problem with nginx / php-fpm permissions. I run a website in /var/www/clients/client1/web1/web, the owner:group of that folder and subfolders is web1:client1. When I try to create or upload ...
2
votes
1answer
80 views

Set containing directory permissions using setfacl?

I have a file e.g script.php in the following folder structure style /home/site/admin/script.php I have used setfacl to allow a new user that logs in remotely permission to include that file in ...
1
vote
1answer
40 views

Which match takes precedence when exporting an NFS share?

Say you're exporting an NFS share using IP addresses and netmasks to give different machines different permissions: [/etc/exports] /media/shared 192.168.0.64/26(rw,[...]) 192.168.0.0/24(ro,[...]) ...
1
vote
0answers
208 views

File permission problems with Apache, FastCGI, and Prestashop

I am running a Prestashop installation on CentOS 6.5 and Apache 2.2.15. A while back I updated Apache and lost the ability to upload product images via Prestashop backoffice along with other problems, ...
1
vote
1answer
73 views

Apache can't reading from documentroot with permissions for www-data

My OS is Linux Mint 17. My goal is allow reading of /mnt/wwwdata for root and apache only. I trying to setup apache document root in directory /mnt/wwwdata, with rights 0770 for group wwwadmins, ...
1
vote
1answer
184 views

Copy file from Windows host to Linux host via Rsync, then set permissions

So I have a Windows SFTP server (SFTPSERVER), which receives files (duh). I then need to push those files to a Linux server (AD authenticated to my domain) elsewhere in my organzation. So that bit I ...
2
votes
0answers
21 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
0
votes
1answer
222 views

nginx server, multiple users editing their own files via SFTP

I'd like to have a Debian server set up so that different users have their own domains that only they can edit, e.g.: /home/ + /bob/www/ + oldsocks.com/ + nosepickers.org/ + /joe/www/ + ...
-1
votes
1answer
24 views

Messed up permissions of mail folders

i just messed up the permissions of all /var/spool/mail folder on a 250 user system. I have the homefolders with the correct permissions and the same name. Is there an easy way to make the permissions ...
0
votes
0answers
26 views

Failed to create the new object, access is denied. Server2012

I am very new to server administration, and am having quite a headache on this one.. I am logged in as the Domain Administrator account. I wanted to configure DAC and am having problems with Claims. ...
0
votes
1answer
23 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
0
votes
3answers
2k views

root + crontab : permission denied [duplicate]

I'm using Debian 6, all patched up, but when I try to access crontab as root, I just get a permission denied: root@server:~# crontab -e -bash: /usr/bin/crontab: Permission denied Please note this ...
2
votes
1answer
182 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I asked this question over at SuperUser to no avail a while ago, before realizing that serverfault may be a better option. I'm configuring execution control on a computer running Windows 7 SP1 ...
4
votes
1answer
77 views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 ...
1
vote
0answers
48 views

Granting user enough privileges to run ifconfig on IllumOS (OmniOS)

I sense this should be a very simple question, but somehow I cannot find a solution. I have a non-root user and I would like to grant this user enough permissions or privileges, so he can run ...
14
votes
2answers
1k views

Linux ssh: allow public-key authentication without giving user read rights to private key

Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account. The authentication on the remote machine uses public key, so on the server the ...
0
votes
1answer
284 views

Windows cant open mac shared files unless read only

I recently setup a mac server (Mavericks 10.9.5, Server 3.2.1) in our office environment, mostly mac but there are two windows pcs. The windows 8 machine can connect and open files/folders without ...
0
votes
1answer
22 views

Setting COM permissions

Our little COM library is getting the dreaded 80004005 error on a customer's new computer. I recall this has to do with COM permissions, but for the life of me I can't find these any more on this ...
0
votes
1answer
66 views

MySQL user:pass in roundcube php config

Is it considered bad practice to have a MySQL query with user:pass as plaintext? I'm doing this right now (in nginx/roundcube to modify my dovecot passwords) but it seems strange because if I had ...
1
vote
2answers
549 views

Exchange 2013 Calendar Issues

I have an ongoing Exchange 2013 problem with some users not being able to add/edit Calendar entries into the Calendars of other users. I'm hoping for a clue as to why this may be happening. We have ...
1
vote
2answers
121 views

Hourly Clamscan cron script failes at reading file list

I've this piece of code located in /etc/cron.hourly/hourlyclamscan. #!/usr/bin/bash # Create Hourly Cron Job With Clamscan # Directories to scan SCAN_DIR=/home/transmission/Downloads # Temporary ...
0
votes
0answers
68 views

Fix Account issues after removing DC from server with IIS?

We recently upgraded our single-domain Windows network by adding two new servers. We promoted them both to domain controllers and removed the domain controller from our webserver (which was set up ...
0
votes
1answer
283 views

dovecot 2.1 new imap folder permissions

I am migrating an old mail (postfix/dovecot) server to a new one. Everything works much as expected. I have a small obstacle though. I use mbox format and the setup is pretty much simple. Suppose a ...
0
votes
0answers
50 views

how to run a web app: users/groups to use for each component?

How do you organize your users/groups to run the different components of your web app? Any best practices? The answer of this question (What permissions should my website files/folders have on a ...
1
vote
1answer
2k views

CentOS 7, SELinux, PHP, Apache: How to set default permissions to new or updated files in an directory?

Server info: CentOS Linux release 7.0.1406 (Core) PHP 5.4.16 (cli) (built: Sep 30 2014 09:44:39) SELinux enforcing Apache/2.4.6 (CentOS) My PHP-Script needs to read from a home directory ...
0
votes
0answers
147 views

How to assign different permissions to folders through WebDAV by NGINX

I can't set up Nginx with WebDAV as I need to. The task is: There is a folder '/srv/root' with two subfolders - 'folder1' and 'folder2' and 3 users - 'admin', 'user1' and 'user2'. I want 'admin' to ...
0
votes
1answer
155 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
2answers
212 views

Give Apache Permission to Serve Files Outside of /var/www

I have my apache server and its specific files in /var/www and I have a bunch of group documents that I want to serve out in another directory /company/shared_files. I wrote and alias and it seems ...
-1
votes
1answer
313 views

How to pass the SSH_AUTH_SOCK through sudo (Permission denied (publickey).) [duplicate]

I have a Ubuntu server with the users: ubuntu and user I connect to each of the users using ssh -A (to pass my local machine keys to SSH). From any of the users I can connect to the SSH server of ...
0
votes
2answers
35 views

Disallowing interactive login for specific mysql users

I want to create some mysql users for different web sites but disallow interactive connections for them. If a evil-user get the mysql login credentials of a website, creating a conexion from ...
0
votes
1answer
31 views

Git on Amazon Server

I have git running on an Amazon server and up til now I have been the only one to use the server. I use my Amazon ssh key to connect and am then connected as root on the server without the need for ...
-1
votes
1answer
92 views

windows 7 cant open files from osx mavericks server

I have recently setup OSX Server (on Mavericks) with an external harddrive. I have setup users and groups and created two sharepoints (public (on the internal drive), work (on the external)). Last ...
0
votes
1answer
109 views

Wrong owner/group with SSHFS

I mounted a remote with SSHFS and everything works as expected, except the owner/group information. No matter what file's owner/group I check, it's always root:root. I'm mounting the remote like this ...
0
votes
1answer
117 views

rsync backup remote server maintaining groups and owner

This might seem like a problem that should have been covered millions of times but I am running into issues that after days of scouring the net, I still can fix. I have a remote server that I want to ...
2
votes
1answer
637 views

Top level folders show permissions inherited from Parent Object - who's the Parent?

Looking at a Windows 2012 R2 server that has D:\Users, D:\Admin, D:\Repository and a few more like that that are shared. When looking at security, they show inheriting permissions from Parent Object. ...
0
votes
1answer
47 views

NFS permissions on a directory

I feel stupid not knowing this, but alas, I need to ask. I have a few directories being automounted via NFS on my CentOS boxes. Source is a Dell NAS or Openfiler (which we are working on migrating ...
1
vote
2answers
3k views

Permission denied (public key) ssh ec2 instance mac [closed]

Update2: $ ls -ld ~/.ssh drwx------ 8 user staff 272 2 Oct 17:51 /Users/user/.ssh $ ls -la ~/.ssh/config/file.pem -r--------@ 1 user staff 1692 2 Oct 17:11 /Users/user/.ssh/config/file.pem $ ls ...
0
votes
1answer
348 views

Using sudo in a Git hook to set permissions after deploy

I run a few sites on Ubuntu and I'm setting up a new deploy worflow as follows (the example uses the staging environment): On my dev machine, I do git push staging which pushes to a bare repository ...
2
votes
1answer
118 views

Is there an easy way to add yourself to an Active Directory group, with only Add/Remove Self permission?

At my work where there is an Active Directory / Exchange / Outlook setup (sorry I'm not a Microsoft pro), I'm trying to set up a distribution list to act like a mailing list. That means users should ...
0
votes
2answers
37 views

Allow mysql user to be used just by specified user

Currently any system user can run: systemuser$ mysql -u mysqluser -p (assuming he knows the password). Is there a way to deny mysql (cli) to use particular mysql user? eg. systemuser$ mysql ...
0
votes
1answer
62 views

Password less mysql access to specified user/script only

In addition to this question: Performing root mysql operations in bash scripts I'd like to ask how to limit/allow this action (performing root administrative actions): mysql --local-path=mypath -e ...
1
vote
2answers
39 views

Access to logs for not root/sudo user

What should I choose to allow staff access to logs on server. For example if I have user webmaster which should have access to /var/log/{mysql,nginx, etc...}, how can I make it? Maybe add group ...
0
votes
1answer
207 views

file created by ansible seems to have mangled permissions

Issue with files created by Ansible I’m looking at using to setup some new servers at a new ISP and I’ve been doing some basic steps to test first. I am new but have done some testing on diff servers ...
0
votes
0answers
108 views

Can access share but error “Windows Cannot Find 'file name' ”

For this example the server name is test, the share name is test, and the file name is test.bat I can access a share and see all the files, but when I click on a file i get the error "Windows cannot ...
1
vote
2answers
274 views

Locked out after installing a bash without executable bit

After scp-ing a shellshock-patched bash binary to an openSUSE 12.2 Linux VM and replacing the login shell with it, no user can log in via ssh or the console. As it turned out, the executable bit got ...
1
vote
1answer
331 views

Logstash not reading logs unless world-readable

I recently set up Logstash with Kibana and Elasticsearch, but am having a problem whereby it's not reading logs unless the directory permissions are world read/execute (and the files at least world ...
0
votes
0answers
121 views

Impossible to get Folder Redirection working with Network Share (Access is denied, 502)

Group: G_Developers User: David (Member of G_Developers group) Local Path: E:/Shares/Users/Developers UNC Path: \\DC01\Developers$ Share Permissions: Everyone Full Control Folder Permissions: ...