In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

186
votes
5answers
175k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. /var/...
200
votes
2answers
45k views

Why is “chmod -R 777 /” destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault (reinstall ...
5
votes
3answers
5k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
23
votes
7answers
28k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
9
votes
9answers
30k views

How to repair/restore ubuntu 10.04 after 'sudo chmod / 777'

See Also: Why is “chmod -R 777 /” destructive? I changed file permissions recursively on the root directory / by executing sudo chmod -R / 777, and after that my system won't boot (...
73
votes
14answers
5k views

What's wrong with always being root?

I have a feeling this is a stupid question, but this is something I've wondered for awhile. I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
50
votes
6answers
82k views

How to setup linux permissions for the WWW folder?

Updated Summary The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
4
votes
1answer
3k views

How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?

I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
16
votes
2answers
105k views

Using ICACLS to set permissions on user directories

I'm trying to reset permissions on user directories and having a bit of trouble with the last step of my script. My script basically takes ownership of the entire user directory, resets the ...
4
votes
4answers
1k views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
23
votes
4answers
41k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
8
votes
3answers
13k views

How to copy user privileges with MySQL?

I have a MySQL installation with many databases and users that I need to migrate to a new MySQL installation. I can use phpMyAdmin to export then import the databases/tables, but I don't know of ...
32
votes
19answers
3k views

How to convince a big boss that he does not need administrator privileges?

I've found a lot of times that "the big boss" in a company want to be able to install "anything" and to do anything in their computer. Of course we can tell him that it is bad because the IT system ...
0
votes
1answer
223 views

Two identical files; Apache says one is forbidden

I've got this one file, favicon.ico. It's actually a large group of nested files, but purely for example, just this one. If I do cp favicon.ico favicon2.ico, Apache can read the second one just fine. ...
6
votes
3answers
11k views

How do I give a domain user permission to start and stop a Tomcat service?

I realize this is almost identical to this question but the big difference is that the methods described in the MSKB article DO NOT WORK for installed Tomcat services. They work for simple Windows ...
3
votes
1answer
2k views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
7
votes
6answers
40k views

Mysql - Access denied for user 'root'@'x.x.x.x' [duplicate]

I am trying to connect to a remote mysql database from my local box. Initially I was not even able to hit the mysql db. But after commenting the binding_address in the my.cnf file and restarting the ...
16
votes
1answer
11k views

nginx: no permission to bind port 8090 but it binds to 80 and 8080

I'm struggling with some strange permission related behavior: when I configure nginx to listen to port 8080 everything works as expected, but when I use any other port I get something like 2014/01/10 ...
4
votes
4answers
55k views

List user's folder access permissions

I have a user in a domain who has access to multiple subfolders in multiple folders. His rights were defined pretty granularly. Now he's leaving the company but will continue to work for a firm as a ...
14
votes
4answers
33k views

Restrict access to IIS site to an AD Group

Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
9
votes
1answer
382 views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 /var/log:...
5
votes
4answers
24k views

Administrator File Modification Privilege

Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
45
votes
5answers
106k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other services....
15
votes
4answers
19k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
18
votes
2answers
14k views

What is the sticky bit in UNIX file systems? When is it used?

What is the sticky bit in a UNIX file system? As an admin when and how would you use it?
7
votes
3answers
10k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
3
votes
3answers
22k views

How do I set up a shared directory on Linux?

I have a linux server I want to use to share files between users in my company. Users will access the machine with sftp or secure shell. Here is what I have: cd /home ls -l drwxrwsr-x 5 userA ...
8
votes
2answers
2k views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
21
votes
2answers
1k views

chmod -R makes files in child folders ureadable for some reason

I was adjusting the permissions when setting up some WordPress themes, and ran chmod 664 -R theme-dir/* It worked fine on the files in the root of the directory, but all the files in subdirectories ...
4
votes
2answers
8k views

Is it safe to delete “Account Unknown” entries from Windows ACLs in a domain environment?

It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...
2
votes
1answer
995 views

How should I structure my users/groups/permissions for a web server?

How should I setup permissions in the most secure way on my dedicated server which I'm running FTP + Nginx on? I want FTP to be able to read/write files and I want Nginx to be able to read/write the ...
8
votes
2answers
3k views

What is the best way to allow a domain user to start and stop services on the machine?

What is the best way to allow a domain user to start and stop services on the machine? The domains user cannot be made admin.
6
votes
5answers
18k views

ubuntu: let a user run a script with root permissions

I have ubuntu 8.04 and I want to write a bash script that runs as root which every user can run. I myself can do sudo. How do I do that? CLARIFICATION: I don't want to do it with sudo, because then ...
5
votes
1answer
11k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
5
votes
2answers
11k views

How to give rights to one user for the restart of a service

It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?
2
votes
3answers
1k views

How to set up default group permission in linux folder

I have website folder called /home/john/public_html Now i want that what ever files are copied to that public_html or new files created inside that folder then those files should have default read /...
2
votes
6answers
9k views

How to deny the web access to some files?

I need to do an operation a bit strange. First, i run on Debian, apache2 (which 'runs' as user www-data) So, I have simple text file with .txt ot .ini, or whatever extension, doesnt matter. These ...
7
votes
2answers
2k views

How can root user create file/directory unwritable for itself?

Normal users can chmod files to make them unaccessible like evgeniy@ubuntu:~$ touch test evgeniy@ubuntu:~$ chmod 444 test evgeniy@ubuntu:~$ echo 'test' > test bash: test: Permission denied Can ...
4
votes
2answers
7k views

Has March 2015 Patch Tuesday broken 2003 shares?

We have several Windows Server 2003 boxes, and over night, they had their automatic updates installed. This morning, users cannot access shares they were previously able to, and are prompted for ...
3
votes
4answers
5k views

Restore default ownership in CentOS after terrible chown [duplicate]

Possible Duplicate: How do I recover a RHEL 4.3 server from bad permissions set over the entire filesystem? Is there any way to restore the default ownership of a CentOS filesystem after an ...
2
votes
2answers
7k views

Allow www-data to execute shell script

I have a shell script called boot.sh on an Ngnix server I am trying to call it via PHP, but I don't think I have permissions. How can I give www-data permission to run boot.sh - and only boot.sh ...
2
votes
2answers
19k views

SSH configuration, publickeys, Permission denied (publickey,password). error

My task: login from Mac OS Snow Leopard client to Ubuntu 10.10 server without password. Commands: client$ mkdir ~/.ssh client$ chmod 700 ~/.ssh client$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa Enter ...
1
vote
3answers
216 views

Perhaps not understanding the OS X permissions model

Trying to set up a complex config for the bundled Httpd on MacOSX 10.6. In the log for the httpd: [Wed Mar 23 09:18:07 2011] [error] [client ::1] (13)Permission denied: mod_rewrite: can't access ...
1
vote
2answers
4k views

MySQL LOAD DATA INFILE user privilege settings

I understand that users must have FILE privilege on *.* in order to use the LOAD DATA INFILE command without using LOCAL—which sends the file data through the client—but when GRANTing FILE ...
1
vote
2answers
3k views

What permissions are needed to run a system() command within a php script that writes to a folder?

I've got a php script which has the line: system("ffmpeg -i ......"); The output folder is set to be: drwxrwxr-x 5 apache apache 4096 Oct 19 07:40 in_upload If I run the exact text "ffmpeg -i ...
0
votes
2answers
3k views

Best way to recover mysql from a “chmod -R 777 /” with databases intact

Question: What is the best way to recover mysql (or worst case: migrate away) from a "chmod -R 777 /" with databases intact? System: Ubuntu 12.04 LTS MySQL 5.5.24 64 bit Amazon EC2 cloud server. ...
0
votes
2answers
157 views

permit a user to access a selected folder only (Active directory 2003)

I add the user in the Global Security Group (IT Dept), and create a folder and add the IT Dept in security permission on it. Under security tab of the folder, I want to remove the Machine\Users group ...
0
votes
4answers
226 views

No longer have to enter a password to SSH into another server?

For some reason, I have a server that if ssh into another server...you don't need to enter the password. How is this done? Can someone give me step by step instructions please?
0
votes
4answers
813 views

403 Forbidden Access

Yesterday my supervisor mounted one of his directories onto my server. The problem is, I can't access them and I have no way of contacting him right now. When I type in the URL I get this error: ...
-1
votes
2answers
126 views

linux + when change passwd we get permission denied

We have installed Redhat Linux 6.5 from scratch the VIA kick start installation and booted into single user mode because I don't have the root password. But when I perform the following: passwd root ...