Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

4
votes
2answers
2k views

built in “Offer Remote Assistance” not working because of permissions

I'm trying to enable permissions for a user on a Windows7 machine to use the built in feature called "Offer Remote Assistance" or "Windows Remote Assistance". This feature works fine if the user is ...
4
votes
2answers
653 views

ESENT fails to determine the minimum I/O block size

I'm trying to get RavenDB running in embedded mode on a shared/multi-tenant webhost. RavenDB relies on the ESENT storage API. The filesystem on the hosting machines is locked down. The RavenDB ...
4
votes
4answers
875 views

IIS7 folder permissions

I build a basic WCF service that I now want to host in IIS7 under Windows Server 2008 R2. I added the service as an application under the default web site but whenever i try to run the application I ...
3
votes
7answers
3k views

security issue of Linux sudo command?

I am using a Red Hat Enterprise 5 Linux box. I find if a user is in /etc/sudoers file, then if the user run command with sudo, the user will run this command with root privilege (without knowing root ...
3
votes
6answers
702 views

Correct recursive chmod, separate for files & dirs

I'd like to recursively chmod a directory so that: Files are 0664 Directories are 0775 How to do it better, shorter, fancier? :) Maybe, use umask somehow? All find solutions are too long: I ...
3
votes
4answers
7k views

I have administrative rights on Windows Server 2003, so why am I denied access to a folder?

A recent attempt to upgrade a piece of software failed because it couldn't access a folder. I tried to take a look at the folder in Explorer and was told: D:\folder is not accessible. Access ...
3
votes
2answers
136 views

Found a service which logs on using the account name “.\AccountName” - What does “.\” mean? [duplicate]

Possible Duplicate: Is there a specific name for the “.\” (dot-slash) shorthand used to log onto a Windows machine? I came across a server on an older windows server 2003 box today which ...
3
votes
3answers
2k views

Backup data while keeping POSIX ACLs and permissions

I'm looking for a practical way to backup data from a server and keep all ACLs and permissions. I've looked at tar, but according to Google tar doesn't keep ACLs . I know rsync can keep ACLs and ...
3
votes
3answers
1k views

Copy a file's owner permissions to group permissions

How can I copy a file's user/owner permissions to it's group permissions? For example if the permissions are 755 I want them to become 775. Clarification: 755 -> 775 123 -> 113 abc -> aac Bonus if ...
3
votes
3answers
1k views

How do I clear the “s” permission on a directory in Linux?

I have a directory that is showing up with the permission mask drwsrwsr-x. When I try to reset the permissions to 755 the S still remains. What is the "s" and why cant I change the permissions ...
3
votes
9answers
1k views

When to grant admin rights

We always have at least one contractor on site and because they are involved in different products / technologies, different software needs to be installed on their PC's. This takes up a lot of ...
3
votes
2answers
329 views

Recovering from a system-wide chown?

I have a Linux web server with multiple sites being hosted with CPanel. I was having trouble accessing a site, so I ran this command: chown -R root:root /home/evalreal/. While waiting for the command ...
3
votes
7answers
509 views

Users as local admins on Windows machines

I am in charge of a Windows-based network of over 70 computers at work. Servers are Windows Server 2008 and workstations are Windows Vista and Windows XP. Most users are researchers, and some of them ...
3
votes
4answers
997 views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
3
votes
3answers
2k views

Why is it so important to remove 777 permissions?

I'm writing installer for my PHP web app. It requires user to change permissions of a few files and directories (config.php, cache, uploads, .htaccess) to 777 (so that it's writable). I've seen in ...
3
votes
4answers
3k views

Restore default ownership in CentOS after terrible chown [duplicate]

Possible Duplicate: How do I recover a RHEL 4.3 server from bad permissions set over the entire filesystem? Is there any way to restore the default ownership of a CentOS filesystem after an ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
3
votes
3answers
223 views

Active Directory delegation best practices

I am in the process of delegating some Active Directory tasks to a group of users. These users do not have domain administration rights and will only perform tasks such as creating/disabling accounts ...
3
votes
3answers
696 views

Any fast way to assign NTFS permissions to a folder with a very big amount of subfolders and files?

I'm trying to change NTFS permission to a folder containing a very big hierarchy below. I'm using the traditional approach (right mouse button, properties, security, etc) It's taking really long and ...
3
votes
3answers
7k views

Excel file always opens in Read-Only mode over WebDAV

I mapped a WebDAV drive in my Windows Explorer. I can access files and browse etc. But. When I try to open my Excel file it always opens in Read-only mode. How do I open a file so it opens with write ...
3
votes
3answers
230 views

Maintain setgid bit (after bower install or gulp build)

We run web servers where we have the following situation: The www-data user runs the web server and must have read+write access to the files The deploy user deploys all the code The bob and alice ...
3
votes
3answers
238 views

Weird executable behaviour

I have a server machine with ubuntu 9.10. I am trying to put in place an executable, which turns out to be the latest flashplayer (debugger version). Somehow the file appears as present and ...
3
votes
2answers
618 views

Prevent file from being changed under Linux

What's the command under Linux to mark a file as "locked"/to prevent any changes from being made to it? I'm not talking about chmod. There's a property that can be set (the name escapes me at the ...
3
votes
2answers
5k views

Setting Windows ACLs to allow sub-subdirectory access

We're in the process of moving some directories from NetWare to Windows, and have run into a difference of permissioning. Because NetWare makes this easy, we have whole volumes where no users have any ...
3
votes
2answers
263 views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
3
votes
3answers
852 views

Allow PHP to write file without 777

I am setting up a simple website on webspace provided by my university. I do not have database access so I am storing all the data in a flat file. The issue I am experiencing is related to file ...
3
votes
4answers
3k views

CentOS Adding a user restricted to one directory

What's the easiest and standard way to create and restrict a new user to /var/www/ in CentOS ? Edit: Ideally restricted to SCP only.
3
votes
2answers
257 views

Under which account are startup and shutdown scripts executed on Windows 7 & XP?

I'm trying to manually install and register xvid.ax and related DLLs on a bunch of Windows 7 and XP machines, which involves copying them to %windir%\system32. My attempts to effect this from startup ...
3
votes
2answers
1k views

Can I run SVN update and commit without using sudo?

Under my local development environment (Ubuntu) I have a checked out SVN repository. The files have the owner myuser:myuser. However, I must use sudo for the "svn up" and "svn ci" commands. Also in ...
3
votes
4answers
7k views

Quickly changing Windows permissions for a huge directory tree?

I have a huge directory on an NTFS filesystem (i.e. a top-level directory containing tens or hundreds of millions of descendant nodes, with the file nodes probably on average about 3 levels deep) that ...
3
votes
1answer
611 views

How can I set the NTFS permissions on a folder for a WORM like behaviour

Is it possible to set group permission on a folder at a Windows server so that a file can be created, populated and closed, BUT not changed or deleted after that?
3
votes
1answer
284 views

How to give user limited active directory perms?

We are a very small company, and for some time I've been the only guy managing our domain/Active Directory. I'm NOT a sys admin, I'm a software dev, but I've done the best I could for them. We're ...
3
votes
2answers
207 views

Allow AD user to set passwords but no other attributes

I need an Active Directory user that can set passwords of other users but only passwords and not other attributes of the users. How can I configure that?
3
votes
3answers
3k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
3
votes
1answer
372 views

centos 6.2 gives read permission denied when root has set read permissions to all users

Installing Dropbox on Centos 6.2 owned by root. Demonstrating that the dropbox folder is owned by root with read permissions to all "root" user gives read permissions to all users [root@localhost ...
3
votes
2answers
805 views

Symbolic link to mysql database

I had to make a symbolic link on one of databases to another location on MySQL (Debian 6.0). So /var/lib/mysql/dbname points to /home/user/dbname, but MySQL gives MySQL error: 1017 (Can't find file: ...
3
votes
1answer
401 views

How do I give permission to access “/server-status?” on a specific IP address?

What file do I edit in my apache2 folder that will give a specific IP address permission to access my "server-status?" page?
3
votes
3answers
1k views

Configuring a truly world-writable directory for Samba

I have a directory on a linux server, where my user owns all the files, and only a certain directory is world-writable. All other directories are read-only for guests. The idea is that anyone should ...
3
votes
2answers
486 views

Permission audit on Windows file system

We're connecting a SharePoint 2010 to our file system so it can crawl and index the files on our network. However, the files have incorrect permissions in many cases and so we need to perform a ...
3
votes
3answers
111 views

Access to /usr/bin from web application - CentOS 5 64-bit dedicated hosting

I'm trying to access zip, unzip and du from a web application. I've done this before on other servers and had no problems, however when I enter the paths in /usr/bin the application reports that ...
3
votes
1answer
367 views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
3
votes
2answers
311 views

Preventing users from deleting SQL data

We just purchased a program that requires the users to have an account in the MS SQL server, with read/write access to the program's database. My concern is that since these users will now have write ...
3
votes
3answers
163 views

Granting MySQL permissions on a specific list of servers

Suppose I have a MySQL server, and I would like to grant a set of (non-trivial) permissions to 10 users (user1, user2, ... user10), each of which may come from any of 10 different hosts that can't be ...
3
votes
4answers
5k views

Exchange 2010 Setting Room Permissions

I have just successfully created a meeting room with option Enable the Resource Booking Attendant in Exchange 2010. However, the Domain Users are not able to book the room. My understanding the option ...
3
votes
3answers
1k views

Users removing Administrator from files/folders permissions

We're running Windows Server 2003 R2 with Active Directory and are having an issue with network shares whereby users, in an attempt to secure their documents, remove everybody (including the ...
3
votes
2answers
604 views

How do I mange permissions for multiple users editing the same code on my server?

I have a server that a few different coders will be using to work on various websites. Each coder will need to have access to each website. There's two 'clean' methods I've come up with to do this ...
3
votes
3answers
461 views

Difference between 'apache' and 'www' users?

I'm configuring Apache 2 on CentOS 4 (roughly equivalent to Red Hat). There are two users related to security for httpd: apache and www. It seems to me that apache is the user the web server actually ...
3
votes
3answers
120 views

Security Dangers of Loose Permissions

To an extent, I understand the purpose of limiting permissions to just what is needed, but I don't have a complete grasp of the possible dangers of having them open. I'm most concerned with web ...
3
votes
5answers
6k views

Add group rwx permissions to a folder

I have a folder named docs, how do I add rwx permissions for group devs to docs? I tried: chmod -R g+rwx docs but I don't know where to specify that it's the devs group I want to grant permissions ...
3
votes
2answers
4k views

How to prevent ssh git push to set file ownership?

I have a remote bare Git repository on an Ubuntu server, where the files are owned by the user my_project and the group my_project, with permissions set accordingly. All commiters are themself in the ...