Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

1
vote
2answers
338 views

Why can nginx access /etc/passwd? [closed]

I'm trying to setup my new VPS with my couple sites. nginx, php-fpm and other needed services installed. I setup a nginx server block(virtual hosts) for my site, and then try to create a php file ...
0
votes
2answers
2k views

Why am I getting permission denied error?

I am tryng to create a symlink but I am getting permission denied. How do I tell why? ln -nfs /home/deploy/foo/shared/config/nginx.conf /etc/nginx/sites-enabled/foo ln: failed to create symbolic link ...
0
votes
1answer
202 views

Cannot find home directory on Linux Server

I have recently been granted access to a Linux server where I transferred some data. Now, for some reason, when I use WinSCP or any other program to connect to the server, instead of logging in ...
-1
votes
1answer
58 views

Storing unencrypted web app / WordPress passwords - explain to a client

I have a problem with a client who is complaining about a WordPress installation having an unencrypted MySQL database password in the wp-config.php file. I've tried explaining this to him by stating ...
0
votes
0answers
158 views

Can't write files with PHP on IIS

I have an IIS 7.5 web server running on Windows 2008r2. When I try to write to a file I get a Permission Denied error, but I can't figure out how to fix the permissions. I have PHP configured via ...
1
vote
1answer
533 views

Proper config for Couchdb + SSL Ubuntu. Getting error: curl: (35) Unknown SSL protocol error in connection to 127.0.0.1:6984

I'm looking to use CouchDB with SSL and nodejs and I have just switched from self signed certificates (which were working for over a month) to a real SSL certificate and now I'm running into ...
1
vote
1answer
158 views

Restrict VSFTPD virtual user to respective directory

I'm using Ubuntu 13.10 with vsftpd, and trying to limit a FTP user to their respective directory. For this, I am using the following My vsftpd.conf : local_enable=YES write_enable=YES ...
1
vote
1answer
108 views

Write permissions for Network service in network folder

I'm trying to setup Team Foundation Server (TFS) authomatic backups, and to do that I need to set up a network folder for database backups. When trying to set folder path I receive a message from TFS ...
-2
votes
1answer
47 views

sudo permissions without root access

I want to give certain users on my server access to run commands as apache, but I don't want to give them full root access. Is there a way to allow a user to run a command similar to sudo -u apache ...
-2
votes
2answers
69 views

Is ZIP archive capable of storing permissions?

I am using Maven Assembly plugin to bundle my application along with configuration/settings files. It allows to specify persmissions to be stored along with files, which is quite convenient. Still I ...
2
votes
0answers
70 views

What permissions are needed on Mailbox database to call FindAppointments for all mailboxes?

I have a small application that retrieves all appointments from Exchange 2010 and puts them in a timesheet management app. The code to retrieve the appointments is as follows (it uses Exchange Web ...
0
votes
0answers
113 views

Creating SFTP Users chrootdirectory /var/www

I am trying to create a new sftp user in Ubuntu 12.04.4 and am running into some trouble. After creating the first sftp user, I document the commands for later user and then delete the user and try ...
3
votes
1answer
844 views

Different permissions per log file when using rsyslog

Is it feasible to define different permissions per log file, using rsyslog? $FileCreateMode applies to all, but I want different permissions for a specific file.
0
votes
1answer
345 views

Linux permissions in /var/www: What settings can I use for good security practice and still maintain accessibility?

I'm primarily trying to set permissions inside of /var/www . We are using a project format which has the following structure in common for each project: /var /www /runtime /shared /project.com ...
1
vote
1answer
35 views

Share a single uploads folder between 2 users through a Symlink or similar

One of the VPS's we're running contains 2 accounts that both share a database and SHOULD share an uploads folder. Both accounts are directadmin generated web accounts on a Centos 6 server. The second ...
5
votes
1answer
289 views

Different ACLs on two OU's with same “protect object from deletion” setting

Background After I configured our Active Directory so that the ability to move computers was delegated to helpdesk staff, I started hearing reports that computers would get "stuck" in specific OU's. ...
0
votes
2answers
114 views

permission denied using sudo

I have an alias in my .bashrc file that runs an executable python file like so: alias my-command="sudo -u apache /path/to/file.py" When I run my-command It prompts for my sudo password and then it ...
1
vote
1answer
413 views

Owncloud data folder in /home

I've installed an owncloud server to share it with 7 others people. I have set a symbolic link from their data folder to their home (/var/www/owncloud/data/$USER -> /home/$USER/owncloud ). So every ...
1
vote
2answers
106 views

iis 7.5 Website permissions

I'm trying to setup permissions on IIS 7.5 running in Win7. The instructions I found are: Ensure all your sites have their own unique Application Pool assigned. In the Advanced Settings under ...
1
vote
1answer
116 views

How to secure open journal system original submission files

I have installed ojs in my own server. In the installation process, it is required to create a folder that is writable by php (apache = www-data), but not accessible from the browser. The folder is ...
0
votes
2answers
1k views

nobody user/group with NIS/NFS

Software overview Machine A(NIS server): CentOS 6.2 Machine B:(NFS server) CentoS 6.2 Client machines: OpenSuse 12.3, CentOS 6.4 and CentOS 5.6 Introduction and setup Machine A is an NIS server ...
2
votes
2answers
381 views

SELinux preventing /etc/aliases email pipe to script from working

When somebody sends an email to my server, e.g. somestringthatisnotnecessarilyauser@myserver.com I want it to pipe to a PHP script. So in my /etc/aliases file I have: ...
0
votes
1answer
19 views

Why a given user can access a folder and another one does not?

I have two servers: Server one: deploy@server:/home/vftp$ ls -la total 24 drwxr-xr-x 6 ftp ftp 4096 May 7 2013 . drwxr-xr-x 7 root root 4096 Jul 19 2013 .. dr-xr-xr-- 3 ftp ftp 4096 Feb 18 ...
0
votes
2answers
148 views

Using Jenkins to access mysql files on the same instance

I have a Jenkins installation and running mysql server on the same box. One of my jenkins jobs is supposed to tar up the /var/lib/mysql folder but I get the following error tar: ...
0
votes
0answers
95 views

PHP upgrade always breaks session folder permissions

Every time I upgrade php (via yum upgrade) on my CentOS box, my /var/lib/session folder ownership becomes root:apache with 600 permissions. I use nginx as my web server. This breaks my site and ...
-1
votes
1answer
197 views

Force ssh to ignore id_rsa permissions

I have a very specific requirement that requires a private key to be used by multiple users. I know how bad this is. The problem is that if the identity file's permission is to permissive (444 in my ...
0
votes
0answers
251 views

SQL2008 R2 BackupDirectory - Cannot access the specified path or file on the server

I've recently added extra SAN storage space to our SQL2008R2 server (Failover Cluster with 2 nodes). With that I've edited the follow registry entry from I: to K: and moved the existing backup folders ...
1
vote
1answer
985 views

sftp gives permission denied only when chrooted?

I have configured sshd_conf on my centos box as below: Match group pilots ChrootDirectory /home/pilots ForceCommand internal-sftp X11Forwarding no AllowTcpForwarding no and the directory ...
9
votes
1answer
3k views

Amazon Cloudfront with S3. Access Denied

We're trying to distribute out S3 buckets via Cloudfront but for some reason the only response is an AccessDenied XML document like the following: <Error> ...
1
vote
0answers
41 views

How to write a file from Apache CGI in a user home directory on CentOS

I made a CGI in Python and it works unless I try to write to a file in a user's home. I activated allow_httpd_anon_write and allow_http_sys_script_anon_write to true with graphical tool for ...
1
vote
3answers
247 views

Windows 2008 system folder permissions

I'm trying to read the DHCP server logs in C:\Windows\System32\dhcp. Initially, I tried to read them with nxlog, but nxlog complained that the files don't exist. Then I opened up a Python IDLE shell ...
0
votes
0answers
402 views

FreeNAS, ZFS, OS X, can't get write access

I have a OS X. I configured server, based on FreeNAS. Setup sharing trough AFP service. Set all permissions for read-write access for users and groups. I do all the same things for one UFS drive and ...
-1
votes
1answer
174 views

Access files/ folders remotely by authentication via browser/ web [closed]

We have some requirements where we want to allow our clients/ users to download files/ folders from our file server via browser/ web. We have a many different directories created on our file server ...
1
vote
0answers
158 views

Root cron job can't read file from /root/

I've got a cron job in root's crontab defined like this: 0 1 * * * /usr/local/bin/tarsnap-backup-script > /tmp/tarsnapcron.txt 2> /tmp/tarsnapcron.err The script is a python script that ...
0
votes
0answers
202 views

Newly Created IIS AppPool not found

I created a new IIS site in IIS 7.5 (windows server 2008 r2). I created an apppool to go with it. When I try to give permissions to a folder using the identity IIS AppPool\CustomAppPoolName, it can't ...
2
votes
1answer
61 views

Allowing unpermitted group to access share - Windows 7

I've been a Linux sysadmin and am new to Windows so I apologize for the n00b question. I have two groups lets call them "Students" and "Professors". Students are very restricted, however professors ...
1
vote
1answer
115 views

Different permissions for different groups on one folder in OpenBSD?

Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
0
votes
1answer
837 views

Permission denied on owned file

I'm having issues setting permissions for a specific user. I have a directory /srv/git/ in which I'm trying to create a sub-directory test containing one file testfile (owned by www:www-data). ...
1
vote
0answers
55 views

Domain User blocked by a single server

Today, I had a user call me with an issue. He couldn't access a Desktop shortcut that's defined by group policy. The shortcut was pointing to a shared folder on our web server (W-01). All other ...
2
votes
2answers
587 views

Providing Read-only permissions to mailbox in Exchange 2010

I need to provide read access to a user in Exchange 2010. No matter how many different variances of the PowerShell I use I get a "Could not expand the folder" error in Outlook, and "Your mailbox ...
0
votes
0answers
109 views

GPO: Is there a way to apply NTFS permissions dynamically?

I would like to create a GPO that sets NTFS permissions on a set of folders and files. Computer Configuration => Policies => Windows Settings => Security Settings => File System and ...
13
votes
3answers
593 views

Which MySQL users are necessary?

My MySQL server has a number of strange users which I did not add. Are these all necessary? 'root'@'127.0.0.1' 'root'@'localhost' 'root'@'SERVERNAME' 'root'@'::1' ''@'SERVERNAME' ''@'LOCALHOST' If ...
0
votes
1answer
96 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
1
vote
1answer
2k views

Workaround needed to run FileMaker Server 12 Admin Console with the new Java security model

As of Java 7 update 51 (7u51), there is a requirement for a new Permissions attribute (introduced in 7u25) that prevents the FileMaker Server 12 Admin Console from running. This also affects the ...
1
vote
1answer
292 views

allowing php/apache to delete files in an ftp directory and subfolders

Basically, I am having an issue with a php script being able to move or delete files, and I know it has to do with permissions since that's what the php error from unlink() is telling me, but I'm not ...
1
vote
0answers
109 views

Start/Stop IIS site automated as an administrator, which is not a built-in “Administrator”

There are several ways to start/stop an IIS site, in a way that does not require logon to the system. For example: 1) Command line via APPCMD: C:\windows\system32\inetsrv\appcmd.exe stop site ...
2
votes
2answers
396 views

How can I vew the drivers installed to a printer as a limited user?

...alternately, what permissions do I need to give someone so they can view (but not alter) the Additional Drivers on a network printer shared out from a Windows print Server? (Server 2008 R2, Server ...
0
votes
0answers
154 views

Upload Folder in Apache httpd-dav.conf

Trying to setup WebDAV on Mac Apache to have ability to allow anonymous users to upload files to my WebDav server but not have access to them after they upload. They would also not be able to view the ...
1
vote
3answers
687 views

Hyper-V - Can a local user group contain a domain group as a member?

Can a local user group contain a domain group as a member? Situation is this: Server 2012 has Hyper-V role installed, logon as non-Admin cannot access Virtual Machine Manager because of error: ...
4
votes
1answer
187 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...