In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

117
votes
4answers
106k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. ...
150
votes
2answers
14k views

Why is “chmod -R 777 /” destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault ...
3
votes
3answers
4k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
69
votes
14answers
4k views

What's wrong with always being root?

I have a feeling this is a stupid question, but this is something I've wondered for awhile. I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
22
votes
7answers
20k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
9
votes
9answers
23k views

How to repair/restore ubuntu 10.04 after 'sudo chmod / 777'

See Also: Why is “chmod -R 777 /” destructive? I changed file permissions recursively on the root directory / by executing sudo chmod -R / 777, and after that my system won't ...
3
votes
1answer
814 views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
5
votes
1answer
2k views

How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?

I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
14
votes
2answers
88k views

Using ICACLS to set permissions on user directories

I'm trying to reset permissions on user directories and having a bit of trouble with the last step of my script. My script basically takes ownership of the entire user directory, resets the ...
6
votes
3answers
10k views

How do I give a domain user permission to start and stop a Tomcat service?

I realize this is almost identical to this question but the big difference is that the methods described in the MSKB article DO NOT WORK for installed Tomcat services. They work for simple Windows ...
15
votes
4answers
21k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
8
votes
3answers
8k views

How to copy user privileges with MySQL?

I have a MySQL installation with many databases and users that I need to migrate to a new MySQL installation. I can use phpMyAdmin to export then import the databases/tables, but I don't know of ...
3
votes
4answers
1k views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
9
votes
3answers
14k views

Restrict access to IIS site to an AD Group

Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
5
votes
2answers
8k views

How to give rights to one user for the restart of a service

It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?
105
votes
7answers
119k views

How do I share a Git repository with multiple users on a machine?

I have a Git repository on a staging server which multiple developers need to be able to pull to. git-init seems to have a flag very close to what I'm looking for: --shared, except I'd like multiple ...
42
votes
6answers
51k views

How to setup linux permissions for the WWW folder?

Updated Summary The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
35
votes
5answers
81k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other ...
7
votes
1answer
3k views

nginx: no permission to bind port 8090 but it binds to 80 and 8080

I'm struggling with some strange permission related behavior: when I configure nginx to listen to port 8080 everything works as expected, but when I use any other port I get something like 2014/01/10 ...
4
votes
7answers
13k views

Mysql - Access denied for user 'root'@'x.x.x.x' [duplicate]

I am trying to connect to a remote mysql database from my local box. Initially I was not even able to hit the mysql db. But after commenting the binding_address in the my.cnf file and restarting the ...
2
votes
4answers
32k views

List user's folder access permissions

I have a user in a domain who has access to multiple subfolders in multiple folders. His rights were defined pretty granularly. Now he's leaving the company but will continue to work for a firm as a ...
0
votes
1answer
89 views

Two identical files; Apache says one is forbidden

I've got this one file, favicon.ico. It's actually a large group of nested files, but purely for example, just this one. If I do cp favicon.ico favicon2.ico, Apache can read the second one just fine. ...
8
votes
2answers
2k views

What is the best way to allow a domain user to start and stop services on the machine?

What is the best way to allow a domain user to start and stop services on the machine? The domains user cannot be made admin.
4
votes
2answers
2k views

Denied root access to user mounted FUSE file system

Let me start with giving you the details of my setup: I am running Fedora 13 on an x86_64 arch. I have mounted a remote directory using sshfs: jim@localsite $ sshfs jim@remotesite:/home/jim ...
5
votes
4answers
16k views

Administrator File Modification Privilege

Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
4
votes
1answer
742 views

Undoing chmod 777

Sometimes in desperation, to test if my problem is not the permission problem I do: sudo chmod -R 777 mydir/ In most cases it does not helps, and now I have two problems ;) Files inside mydir/ had ...
3
votes
2answers
4k views

root directory permissions changed to 777 by mistake whats now?

By Mistake on Ubuntu 9.04 my colleague has changed the permissions to 777 on root directory (/) whats the best way to recover the permissions ?
14
votes
7answers
9k views

Copy permissions to identical tree on linux / unix

i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions. how can i transfer the permissions layout from ...
7
votes
5answers
12k views

Resetting NTFS Permissions Disk Wide

Someone messed up majorly in setting permissions on an NTFS drive and I'm looking at a way to reset all permissions to default. The OS will be reinstalled but I'm trying to salvage data from their ...
23
votes
6answers
45k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
5
votes
3answers
6k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
12
votes
3answers
20k views

What User Should NGinx and PHP be running as?

Permissions are something that have confused for me a while with Linux. So at the minute both my NGinx and PHP-FPM instances are running with the user and group : www-data Is this standard? I ...
5
votes
4answers
4k views

Running git pull from a php script

I was trying the Perfect Workflow, with Git, GitHub, and SSH, but it seems i can't run git pull. I've tried git status and it's fine. When i git pull 2>&1 i get: error: cannot open ...
3
votes
3answers
19k views

How do I set up a shared directory on Linux?

I have a linux server I want to use to share files between users in my company. Users will access the machine with sftp or secure shell. Here is what I have: cd /home ls -l drwxrwsr-x 5 userA ...
3
votes
6answers
2k views

Windows XP autostart process as administrator

I am looking for a way with which i can autostart a certain program on logon of a user with user-rights with administrator-rights. I already tried using task scheduler but it didn't work out because ...
3
votes
6answers
4k views

Software to build report of NTFS permissions

Is there any software that can scan through an NTFS file system and generate an easy to read report of NTFS permissions?
7
votes
1answer
5k views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
4
votes
2answers
6k views

Is it safe to delete “Account Unknown” entries from Windows ACLs in a domain environment?

It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...
2
votes
1answer
911 views

How should I structure my users/groups/permissions for a web server?

How should I setup permissions in the most secure way on my dedicated server which I'm running FTP + Nginx on? I want FTP to be able to read/write files and I want Nginx to be able to read/write the ...
6
votes
3answers
3k views

Directory that a user can read, but root can't?

There's a directory underneath my homedir called ".gvfs". As my regular user account, I can read it just fine: ~ $ ls -lart ~raldi/.gvfs total 4 dr-x------ 2 raldi raldi 0 2009-05-25 22:17 . ...
5
votes
5answers
15k views

ubuntu: let a user run a script with root permissions

I have ubuntu 8.04 and I want to write a bash script that runs as root which every user can run. I myself can do sudo. How do I do that? CLARIFICATION: I don't want to do it with sudo, because then ...
4
votes
2answers
2k views

What exactly does this dpkg command do?

I fixed a permissin problem for nagios like discribed here. The command was: sudo dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw sudo dpkg-statoverride --update --add ...
3
votes
2answers
6k views

Exact extent / meaning of “Log on as a service” permission (W2K, W2K3)?

Let's say you have an active directory domain, and you want to have a service account run a certain windows service on multiple machines on the domain. The service account needs to be the same account ...
2
votes
3answers
833 views

How to set up default group permission in linux folder

I have website folder called /home/john/public_html Now i want that what ever files are copied to that public_html or new files created inside that folder then those files should have default read ...
-1
votes
1answer
758 views

Need to run cron jobs in cpanel as a specific user - permission problems [closed]

Right now my call in the CPanel CRON job section is: nice php /home/user/public_html/process.php After the latest updates to CentOS and PHP 5.2, I now am receiving this error on all CRON jobs: ...
4
votes
2answers
6k views

Has March 2015 Patch Tuesday broken 2003 shares?

We have several Windows Server 2003 boxes, and over night, they had their automatic updates installed. This morning, users cannot access shares they were previously able to, and are prompted for ...
3
votes
1answer
64 views

NTFS permissions explanation

I had asked the below question sometime ago and it was answered, I logged I'm recently to refer back to it only to have seen all the answers had been removed. Did I do something wrong? "I seem to be ...
3
votes
4answers
4k views

Restore default ownership in CentOS after terrible chown [duplicate]

Possible Duplicate: How do I recover a RHEL 4.3 server from bad permissions set over the entire filesystem? Is there any way to restore the default ownership of a CentOS filesystem after an ...
2
votes
3answers
3k views

Odd permissions issues on Windows Server 2008 R2 with Macs OS 10.6/.7/.8

*I have four macs that use a Windows Server 2008 R2 machine to share files as part of their workflow, each user has their own folder and completed jobs are dropped in an archive folder when complete. ...
2
votes
2answers
15k views

SSH configuration, publickeys, Permission denied (publickey,password). error

My task: login from Mac OS Snow Leopard client to Ubuntu 10.10 server without password. Commands: client$ mkdir ~/.ssh client$ chmod 700 ~/.ssh client$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa Enter ...