Tagged Questions

Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

0
votes
1answer
82 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
1
vote
1answer
1k views

Workaround needed to run FileMaker Server 12 Admin Console with the new Java security model

As of Java 7 update 51 (7u51), there is a requirement for a new Permissions attribute (introduced in 7u25) that prevents the FileMaker Server 12 Admin Console from running. This also affects the ...
1
vote
1answer
269 views

allowing php/apache to delete files in an ftp directory and subfolders

Basically, I am having an issue with a php script being able to move or delete files, and I know it has to do with permissions since that's what the php error from unlink() is telling me, but I'm not ...
1
vote
0answers
96 views

Start/Stop IIS site automated as an administrator, which is not a built-in “Administrator”

There are several ways to start/stop an IIS site, in a way that does not require logon to the system. For example: 1) Command line via APPCMD: C:\windows\system32\inetsrv\appcmd.exe stop site ...
1
vote
2answers
267 views

How can I vew the drivers installed to a printer as a limited user?

...alternately, what permissions do I need to give someone so they can view (but not alter) the Additional Drivers on a network printer shared out from a Windows print Server? (Server 2008 R2, Server ...
0
votes
0answers
127 views

Upload Folder in Apache httpd-dav.conf

Trying to setup WebDAV on Mac Apache to have ability to allow anonymous users to upload files to my WebDav server but not have access to them after they upload. They would also not be able to view the ...
1
vote
3answers
468 views

Hyper-V - Can a local user group contain a domain group as a member?

Can a local user group contain a domain group as a member? Situation is this: Server 2012 has Hyper-V role installed, logon as non-Admin cannot access Virtual Machine Manager because of error: ...
4
votes
1answer
157 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
1
vote
3answers
134 views

nginx - linux permissions interesting issue

I'd like to get some answers or suggestions to my problem. So I'm getting a simple error: 2014/02/16 12:01:43 [error] 7384#0: *1 FastCGI sent in stderr: "Primary script unknown" while reading ...
0
votes
2answers
1k views

Using NTFS “traverse” permissions, but user still denied access to network share (SBS 2003)

We have a staff member who requires access to a single folder in the root of a network share. All other files and folders in the share should be inaccessible to them. I thought if I added only ...
1
vote
2answers
126 views

Does /etc/fstab need to be world readable?

I would like to put network share mounts in /etc/fstab, but by default that file is world-readable which allows everyone to read the credentials I put into the mount options. Is it safe to make ...
6
votes
1answer
1k views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
0
votes
1answer
77 views

Set Country / Region field Access via Active Directory Delegation

After creating a security group for special permissions (edit User Objects fields like Street, ZIP etc.) I have a problem of not being able to delegate permission for the field "Country/Region" on a ...
6
votes
1answer
166 views

What does this intention with random numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
0
votes
0answers
82 views

Restricting Upload on apache webDAV server

I have a Mac OSx 10.8 with apache setup with WebDAV access. I need to restrict upload but allow download. Not sure where to accomplish this? in the https-webdav.conf or in permissions on the storage ...
1
vote
0answers
89 views

WebDAV OSX Permissions to restrict upload

I have a WebDav server I have working on OSX ML - access is secure but I just moved my files to an external drive I didn't need to modify directory permissions on the drive and it still works and ...
0
votes
0answers
40 views

Reset Permissions for Collection Administrator - Team Foundation Server

I am using Team Foundation Server 2013. I accidentally deleted and then re-added the "Project Collection Administrators" group. However, when it came back it had lost many of its permissions. ...
0
votes
1answer
60 views

DFS-R - secondary member NTFS permissions

On server1 I have E:\data\ that contains the home folders and shared department folders in it. Everyone has full share rights, then the rights are restricted appropriately through NTFS permissions. ...
0
votes
1answer
37 views

Recursively gave sudo group to all files in var

On a Debian server, in a hastened move, we changed the permissions of the /var directory recursively so that sudo was the associated group, and with write privileges, with these commands: chgrp -R ...
1
vote
1answer
180 views

Folder permissions for Apache vhost files on Samba share

In our website development environment, we have a central CentOS server running multiple vhosts via Apache. The vhost files are shared via SMB. Multiple developers in the office connect to this SMB ...
0
votes
1answer
2k views

Restrict access to a nested shared folder in Server 2008R2 file share

Server 2008 R2 VM as a member server set up as a file server. Situation: We have a contractor that needs read access to a nested folder in a shared directory in a domain environment. How do I go ...
0
votes
1answer
48 views

removing process (and child process) access to file systems? [closed]

is there a unix-type free OS that allows me to remove all disk access for a specific process and any of its children? #!/usr/bin/perl -w use strict; use Perl6::Slurp; my $infile= ...
2
votes
2answers
66 views

Sharing and NTFS-security

We have recently gotten a new system delivered to us. It's a standard Server 2008 and Windows 7 server-client solution with some tightened security. One of the new security policies have caused a ...
2
votes
0answers
99 views

TFS: How to reset all permissions?

The question is simple, how to reset all permissions to defaults on Team Foundation Server 2013? The second part: how to make sure I won't be locked out of TFS when doing the reset? The best option ...
0
votes
0answers
25 views

Permission settings for Apache in Fedora

I'm using Apache locally (so it only listens on localhost) for development purposes. I have my web applications (wordpress in this case) in my home directory. Now, I've read the advice of making ...
4
votes
2answers
372 views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
1
vote
1answer
998 views

Include AD domain admins group in Linux sudoers?

I'm working in a company whose network is configured through a Win Server Active Directory, with hundreds Windows of computers connected to the local domain. We are doing some tests to start ...
1
vote
0answers
88 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
2
votes
2answers
131 views

samba: change unix group from windows client

I try to setup a small samba server on Ubuntu 12.04 to share files. It seems to work fine but there is one permission problem. All Unix users primary group is group_common. Some users are ...
4
votes
1answer
170 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
-2
votes
1answer
49 views

Root can only change a file

I'm trying to make it so only a few php files can only be changed with the root user, however I had no luck.. The user I set up through adduser in ssh is still able to change/view it. I've used the ...
0
votes
1answer
766 views

Managing inherited mailbox permissions in Exchange 2007

Reviewing the Full Access permissions on a mailbox using Exchange Management Console (EMC) does not show you the whole picture. Example - EMC shows no permissions for the account Domain\administrator ...
0
votes
1answer
59 views

Selective subnet access permission on AWS VPC

I have multiple private subnets on AWS VPC (Virtual Private Cloud). E.g. 10.0.128.0/20, 10.0.192.0/20, 10.0.224.0/20 etc. I have an OpenVPN gateway on the VPC which allows users to connect to these ...
0
votes
1answer
587 views

Unable to start the Phusion Passenger - Cannot change the directory - Operation not permitted (errno=1)

I'm running Red Hat Enterprise Linux Server release 6.4 (Santiago) on Amazon EC2. I have installed Phusion Passenger via a gem. When I start httpd I have this error message in less ...
0
votes
1answer
386 views

Zentyal: “incorrect password” on login

I've installed Zentyal 3.3 on my virtual Ubuntu server (12.04.4 LTS (GNU/Linux 3.2.0-23-generic x86_64)) as package. But when I try to login, Zentyal throws "Incorrect password". I've added my user to ...
0
votes
0answers
32 views

Permissions not being inherited

So I have a parent folder FolderA which has: Administrator FullControl Allow FileAccessGroup FullControl Allow TerminalServerDeny FullControl Deny FolderB is a sub-folder with Inheritance enabled ...
1
vote
0answers
69 views

NTFS Permissions Overhaul

Essentially I am required to do a complete overhaul on a rather old (and messy) Windows server NTFS permissions. I have a Powershell script which gives me the information I need for permissions but ...
1
vote
0answers
236 views

SQL Server 2012 permissions from AD group login not refreshed until server restart

We have some IIS sites which runs under Managed Service Accounts (Windows Server 2012). Theese MSAs are members of resource groups in Active Directory. We are using resource groups as logins in SQL ...
1
vote
1answer
487 views

Connecting a Storage Space: connect-virtualdisk error PermissionDenied 40001

I'm trying to attach a storage space in my server but am receiving and access denied error. The back story is that the storage space was working fine on windows home server 2012, but then I paved the ...
1
vote
3answers
61 views

Is this normal that www-data still needs to have read and execute permissions on htdocs when using PHP-FPM?

I have setup an Apache+PHP-FPM environment and I have set the following in the PHP-FPM pool file: [www] user = mary group = mary listen = 127.0.0.1:9000 pm = dynamic pm.max_children = 8 ...
0
votes
1answer
162 views

How to recognize windows' permissions on a OSX server share

I have a server running OSX (Mountain Lion), accessed by a Windows 7 box. Investigating a permissions problem from the Win client, I open the permissions dialog on a network share's directory and see ...
0
votes
2answers
64 views

IIS: directory only accessible from/over a specific subdomain

to explain my purpose, this example of a directory structure: C:\www\ C:\www\folder-1 The domain "example.com" has "C:\www\" as home directory, and the domain "member.example.com" has the home ...
2
votes
2answers
84 views

Disable Execution of all files under directory OS X

Is it possible in OS X (Assume 10.7+) to disable execution of any file (even files in subdirectories) of a specified folder? I don't mean with chmod, but with some kind of security framework. Ideally ...
0
votes
0answers
17 views

restore administrator permission in sccm 2007

I accidently removed permissions on our parent SCCM server Will I be able to add them back? It had Domain Admins in the permission list, this was giving everyone all access to everything, and items ...
1
vote
2answers
2k views

You don't have permission to access / on this server - changing default www to NTFS drive

i have been struggling for a couple of days about this problem. I am trying to change the default www directory for Apache/2.4.6 (Ubuntu) web-server under LinuxMint16 and making it point to a NTFS ...
0
votes
1answer
48 views

How to restrict a Linux program's permissions

I'm running a native linux program from PHP using shell_exec. Specifically, calling antiword to extract text from Microsoft Word files users uploaded. However, as I've got no way of assessing ...
0
votes
1answer
315 views

vsftpd - libz.so.1: failed to map segment from shared object: Permission denied

/etc/init.d/vsftpd start Starting vsftpd for vsftpd: /usr/sbin/vsftpd: error while loading shared libraries: libz.so.1: failed to map segment from shared object: Permission denied ...
1
vote
1answer
732 views

How do ProFTPD/centOS handle directory permissions for virtual ftp users?

On proftpd/centos I configure the use of virtual user. I can login as a virtual user but I do not have write permission for this users. The proftpd.conf looks like: ServerName ...
-2
votes
1answer
150 views

Adding secondary groups and running processes

I made oracle member of a secondary group. Do I have to restart Oracle before it can write to directories owned by this secondary group?
1
vote
0answers
95 views

Lost web permission after upgrading CentOS from 5.6 to 5.10

I upgraded CentOS from 5.6 to 5.10 using the following simple commands while logged in as root: yum update yum upgrade Now, I can no longer access web pages. All requests, regardless of type of ...