In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

5
votes
1answer
4k views

How do I assign an SELinux label to a symlink with semanage so it persists after a relabel?

My apache DocumentRoot /var/www is a symbolic link to another path. The target has the appropriate file context label (httpd_sys_content_t) so that apache can read it with SELinux enabled. However, ...
5
votes
2answers
2k views

Samba, Apache and SVN. Getting the permissions right

I have two machines I work on: Windows Client (Development Machine) Linux Web Server (Ubuntu) On the Linux server I have installed Apache, Samba and SVN. I've created a samba share that maps to ...
5
votes
5answers
165 views

Starting a mysql server in my ${HOME}?

I'm not root on my server (linux) and this server doesn't currently run a mysql server as a daemon. Can I start a mysql daemon that would only work for my account and where the data/files would be ...
5
votes
10answers
10k views

IIS6: How to troubleshoot a 404 error in an ASP.NET application?

I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this ...
5
votes
3answers
2k views

Delegating account unlock rights in AD

I'm trying to delegate the rights to unlock user accounts in our Active Directory domain. This should be easy, and I've done it before... but every time the user tries to unlock an account (using the ...
5
votes
2answers
2k views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
5
votes
3answers
516 views

Delegate log off privilege?

Is it possible to delegate the right to log other users off? I'd like to give users the ability to log another user off of a computer, but I'm not willing to make everyone administrators to do so. We ...
5
votes
1answer
538 views

Windows domain share permissions basics

Consider following share rights: Security \\dev\profiles\ rw – Administrators Security \\dev\profiles\bambus02 inherited AND rw – bambus02 Sharing \\dev\profiles rw – Everyone as "bambus02", my ...
5
votes
3answers
254 views

What is preventing me from piping from a '600' file into mail within launchd?

In OSX 10.6 I'm running logcheck.sh via. launchd using this plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" ...
5
votes
2answers
6k views

windows server 2012 remote desktop - Send messages between standard users

Does anyone know the policy, or registry change, etc. for allowing messages (on the same server) between standard users... an elevated cmd prompt or task manager works of course... but need it to ...
5
votes
2answers
704 views

What is the proper way to set up the Apache document root in terms of privileges?

I have just installed Ubuntu 9.10 server edition on my machine and I wish to run my own personal local server with other users in the same LAN. First, I was wondering what folder directory structure ...
5
votes
2answers
997 views

Delegate permissions to subfolder in TFS project

I need to give a TFS Project Group contributor privileges to a Source Control subdirectory in a TFS project. I can connect successfully as someone from this group but can't browse Source Control, ...
5
votes
1answer
404 views

Different ACLs on two OU's with same “protect object from deletion” setting

Background After I configured our Active Directory so that the ability to move computers was delegated to helpdesk staff, I started hearing reports that computers would get "stuck" in specific OU's. ...
5
votes
1answer
2k views

Users suddenly missing write permissions to the root drive c within an active directory domain

I'm managing an active directory single domain environment on some Windows Server 2008, Windows Server 2008 R2 and Windows Server 2012 machines. Since a few weeks I got a strange issue. Some users ...
5
votes
1answer
3k views

Granting service control manager access permission to user outside of administrator group

I have a user outside of administrator group. How can I grant service control manager access permission for that (specific) user? It's like SC_MANAGER_ALL_ACCESS from the following link: ...
5
votes
2answers
460 views

Changing windows permission non recursively

I have a Windows Storage Server 2008 machine acting as our company file server. I need to give someone access to same folder and files in our Marketing folder (which contains easily 100,000+ files). ...
5
votes
2answers
248 views

Upgraded users to Win7. Now getting “path not found” when saving files or opening attachments

We have a Server 2008 AD environment with about 5k users. We just rolled out Windows 7 SP1 (were XP) with great success. However, about once a day we get a few calls that a user opens a file from ...
5
votes
1answer
314 views

Ports below 1024

DISCLAIMER: I know how to run daemons that either listen on ports <1024 by using privbind or some iptables REDIRECT. Or more generally spoken, how to make daemons available on priviliged ports that ...
5
votes
2answers
4k views

How to add a privilege to an account in Windows?

Given: A VM running Windows 2008 I am logged on there using my domain account (SHUNRANET\markk) I have added the "Create global objects" privilege to my domain account: The VM is restarted (I know ...
5
votes
3answers
15k views

How do I configure IIS to allow access to network resources for PHP scripts?

I am currently working on a PHP front-end that joins together a series of applications running on separate servers; many of these applications generate files that I need access to, but these files ...
5
votes
5answers
2k views

Groups and Permissions: Nested UNIX groups

We are getting more and more outside developers (from different clients) and are beginning to need a better strategy than adhoc adding to our server and adding to them ourcompany group (which owns ...
5
votes
1answer
569 views

OS X clients ignoring Windows print server permissions

I'm in the process of testing a Windows Server 2008 R2 print server for a mixed OS X/Windows environment. Any security permissions (AD groups) I set for the printers on the print server are not ...
5
votes
5answers
911 views

IIS7 folder permissions

I build a basic WCF service that I now want to host in IIS7 under Windows Server 2008 R2. I added the service as an application under the default web site but whenever i try to run the application I ...
4
votes
7answers
3k views

security issue of Linux sudo command?

I am using a Red Hat Enterprise 5 Linux box. I find if a user is in /etc/sudoers file, then if the user run command with sudo, the user will run this command with root privilege (without knowing root ...
4
votes
8answers
242 views

Should We Abolish User Access to rm?

Lately, I've been hearing system administrators and managers ask about solutions to keep people from accidentally removing their data. These are very smart and dedicated people asking for a solution ...
4
votes
5answers
9k views

I have administrative rights on Windows Server 2003, so why am I denied access to a folder?

A recent attempt to upgrade a piece of software failed because it couldn't access a folder. I tried to take a look at the folder in Explorer and was told: D:\folder is not accessible. Access ...
4
votes
3answers
2k views

Backup data while keeping POSIX ACLs and permissions

I'm looking for a practical way to backup data from a server and keep all ACLs and permissions. I've looked at tar, but according to Google tar doesn't keep ACLs . I know rsync can keep ACLs and ...
4
votes
3answers
7k views

How to view who owns a file?

I know to change an owner you put chown user:group file but what if I want to see who owns a file? The issue I am having is I created a user at /var/www/new-user but when he uploads new files ...
4
votes
2answers
2k views

Change ownership or permissions on only directories or files, recursively

I'm trying to set permissions/ownership on either directories or files, recursively within a given directory, without changing the other. E.g. I have directory /web where I want to set all the ...
4
votes
3answers
8k views

Log file permissions in Linux

I am trying to write a simple script that monitors /var/log/messages file. The file by default doesn't have read permission for users, when I allow read access to this file my script works perfectly, ...
4
votes
2answers
2k views

What exactly does this dpkg command do?

I fixed a permissin problem for nagios like discribed here. The command was: sudo dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw sudo dpkg-statoverride --update --add ...
4
votes
3answers
8k views

How to give write permissions to multiple users?

I have a web server and I'm uploading files using an FTP client. Because of that the owner and the group of the file are taken from the user used during the upload. Now I have to make this file ...
4
votes
4answers
11k views

Allowing non-admins to run programs as admins on Windows 7

On *nix, admins can use the setuid flag to allow non-admins to run certain programs that would otherwise require admin privileges. Is there any way to do something similar in Windows 7? This question ...
4
votes
5answers
940 views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
4
votes
2answers
150 views

What is the safest way to allow a developer to edit 3 Puppet modules?

We have a developer that has to make 3 Puppet modules for an environment. I want him to be able to write his 3 modules. We currently write our own modules and he is the first person from another ...
4
votes
4answers
2k views

Linux Web Server Permissions - Best Practices

On a privately owned server with one website, is there any reason the files/directories within /var/www can't be group owned by www-data? My understanding is that security risks with www-data having ...
4
votes
2answers
6k views

file ownership for new files with administrator - why is it giving ownership to the group administrators?

I am logged in as administrator and I right click on a folder and then go to properties, then the security tab, then advanced, then the owner tab. I am not on a domain. I see that the folder has a ...
4
votes
2answers
832 views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
4
votes
3answers
1k views

Are Windows file permissions bound to the file, or the file system location?

Do Windows file permissions follow: The file, or... The file system location Say I have a file at "C:\MyFile.txt". I set some very specific permissions on this file. Later, I copy a new file ...
4
votes
1answer
73 views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 ...
4
votes
2answers
600 views

Network Service account or domain account? [closed]

What are the pros and cons, or best practices when it comes to setting up applications on a server with either the Network Service account or a domain account? Are there some cases in which you'd do ...
4
votes
2answers
2k views

Fedora 16: “Permission denied: file permissions deny server access”

I'm working with a fresh Fedora 16 install and I'm trying to get Apache up and running. I'm very familiar with Linux and somewhat with CentOS, but I have very little experience with Fedora and SELinux ...
4
votes
3answers
1k views

Any fast way to assign NTFS permissions to a folder with a very big amount of subfolders and files?

I'm trying to change NTFS permission to a folder containing a very big hierarchy below. I'm using the traditional approach (right mouse button, properties, security, etc) It's taking really long and ...
4
votes
6answers
2k views

Scripts That Need (some) Root Access

I have a general question about system administration scripts that require "some" commands to be executed with root access, and other as a normal non-root user (ie myusername, etc.). I should mention ...
4
votes
1answer
8k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
4
votes
2answers
219 views

Windows 2003 Domain. Best way to assign permisions to technical support

I'm working on secure a Windows 2003 domain with 50 clients. The fist task where I'm working on is to remove technical support staff from the Domain Administrator group. But, I need that they can ...
4
votes
2answers
6k views

Is it safe to delete “Account Unknown” entries from Windows ACLs in a domain environment?

It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...
4
votes
1answer
14k views

Create SPN with setspn.exe - Insufficient access rights

On a Windown Server 2008 Domain Controller, I'm attempting to add a Service Principal Name (SPN) to a user account 'Postmaster' in order to enable Kerberos authentication from a Communigate email ...
4
votes
1answer
1k views

Different permissions per log file when using rsyslog

Is it feasible to define different permissions per log file, using rsyslog? $FileCreateMode applies to all, but I want different permissions for a specific file.
4
votes
3answers
25k views

How to run a command as administrator on Windows7 from a command line?

I need to run tscon.exe 0 /dest:console remotely = not manually on Windows7 as an administrator. More info here How to use tscon on Windows7? I did my research and OPTION 1 - runas for user ...