Questions tagged [permissions]

In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

Filter by
Sorted by
Tagged with
373 votes
6 answers
576k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. /var/...
Nic's user avatar
  • 13.5k
271 votes
2 answers
86k views

Why is "chmod -R 777 /" destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault (reinstall OS)...
samwise's user avatar
  • 2,413
6 votes
3 answers
9k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
oksofar's user avatar
  • 115
33 votes
8 answers
48k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
David Archer's user avatar
14 votes
9 answers
51k views

How to repair/restore ubuntu 10.04 after 'sudo chmod / 777'

See Also: Why is “chmod -R 777 /” destructive? I changed file permissions recursively on the root directory / by executing sudo chmod -R / 777, and after that my system won't boot (I'...
Marcin's user avatar
  • 157
85 votes
14 answers
11k views

What's wrong with always being root?

I have a feeling this is a stupid question, but this is something I've wondered for awhile. I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
ryeguy's user avatar
  • 1,071
39 votes
9 answers
174k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
jpoh's user avatar
  • 831
4 votes
1 answer
1k views

Two identical files; Apache says one is forbidden

I've got this one file, favicon.ico. It's actually a large group of nested files, but purely for example, just this one. If I do cp favicon.ico favicon2.ico, Apache can read the second one just fine. ...
Tycho's user avatar
  • 143
5 votes
1 answer
4k views

How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?

I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
Michael T. Smith's user avatar
61 votes
4 answers
120k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
Maverick's user avatar
  • 1,631
51 votes
2 answers
20k views

Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]

I have an Ubuntu server where I'm automounting an external hard drive each boot. To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder. ...
LonnieBest's user avatar
  • 1,530
16 votes
3 answers
137k views

Using ICACLS to set permissions on user directories

I'm trying to reset permissions on user directories and having a bit of trouble with the last step of my script. My script basically takes ownership of the entire user directory, resets the ...
pk.'s user avatar
  • 6,511
7 votes
1 answer
10k views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
George Reith's user avatar
5 votes
1 answer
5k views

Best way to set up permissions with nginx + php-fpm on shared hosting?

I'm running a shared hosting server with nginx and php-fpm on Debian. Everything works fine, php-fpm has separate pools for each users running as separate users and they each have their own socks. ...
dBi's user avatar
  • 75
4 votes
4 answers
2k views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
Joshua Berry's user avatar
76 votes
7 answers
148k views

How to setup linux permissions for the WWW folder?

Updated Summary The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
Xeoncross's user avatar
  • 4,539
66 votes
5 answers
196k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other services....
abitgone's user avatar
  • 1,343
65 votes
4 answers
350k views

How do I change the NGINX user?

I have a PHP script that creates a directory and outputs an image to the directory. This was working just fine under Apache but we recently decided to switch to NGINX to make more use of our limited ...
David's user avatar
  • 885
54 votes
1 answer
100k views

nginx: no permission to bind port 8090 but it binds to 80 and 8080

I'm struggling with some strange permission related behavior: when I configure nginx to listen to port 8080 everything works as expected, but when I use any other port I get something like 2014/01/10 ...
frans's user avatar
  • 659
32 votes
19 answers
6k views

How to convince a big boss that he does not need administrator privileges?

I've found a lot of times that "the big boss" in a company want to be able to install "anything" and to do anything in their computer. Of course we can tell him that it is bad because the IT system ...
FerranB's user avatar
  • 1,382
16 votes
3 answers
161k views

List user's folder access permissions

I have a user in a domain who has access to multiple subfolders in multiple folders. His rights were defined pretty granularly. Now he's leaving the company but will continue to work for a firm as a ...
imagodei's user avatar
  • 499
12 votes
3 answers
47k views

How to copy user privileges with MySQL?

I have a MySQL installation with many databases and users that I need to migrate to a new MySQL installation. I can use phpMyAdmin to export then import the databases/tables, but I don't know of ...
Nathan Osman's user avatar
  • 2,745
7 votes
3 answers
16k views

How do I give a domain user permission to start and stop a Tomcat service?

I realize this is almost identical to this question but the big difference is that the methods described in the MSKB article DO NOT WORK for installed Tomcat services. They work for simple Windows ...
Instantsoup's user avatar
7 votes
4 answers
38k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
Kev's user avatar
  • 7,897
34 votes
5 answers
148k views

Restrict access to IIS site to an AD Group

Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
John's user avatar
  • 365
23 votes
7 answers
22k views

Copy permissions to identical tree on linux / unix

i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions. how can i transfer the permissions layout from ...
yawniek's user avatar
  • 375
18 votes
1 answer
4k views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 /var/log:...
Soviero's user avatar
  • 4,376
16 votes
2 answers
32k views

How do I set default permissions for SFTP for an Ubuntu Server?

We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)? I'm also using setgid (chmod g+s) so that ...
wag2639's user avatar
  • 2,155
15 votes
6 answers
171k views

Mysql - Access denied for user 'root'@'x.x.x.x' [duplicate]

I am trying to connect to a remote mysql database from my local box. Initially I was not even able to hit the mysql db. But after commenting the binding_address in the my.cnf file and restarting the ...
bragboy's user avatar
  • 337
13 votes
5 answers
52k views

ubuntu: let a user run a script with root permissions

I have ubuntu 8.04 and I want to write a bash script that runs as root which every user can run. I myself can do sudo. How do I do that? CLARIFICATION: I don't want to do it with sudo, because then ...
flybywire's user avatar
  • 607
11 votes
1 answer
23k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
Luke's user avatar
  • 2,123
5 votes
4 answers
27k views

Administrator File Modification Privilege

Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
Leigh Riffel's user avatar
5 votes
1 answer
14k views

Configuring Chroot for SFTP Users

I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this: A user will be created for ...
imlepid's user avatar
  • 175
159 votes
8 answers
163k views

Amazon Cloudfront with S3. Access Denied

We're trying to distribute out S3 buckets via Cloudfront but for some reason the only response is an AccessDenied XML document like the following: <Error> <Code>AccessDenied</Code&...
Jordan Adams's user avatar
  • 1,691
133 votes
3 answers
362k views

What does Apache's "Require all granted" really do?

I've just update my Apache server to Apache/2.4.6 which is running under Ubuntu 13.04. I used to have a vhost file that had the following: <Directory "/home/john/development/foobar/web"> ...
John Crawford's user avatar
64 votes
2 answers
104k views

What Should be the Permissions of Apache SSL Directory, Certificate, and Key?

I have my cert.pem and cert.key files in /etc/apache2/ssl folders. What would be the most secure permissions and ownership of: /etc/apache2/ssl directory /etc/apache2/ssl/cert.pem file /etc/apache2/...
user avatar
43 votes
3 answers
101k views

Linux: how to give a user permission to restart apache?

I have a script running under a non-root user which, under certain conditions, should restart apache httpd. What would be the simplest way for me to allow the user to do that? I'm using Ubuntu ...
itsadok's user avatar
  • 1,889
37 votes
3 answers
15k views

Copy a file's owner permissions to group permissions

How can I copy a file's user/owner permissions to it's group permissions? For example if the permissions are 755 I want them to become 775. Clarification: 755 -> 775 123 -> 113 abc -> aac Bonus if ...
AnnanFay's user avatar
  • 610
23 votes
2 answers
19k views

What is the sticky bit in UNIX file systems? When is it used?

What is the sticky bit in a UNIX file system? As an admin when and how would you use it?
Aaron K's user avatar
  • 1,525
22 votes
6 answers
33k views

Why am I missing /var/run/sshd after every boot?

I'm running a Ubuntu 16.04 container under Proxmox 5.2-11. After applying the latest round of patches1 I'm unable to login at the console or over ssh. I mounted the container root FS on the ...
Server Fault's user avatar
  • 3,774
21 votes
2 answers
122k views

Failed at step EXEC spawning... Permission denied

I have read alot about this but still not sure why this is not working. as far as I know all dirs have the right permission and even with everything being 777 I still get permission denied when trying ...
Stone Monarch's user avatar
17 votes
3 answers
8k views

KVM guest cannot write to 9p share owned by non-root

I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
Greendrake's user avatar
  • 1,421
15 votes
2 answers
28k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
stickmangumby's user avatar
12 votes
5 answers
22k views

Resetting NTFS Permissions Disk Wide

Someone messed up majorly in setting permissions on an NTFS drive and I'm looking at a way to reset all permissions to default. The OS will be reinstalled but I'm trying to salvage data from their ...
Andrew Moore's user avatar
11 votes
4 answers
50k views

Account to read AD, join machine to domain, delete computer accounts and move computers to OUs

I want to create an account that will perform the following: Join computers to a domain (not restricted to 10, like a normal user) Check for computer accounts in AD Delete computers from AD Move ...
Ben's user avatar
  • 1,137
9 votes
1 answer
24k views

Scheduled Task in Windows Server 2016, run by non-admin Users

In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps: Scheduled Task: run under system, execute ...
n0rthclub's user avatar
8 votes
2 answers
4k views

What is the best way to allow a domain user to start and stop services on the machine?

What is the best way to allow a domain user to start and stop services on the machine? The domains user cannot be made admin.
Sir Rippov the Maple's user avatar
8 votes
2 answers
30k views

Allow www-data to execute shell script

I have a shell script called boot.sh on an Ngnix server I am trying to call it via PHP, but I don't think I have permissions. How can I give www-data permission to run boot.sh - and only boot.sh ...
K2xL's user avatar
  • 219
8 votes
2 answers
5k views

How can root user create file/directory unwritable for itself?

Normal users can chmod files to make them unaccessible like evgeniy@ubuntu:~$ touch test evgeniy@ubuntu:~$ chmod 444 test evgeniy@ubuntu:~$ echo 'test' > test bash: test: Permission denied Can ...
Ev Dolzhenko's user avatar
6 votes
2 answers
17k views

Is it safe to delete "Account Unknown" entries from Windows ACLs in a domain environment?

It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...
ThatGraemeGuy's user avatar

1
2 3 4 5 6