Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

64
votes
5answers
33k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. ...
138
votes
2answers
9k views

Why is “chmod -R 777 /” destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault ...
62
votes
14answers
3k views

What's wrong with always being root?

I have a feeling this is a stupid question, but this is something I've wondered for awhile. I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
3
votes
3answers
2k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
18
votes
7answers
15k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
5
votes
1answer
2k views

How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?

I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
8
votes
8answers
16k views

How to repair/restore ubuntu 10.04 after 'sudo chmod / 777'

See Also: Why is “chmod -R 777 /” destructive? I changed file permissions recursively on the root directory / by executing sudo chmod -R / 777, and after that my system won't ...
3
votes
1answer
209 views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
14
votes
2answers
70k views

Using ICACLS to set permissions on user directories

I'm trying to reset permissions on user directories and having a bit of trouble with the last step of my script. My script basically takes ownership of the entire user directory, resets the ...
3
votes
4answers
971 views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
5
votes
3answers
9k views

How do I give a domain user permission to start and stop a Tomcat service?

I realize this is almost identical to this question but the big difference is that the methods described in the MSKB article DO NOT WORK for installed Tomcat services. They work for simple Windows ...
79
votes
7answers
86k views

How do I share a Git repository with multiple users on a machine?

I have a Git repository on a staging server which multiple developers need to be able to pull to. git-init seems to have a flag very close to what I'm looking for: --shared, except I'd like multiple ...
12
votes
4answers
10k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
8
votes
2answers
886 views

What is the best way to allow a domain user to start and stop services on the machine?

What is the best way to allow a domain user to start and stop services on the machine? The domains user cannot be made admin.
5
votes
2answers
6k views

How to give rights to one user for the restart of a service

It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?
5
votes
4answers
9k views

Administrator File Modification Privilege

Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
4
votes
1answer
631 views

Undoing chmod 777

Sometimes in desperation, to test if my problem is not the permission problem I do: sudo chmod -R 777 mydir/ In most cases it does not helps, and now I have two problems ;) Files inside mydir/ had ...
3
votes
2answers
3k views

root directory permissions changed to 777 by mistake whats now?

By Mistake on Ubuntu 9.04 my colleague has changed the permissions to 777 on root directory (/) whats the best way to recover the permissions ?
27
votes
6answers
28k views

How to setup linux permissions for the WWW folder?

Updated Summary The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
26
votes
4answers
54k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other ...
11
votes
6answers
7k views

Copy permissions to identical tree on linux / unix

i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions. how can i transfer the permissions layout from ...
12
votes
3answers
15k views

What User Should NGinx and PHP be running as?

Permissions are something that have confused for me a while with Linux. So at the minute both my NGinx and PHP-FPM instances are running with the user and group : www-data Is this standard? I ...
4
votes
3answers
3k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
3
votes
6answers
4k views

Software to build report of NTFS permissions

Is there any software that can scan through an NTFS file system and generate an easy to read report of NTFS permissions?
3
votes
3answers
16k views

How do I set up a shared directory on Linux?

I have a linux server I want to use to share files between users in my company. Users will access the machine with sftp or secure shell. Here is what I have: cd /home ls -l drwxrwsr-x 5 userA ...
4
votes
2answers
5k views

Is it safe to delete “Account Unknown” entries from Windows ACLs in a domain environment?

It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...
2
votes
1answer
812 views

How should I structure my users/groups/permissions for a web server?

How should I setup permissions in the most secure way on my dedicated server which I'm running FTP + Nginx on? I want FTP to be able to read/write files and I want Nginx to be able to read/write the ...
5
votes
5answers
12k views

ubuntu: let a user run a script with root permissions

I have ubuntu 8.04 and I want to write a bash script that runs as root which every user can run. I myself can do sudo. How do I do that? CLARIFICATION: I don't want to do it with sudo, because then ...
5
votes
3answers
2k views

Directory that a user can read, but root can't?

There's a directory underneath my homedir called ".gvfs". As my regular user account, I can read it just fine: ~ $ ls -lart ~raldi/.gvfs total 4 dr-x------ 2 raldi raldi 0 2009-05-25 22:17 . ...
2
votes
3answers
395 views

How to set up default group permission in linux folder

I have website folder called /home/john/public_html Now i want that what ever files are copied to that public_html or new files created inside that folder then those files should have default read ...
2
votes
1answer
1k views

Denied root access to user mounted FUSE file system

Let me start with giving you the details of my setup: I am running Fedora 13 on an x86_64 arch. I have mounted a remote directory using sshfs: jim@localsite $ sshfs jim@remotesite:/home/jim ...
3
votes
2answers
5k views

Restrict access to IIS site to an AD Group

Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
3
votes
4answers
3k views

Restore default ownership in CentOS after terrible chown [duplicate]

Possible Duplicate: How do I recover a RHEL 4.3 server from bad permissions set over the entire filesystem? Is there any way to restore the default ownership of a CentOS filesystem after an ...
2
votes
3answers
2k views

Odd permissions issues on Windows Server 2008 R2 with Macs OS 10.6/.7/.8

*I have four macs that use a Windows Server 2008 R2 machine to share files as part of their workflow, each user has their own folder and completed jobs are dropped in an archive folder when complete. ...
1
vote
2answers
1k views

How to prevent file owner from changing/deleting their own file? Linux CentOS

This is NOT your standard "how do permissions work" question! I'm thinking the answer will probably involve ACL, but I don't know how exactly. I've messed around with standard permissions, guid, ...
1
vote
1answer
1k views

Permission error with git on linux with bare shared repo

I've got a bare central repo that has this option turned on: git config core.sharedRepository true For some reason, the other users on this CentOS machine that pulls/pushes from the central repo ...
1
vote
5answers
1k views

How do I reset ownership of /usr/bin/sudo on Linux?

I accidentally changed ownership of /usr/bin/sudo to my current user (i also did this for some other stuff in my /usr directory). I can't change any of them back because I need ownership of ...
1
vote
3answers
176 views

Perhaps not understanding the OS X permissions model

Trying to set up a complex config for the bundled Httpd on MacOSX 10.6. In the log for the httpd: [Wed Mar 23 09:18:07 2011] [error] [client ::1] (13)Permission denied: mod_rewrite: can't access ...
1
vote
2answers
2k views

What permissions are needed to run a system() command within a php script that writes to a folder?

I've got a php script which has the line: system("ffmpeg -i ......"); The output folder is set to be: drwxrwxr-x 5 apache apache 4096 Oct 19 07:40 in_upload If I run the exact text "ffmpeg -i ...
1
vote
2answers
4k views

Exact extent / meaning of “Log on as a service” permission (W2K, W2K3)?

Let's say you have an active directory domain, and you want to have a service account run a certain windows service on multiple machines on the domain. The service account needs to be the same account ...
0
votes
1answer
366 views

Allow www-data to execute shell script

I have a shell script called boot.sh on an Ngnix server I am trying to call it via PHP, but I don't think I have permissions. How can I give www-data permission to run boot.sh - and only boot.sh ...
0
votes
2answers
78 views

permit a user to access a selected folder only (Active directory 2003)

I add the user in the Global Security Group (IT Dept), and create a folder and add the IT Dept in security permission on it. Under security tab of the folder, I want to remove the Machine\Users group ...
0
votes
4answers
344 views

403 Forbidden Access

Yesterday my supervisor mounted one of his directories onto my server. The problem is, I can't access them and I have no way of contacting him right now. When I type in the URL I get this error: ...
0
votes
3answers
873 views

500 error after dragging joomla website out of subdirectory

I recently dragged a website I built with joomla out of a subdirectory and now the whole website just shows a 500 internal error, can't even log into the backend. I've already tried changing the log ...
0
votes
2answers
144 views

On renaming supertest.HTML to supertest.php generates 500 Error

On Kittara.com/Supertest.PHP I have a basic HTML page (The home page is simply an image). But I planned on putting PHP in it so I renamed it to .PHP On doing so it causes a 500 Internal Server error. ...
0
votes
1answer
2k views

The server principal “sa” is not able to access the database “MyDb” under the current security context

We're getting this error and nothing we've tried so far has worked: TRUSTWORTHY ON exec sp_change_users_login 'Auto_Fix', 'sa' sa is mapped to user dbo and dbo is the database owner. Any help ...
-1
votes
2answers
1k views

mysql permissions issue - associated with my.cnf

I want to change the max_allowed_packet value, but when setting permissions for my.cnf to 777, I get (as expected): Warning: World-writable config file '/etc/my.cnf' is ignored If I set it to ...
13
votes
12answers
16k views

Why does sudo command take long to execute?

I've been picking up Linux (Fedora 10, then 11) over the past few months (and enjoying it immensely-- it's like discovering computers all over again, so many things to learn). I've added my user to ...
9
votes
1answer
19k views

How does one get setfacl to set ACL permissions recursively on Ubuntu 9.04 server edition?

I'm setting up a new server and wanted to give ACL a shot over the chown:chgrp:chmod style permissions. The man page for setfacl indicates that the '-R' option can be used to set the ACL ...
6
votes
1answer
9k views

What user should own /var/www on Ubuntu 9.04 Server?

I've got LAMP on Ubuntu 9.04 Server and the default installation has root:root owning the /var/www folder. I discovered this when another service, Hudson, could not write to that directory. I want ...