Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

4
votes
5answers
850 views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
4
votes
2answers
147 views

What is the safest way to allow a developer to edit 3 Puppet modules?

We have a developer that has to make 3 Puppet modules for an environment. I want him to be able to write his 3 modules. We currently write our own modules and he is the first person from another ...
4
votes
4answers
1k views

Linux Web Server Permissions - Best Practices

On a privately owned server with one website, is there any reason the files/directories within /var/www can't be group owned by www-data? My understanding is that security risks with www-data having ...
4
votes
2answers
5k views

file ownership for new files with administrator - why is it giving ownership to the group administrators?

I am logged in as administrator and I right click on a folder and then go to properties, then the security tab, then advanced, then the owner tab. I am not on a domain. I see that the folder has a ...
4
votes
2answers
613 views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
4
votes
3answers
1k views

Are Windows file permissions bound to the file, or the file system location?

Do Windows file permissions follow: The file, or... The file system location Say I have a file at "C:\MyFile.txt". I set some very specific permissions on this file. Later, I copy a new file ...
4
votes
1answer
59 views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 ...
4
votes
2answers
380 views

Network Service account or domain account? [closed]

What are the pros and cons, or best practices when it comes to setting up applications on a server with either the Network Service account or a domain account? Are there some cases in which you'd do ...
4
votes
2answers
2k views

Fedora 16: “Permission denied: file permissions deny server access”

I'm working with a fresh Fedora 16 install and I'm trying to get Apache up and running. I'm very familiar with Linux and somewhat with CentOS, but I have very little experience with Fedora and SELinux ...
4
votes
6answers
2k views

Scripts That Need (some) Root Access

I have a general question about system administration scripts that require "some" commands to be executed with root access, and other as a normal non-root user (ie myusername, etc.). I should mention ...
4
votes
1answer
7k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
4
votes
2answers
206 views

Windows 2003 Domain. Best way to assign permisions to technical support

I'm working on secure a Windows 2003 domain with 50 clients. The fist task where I'm working on is to remove technical support staff from the Domain Administrator group. But, I need that they can ...
4
votes
2answers
5k views

Is it safe to delete “Account Unknown” entries from Windows ACLs in a domain environment?

It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...
4
votes
1answer
926 views

Different permissions per log file when using rsyslog

Is it feasible to define different permissions per log file, using rsyslog? $FileCreateMode applies to all, but I want different permissions for a specific file.
4
votes
2answers
4k views

Windows 2003; Find folders with non-inherited/changed permissions

The question: I'm looking for a good way to audit/search a directory structure (Windows 2003) and locate any folders that either don't inherit permissions from their parent -or- have additional ...
4
votes
3answers
262 views

Proper permissions for two developer team on PHP5 Apache Linux server

I was hoping someone could point me in the right direction regarding Linux permissions. I understand how to calculate what permissions are, understand the methodology behind changing them and can ...
4
votes
3answers
69 views

Server 2008 permissions issues

We have a selection of top level folders: E:\Data1 E:\Data2 E:\Data3 The permissions are simple - the default CREATOR OWNER, SYSTEM Full Control, some security groups allowing Modify and the LOCAL ...
4
votes
2answers
880 views

Write, wall, who and mesg

I want to set up a server with a lot of users so that (in order of importance): Users cannot obtain ip addresses of other users with who, or last Users can write to each other Users are able to ...
4
votes
3answers
11k views

NTFS Permissions Auditing with PowerShell

I am working on a project where I need to be able to audit various users and user group permissions on a NTFS formatted Windows file server. I would like to use PowerShell and have it recursively ...
4
votes
2answers
2k views

Subversion and mod_dav_svn: Why make www-data the owner of the files instead of root?

I've set up a dedicated Subversion server with Apache and mod_dav_svn on Ubuntu 9.10 Server, and I've got everything working fine at this point. However, I noticed that when it comes to assigning the ...
4
votes
2answers
2k views

‘noexec’ option on NTFS under Windows?

Is there equivalent filesystem option on Windows like 'noexec' mount option on Linux? Is it the same if I set "Read" permission, but unset "Read & Execute" permisson on root directory (whole ...
4
votes
4answers
20k views

How might I grant access to everyone's calendar in Exchange 2007?

We're considering changing our users' Outlook calendar permissions for all users so that everyone has "Reviewer" access by default. Since our users primarily use their calendars for business (and can ...
4
votes
4answers
4k views

Running git pull from a php script

I was trying the Perfect Workflow, with Git, GitHub, and SSH, but it seems i can't run git pull. I've tried git status and it's fine. When i git pull 2>&1 i get: error: cannot open ...
4
votes
1answer
822 views

How to grant permissions to Network Service to write in a remote location

I need to grant permissions to the Network Service account to write on a different machine on the same network. Can you tell me which permissions I should add? Thanks! EDIT From ...
4
votes
2answers
268 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
4
votes
1answer
10k views

MYSQL remote read only access, how do I set it up?

I've seen stuff on how to enable remote access, but never how to restrict it so that users cannot make any changes. I tried doing this: mysql> create user 'dude'@'boingoboingo.local' IDENTIFIED BY ...
4
votes
1answer
2k views

Denied root access to user mounted FUSE file system

Let me start with giving you the details of my setup: I am running Fedora 13 on an x86_64 arch. I have mounted a remote directory using sshfs: jim@localsite $ sshfs jim@remotesite:/home/jim ...
4
votes
5answers
8k views

Add group rwx permissions to a folder

I have a folder named docs, how do I add rwx permissions for group devs to docs? I tried: chmod -R g+rwx docs but I don't know where to specify that it's the devs group I want to grant permissions ...
4
votes
1answer
155 views

Tool to see nested permissions?

Here's the situation. Often I need to tell how a user is getting access to a specific folder. I can see in "Effective permissions" that they have read/write/etc, but because of nested groups I can't ...
4
votes
1answer
1k views

Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions

I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
4
votes
2answers
1k views

Vista Failure Auditing

I need to meet government security requirements in order to ship my product. Here is specific requirement I am trying to meet: Group ID (Vulid): V-1080 Group Title: File Auditing ...
4
votes
3answers
132 views

How to forbid drag'n drop for a Windows XP folder?

Some of users here sometimes mistakenly drag'n drop a folder. Is it possible to forbid them to move and rename a folder? They are all using Windows XP. The folder is on the network. They should be ...
4
votes
2answers
632 views

Setting a permission for any future file created in this directory

Hi can I make in linux any future file created in some directory, writable. Thank you gidi
4
votes
1answer
724 views

Undoing chmod 777

Sometimes in desperation, to test if my problem is not the permission problem I do: sudo chmod -R 777 mydir/ In most cases it does not helps, and now I have two problems ;) Files inside mydir/ had ...
4
votes
1answer
4k views

How do I assign an SELinux label to a symlink with semanage so it persists after a relabel?

My apache DocumentRoot /var/www is a symbolic link to another path. The target has the appropriate file context label (httpd_sys_content_t) so that apache can read it with SELinux enabled. However, ...
4
votes
3answers
92 views

What extra permission settings were added in Windows Server 2003 over Windows Server 2000?

We have a domain controller currently running Windows Server 2000, and we're in the process of upgrading some of our workstations to Windows 7. The problem is that users are getting access denied ...
4
votes
3answers
235 views

Permissions for shipping SQL Server 2005 transaction logs

I'm trying to ship transaction logs from Server A to Server B. I keep getting permission denied errors when the agent tries to run because it isn't using the right credentials to connect to the backup ...
4
votes
2answers
622 views

What are the minimum permissions for a Windows share to be anonymous-read only?

I am in the long and arduous process of resolving my confusion over Windows permissions, and would love to get some clarity over the following. I would like to provision a Windows share such that any ...
4
votes
2answers
1k views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
4
votes
3answers
2k views

How do I configure active directory when Sql Server 2012 is using a Virtual Account?

I'm getting the following event log entry from Sql Server 2012: SQL Server Scheduled Job 'Replication agents checkup' - Status: Failed - Invoked on: 2012-08-04 10:00:00 - Message: The job failed. ...
4
votes
2answers
3k views

RSync over SSH - permission denied even though the user is in the root group

I have a need to copy files between servers through the web. I'm using RSYNC over ssh to do so. The problem is, I need to be able to transfer files, no matter where the files is. I created a user ...
4
votes
1answer
5k views

“debug1: read_passphrase: can't open /dev/tty: No such device or address” when trying to connect through SSH

I am trying to connect to my server using ssh user@server.com -vv I get debug1: read_passphrase: can't open /dev/tty: No such device or address error or just Permission denied, please try ...
4
votes
1answer
3k views

How to make all new files in the directory be owned by the particular user?

I want all the files in /var/www directory be owned by nginx.devel. I have performed chmod once and update these files using rsync. But if I create a new file and then rsync it, it will be owned by ...
4
votes
2answers
625 views

crontab listing or editing results in fopen: permission denied

Recently, a job configured to run from a user's crontab stopped executing. When attempting to list or edit the crontab for the user, the result is: user@host:~$ crontab -l crontabs/user/: fopen: ...
4
votes
1answer
225 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
4
votes
1answer
358 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
4
votes
2answers
1k views

MS SQL access to restored database without sysadmin role

I have databases from different projects on one server. I can't give all developers administrative (sysadmin) access to the databases. They have to have the permissions needed to create and restore ...
4
votes
5answers
5k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
4
votes
4answers
667 views

Apache LAMP permisson issues on Ubuntu server

I have been trawling the internet for a few days now and think I've tried almost everything to get some virtual hosts set up on my Ubuntu server but everything short of chmod 777 on the webroot fails. ...
4
votes
2answers
3k views

Samba Permissions - I'm going to throw it!

I'm attempting to set up a samba share on my Ubuntu 8.04 LTS box, to be consumed by my mac and windows clients. I've created a 'samba' group and added my linux users to them, gave them samba ...