Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

3
votes
7answers
3k views

security issue of Linux sudo command?

I am using a Red Hat Enterprise 5 Linux box. I find if a user is in /etc/sudoers file, then if the user run command with sudo, the user will run this command with root privilege (without knowing root ...
3
votes
6answers
667 views

Correct recursive chmod, separate for files & dirs

I'd like to recursively chmod a directory so that: Files are 0664 Directories are 0775 How to do it better, shorter, fancier? :) Maybe, use umask somehow? All find solutions are too long: I ...
3
votes
4answers
6k views

I have administrative rights on Windows Server 2003, so why am I denied access to a folder?

A recent attempt to upgrade a piece of software failed because it couldn't access a folder. I tried to take a look at the folder in Explorer and was told: D:\folder is not accessible. Access ...
3
votes
2answers
134 views

Found a service which logs on using the account name “.\AccountName” - What does “.\” mean? [duplicate]

Possible Duplicate: Is there a specific name for the “.\” (dot-slash) shorthand used to log onto a Windows machine? I came across a server on an older windows server 2003 box today which ...
3
votes
3answers
2k views

Backup data while keeping POSIX ACLs and permissions

I'm looking for a practical way to backup data from a server and keep all ACLs and permissions. I've looked at tar, but according to Google tar doesn't keep ACLs . I know rsync can keep ACLs and ...
3
votes
3answers
1k views

How do I clear the “s” permission on a directory in Linux?

I have a directory that is showing up with the permission mask drwsrwsr-x. When I try to reset the permissions to 755 the S still remains. What is the "s" and why cant I change the permissions ...
3
votes
9answers
1k views

When to grant admin rights

We always have at least one contractor on site and because they are involved in different products / technologies, different software needs to be installed on their PC's. This takes up a lot of ...
3
votes
2answers
311 views

Recovering from a system-wide chown?

I have a Linux web server with multiple sites being hosted with CPanel. I was having trouble accessing a site, so I ran this command: chown -R root:root /home/evalreal/. While waiting for the command ...
3
votes
7answers
500 views

Users as local admins on Windows machines

I am in charge of a Windows-based network of over 70 computers at work. Servers are Windows Server 2008 and workstations are Windows Vista and Windows XP. Most users are researchers, and some of them ...
3
votes
4answers
985 views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
3
votes
3answers
2k views

Why is it so important to remove 777 permissions?

I'm writing installer for my PHP web app. It requires user to change permissions of a few files and directories (config.php, cache, uploads, .htaccess) to 777 (so that it's writable). I've seen in ...
3
votes
4answers
3k views

Restore default ownership in CentOS after terrible chown [duplicate]

Possible Duplicate: How do I recover a RHEL 4.3 server from bad permissions set over the entire filesystem? Is there any way to restore the default ownership of a CentOS filesystem after an ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
3
votes
3answers
193 views

Active Directory delegation best practices

I am in the process of delegating some Active Directory tasks to a group of users. These users do not have domain administration rights and will only perform tasks such as creating/disabling accounts ...
3
votes
3answers
627 views

Any fast way to assign NTFS permissions to a folder with a very big amount of subfolders and files?

I'm trying to change NTFS permission to a folder containing a very big hierarchy below. I'm using the traditional approach (right mouse button, properties, security, etc) It's taking really long and ...
3
votes
3answers
6k views

Excel file always opens in Read-Only mode over WebDAV

I mapped a WebDAV drive in my Windows Explorer. I can access files and browse etc. But. When I try to open my Excel file it always opens in Read-only mode. How do I open a file so it opens with write ...
3
votes
3answers
199 views

Maintain setgid bit (after bower install or gulp build)

We run web servers where we have the following situation: The www-data user runs the web server and must have read+write access to the files The deploy user deploys all the code The bob and alice ...
3
votes
3answers
234 views

Weird executable behaviour

I have a server machine with ubuntu 9.10. I am trying to put in place an executable, which turns out to be the latest flashplayer (debugger version). Somehow the file appears as present and ...
3
votes
2answers
592 views

Prevent file from being changed under Linux

What's the command under Linux to mark a file as "locked"/to prevent any changes from being made to it? I'm not talking about chmod. There's a property that can be set (the name escapes me at the ...
3
votes
2answers
5k views

Setting Windows ACLs to allow sub-subdirectory access

We're in the process of moving some directories from NetWare to Windows, and have run into a difference of permissioning. Because NetWare makes this easy, we have whole volumes where no users have any ...
3
votes
3answers
753 views

Allow PHP to write file without 777

I am setting up a simple website on webspace provided by my university. I do not have database access so I am storing all the data in a flat file. The issue I am experiencing is related to file ...
3
votes
2answers
245 views

Under which account are startup and shutdown scripts executed on Windows 7 & XP?

I'm trying to manually install and register xvid.ax and related DLLs on a bunch of Windows 7 and XP machines, which involves copying them to %windir%\system32. My attempts to effect this from startup ...
3
votes
4answers
6k views

Quickly changing Windows permissions for a huge directory tree?

I have a huge directory on an NTFS filesystem (i.e. a top-level directory containing tens or hundreds of millions of descendant nodes, with the file nodes probably on average about 3 levels deep) that ...
3
votes
1answer
601 views

How can I set the NTFS permissions on a folder for a WORM like behaviour

Is it possible to set group permission on a folder at a Windows server so that a file can be created, populated and closed, BUT not changed or deleted after that?
3
votes
1answer
257 views

How to give user limited active directory perms?

We are a very small company, and for some time I've been the only guy managing our domain/Active Directory. I'm NOT a sys admin, I'm a software dev, but I've done the best I could for them. We're ...
3
votes
2answers
196 views

Allow AD user to set passwords but no other attributes

I need an Active Directory user that can set passwords of other users but only passwords and not other attributes of the users. How can I configure that?
3
votes
3answers
2k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
3
votes
1answer
353 views

centos 6.2 gives read permission denied when root has set read permissions to all users

Installing Dropbox on Centos 6.2 owned by root. Demonstrating that the dropbox folder is owned by root with read permissions to all "root" user gives read permissions to all users [root@localhost ...
3
votes
2answers
667 views

Symbolic link to mysql database

I had to make a symbolic link on one of databases to another location on MySQL (Debian 6.0). So /var/lib/mysql/dbname points to /home/user/dbname, but MySQL gives MySQL error: 1017 (Can't find file: ...
3
votes
1answer
369 views

How do I give permission to access “/server-status?” on a specific IP address?

What file do I edit in my apache2 folder that will give a specific IP address permission to access my "server-status?" page?
3
votes
3answers
1k views

Configuring a truly world-writable directory for Samba

I have a directory on a linux server, where my user owns all the files, and only a certain directory is world-writable. All other directories are read-only for guests. The idea is that anyone should ...
3
votes
2answers
450 views

Permission audit on Windows file system

We're connecting a SharePoint 2010 to our file system so it can crawl and index the files on our network. However, the files have incorrect permissions in many cases and so we need to perform a ...
3
votes
3answers
108 views

Access to /usr/bin from web application - CentOS 5 64-bit dedicated hosting

I'm trying to access zip, unzip and du from a web application. I've done this before on other servers and had no problems, however when I enter the paths in /usr/bin the application reports that ...
3
votes
1answer
292 views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
3
votes
2answers
287 views

Preventing users from deleting SQL data

We just purchased a program that requires the users to have an account in the MS SQL server, with read/write access to the program's database. My concern is that since these users will now have write ...
3
votes
3answers
161 views

Granting MySQL permissions on a specific list of servers

Suppose I have a MySQL server, and I would like to grant a set of (non-trivial) permissions to 10 users (user1, user2, ... user10), each of which may come from any of 10 different hosts that can't be ...
3
votes
4answers
5k views

Exchange 2010 Setting Room Permissions

I have just successfully created a meeting room with option Enable the Resource Booking Attendant in Exchange 2010. However, the Domain Users are not able to book the room. My understanding the option ...
3
votes
3answers
999 views

Users removing Administrator from files/folders permissions

We're running Windows Server 2003 R2 with Active Directory and are having an issue with network shares whereby users, in an attempt to secure their documents, remove everybody (including the ...
3
votes
2answers
595 views

How do I mange permissions for multiple users editing the same code on my server?

I have a server that a few different coders will be using to work on various websites. Each coder will need to have access to each website. There's two 'clean' methods I've come up with to do this ...
3
votes
3answers
453 views

Difference between 'apache' and 'www' users?

I'm configuring Apache 2 on CentOS 4 (roughly equivalent to Red Hat). There are two users related to security for httpd: apache and www. It seems to me that apache is the user the web server actually ...
3
votes
1answer
2k views

What should be the persmissions of apache ssl folder

I have my cert.pem and cert.key files in /etc/apache2/ssl folders. What would be the most secure permissions and ownership of: 1) /etc/apache2/ssl folder 2) /etc/apache2/ssl/cert.pem file 3) ...
3
votes
3answers
118 views

Security Dangers of Loose Permissions

To an extent, I understand the purpose of limiting permissions to just what is needed, but I don't have a complete grasp of the possible dangers of having them open. I'm most concerned with web ...
3
votes
5answers
6k views

Add group rwx permissions to a folder

I have a folder named docs, how do I add rwx permissions for group devs to docs? I tried: chmod -R g+rwx docs but I don't know where to specify that it's the devs group I want to grant permissions ...
3
votes
2answers
3k views

How to prevent ssh git push to set file ownership?

I have a remote bare Git repository on an Ubuntu server, where the files are owned by the user my_project and the group my_project, with permissions set accordingly. All commiters are themself in the ...
3
votes
2answers
263 views

What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?

It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
3
votes
3answers
261 views

Linux Extended Permissions

What "beyond POSIX" file permissions are you using in your production/home Linux setups? I am using SELinux through FC11. Don't really notice it apart from the violations applet in Gnome. Does ...
3
votes
2answers
7k views

Using chown to change the group owner of a directory is not permitted…Why?

I am trying to execute chown on a directory that has the following permissions and owners: drwxrwxr-x 2 justin devs 4096 Jan 1 20:42 test I am trying to simply execute the following as the justin ...
3
votes
1answer
5k views

Windows 2008 R2 NTFS file permissions not working as intended

We just got our first Windows Server 2008 R2 server in. It's going to be a file server. However, I am running into a weird issue with it that seems to be a result of UAC. When I try to share a ...
3
votes
1answer
1k views

permission denied for chmod as root

I need to manage a customer's openvz guest (latest debian squeeze 64 bit). Now when I try to do a chmod 0750 /root as root it gives me Permission denied. This really puzzles me, as I thought root can ...
3
votes
3answers
2k views

User cannot access shared printer in Windows Server 2003

I have: A Windows Server 2003 machine acting as a file server and domain controller. Call this "Server 1". Another Windows Server 2003 machine acting as a terminal server, file server and DNS ...