Questions tagged [permissions]
In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.
251
questions
373
votes
6
answers
576k
views
What permissions should my website files/folders have on a Linux webserver?
This is a Canonical Question about File Permissions on a Linux web server.
I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/.
/var/...
271
votes
2
answers
86k
views
Why is "chmod -R 777 /" destructive?
This is a Canonical Question about File Permission and Why 777 is "destructive".
I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault (reinstall OS)...
6
votes
3
answers
9k
views
Permission denied in vhost document root
I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3.
This question seems to have been answered several times on this forum, but none of the solutions work for me.
Basically, I ...
33
votes
8
answers
48k
views
How to workaround the NTFS Move/Copy design flaw?
As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem.
As explained in this MS KB article, the permissions for a ...
14
votes
9
answers
51k
views
How to repair/restore ubuntu 10.04 after 'sudo chmod / 777'
See Also:
Why is “chmod -R 777 /” destructive?
I changed file permissions recursively on the root directory / by executing sudo chmod -R / 777, and after that my system won't boot (I'...
85
votes
14
answers
11k
views
What's wrong with always being root?
I have a feeling this is a stupid question, but this is something I've wondered for awhile.
I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
39
votes
9
answers
174k
views
Which permissions/rights does a user need to have WMI access on remote machines?
I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons.
Is this possible? What ...
4
votes
1
answer
1k
views
Two identical files; Apache says one is forbidden
I've got this one file, favicon.ico. It's actually a large group of nested files, but purely for example, just this one.
If I do cp favicon.ico favicon2.ico, Apache can read the second one just fine.
...
5
votes
1
answer
4k
views
How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?
I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
61
votes
4
answers
120k
views
linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group
I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
51
votes
2
answers
20k
views
Prevent the possiblity of writing data to an unmounted mount point directory [duplicate]
I have an Ubuntu server where I'm automounting an external hard drive each boot.
To do this, I've created an empty folder on the root partition, and the drive gets mounted "inside" this folder.
...
16
votes
3
answers
137k
views
Using ICACLS to set permissions on user directories
I'm trying to reset permissions on user directories and having a bit of trouble with the last step of my script. My script basically takes ownership of the entire user directory, resets the ...
7
votes
1
answer
10k
views
SFTP user can't edit or create files
Server: Ubuntu 12.04 LTS
I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/.
bob ...
5
votes
1
answer
5k
views
Best way to set up permissions with nginx + php-fpm on shared hosting?
I'm running a shared hosting server with nginx and php-fpm on Debian.
Everything works fine, php-fpm has separate pools for each users running as separate users and they each have their own socks.
...
4
votes
4
answers
2k
views
How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]
Cause of the problem
I intended to add group write permission on hidden files like '.hgignore' with the following:
# pwd
/opt
# sudo chmod -R g+w .*
The problem is that '..' matched this pattern, ...
76
votes
7
answers
148k
views
How to setup linux permissions for the WWW folder?
Updated Summary
The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
66
votes
5
answers
196k
views
How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?
We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other services....
65
votes
4
answers
350k
views
How do I change the NGINX user?
I have a PHP script that creates a directory and outputs an image to the directory. This was working just fine under Apache but we recently decided to switch to NGINX to make more use of our limited ...
54
votes
1
answer
100k
views
nginx: no permission to bind port 8090 but it binds to 80 and 8080
I'm struggling with some strange permission related behavior: when I configure nginx to listen to port 8080 everything works as expected, but when I use any other port I get something like
2014/01/10 ...
32
votes
19
answers
6k
views
How to convince a big boss that he does not need administrator privileges?
I've found a lot of times that "the big boss" in a company want to be able to install "anything" and to do anything in their computer.
Of course we can tell him that it is bad because the IT system ...
16
votes
3
answers
161k
views
List user's folder access permissions
I have a user in a domain who has access to multiple subfolders in multiple folders. His rights were defined pretty granularly. Now he's leaving the company but will continue to work for a firm as a ...
12
votes
3
answers
47k
views
How to copy user privileges with MySQL?
I have a MySQL installation with many databases and users that I need to migrate to a new MySQL installation. I can use phpMyAdmin to export then import the databases/tables, but I don't know of ...
7
votes
3
answers
16k
views
How do I give a domain user permission to start and stop a Tomcat service?
I realize this is almost identical to this question but the big difference is that the methods described in the MSKB article DO NOT WORK for installed Tomcat services. They work for simple Windows ...
7
votes
4
answers
38k
views
Domain Admins group denied access to d: drive
I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01).
The member server has a C: and a D: drive.
Part ...
34
votes
5
answers
148k
views
Restrict access to IIS site to an AD Group
Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
23
votes
7
answers
22k
views
Copy permissions to identical tree on linux / unix
i have a tree of files with correct permission. then i have a (filewise) identical tree (with different file contents tough) with wrong permissions.
how can i transfer the permissions layout from ...
18
votes
1
answer
4k
views
Tool to show permissions of path in Linux?
Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.:
/var: root:root, 0755
/var/log:...
16
votes
2
answers
32k
views
How do I set default permissions for SFTP for an Ubuntu Server?
We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)?
I'm also using setgid (chmod g+s) so that ...
15
votes
6
answers
171k
views
Mysql - Access denied for user 'root'@'x.x.x.x' [duplicate]
I am trying to connect to a remote mysql database from my local box. Initially I was not even able to hit the mysql db. But after commenting the binding_address in the my.cnf file and restarting the ...
13
votes
5
answers
52k
views
ubuntu: let a user run a script with root permissions
I have ubuntu 8.04 and I want to write a bash script that runs as root which every user can run.
I myself can do sudo.
How do I do that?
CLARIFICATION: I don't want to do it with sudo, because then ...
11
votes
1
answer
23k
views
How can I override group policy using a local administrator account?
I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
5
votes
4
answers
27k
views
Administrator File Modification Privilege
Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
5
votes
1
answer
14k
views
Configuring Chroot for SFTP Users
I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this:
A user will be created for ...
159
votes
8
answers
163k
views
Amazon Cloudfront with S3. Access Denied
We're trying to distribute out S3 buckets via Cloudfront but for some reason the only response is an AccessDenied XML document like the following:
<Error>
<Code>AccessDenied</Code&...
133
votes
3
answers
362k
views
What does Apache's "Require all granted" really do?
I've just update my Apache server to Apache/2.4.6 which is running under Ubuntu 13.04. I used to have a vhost file that had the following:
<Directory "/home/john/development/foobar/web">
...
64
votes
2
answers
104k
views
What Should be the Permissions of Apache SSL Directory, Certificate, and Key?
I have my cert.pem and cert.key files in /etc/apache2/ssl folders.
What would be the most secure permissions and ownership of:
/etc/apache2/ssl directory
/etc/apache2/ssl/cert.pem file
/etc/apache2/...
43
votes
3
answers
101k
views
Linux: how to give a user permission to restart apache?
I have a script running under a non-root user which, under certain conditions, should restart apache httpd.
What would be the simplest way for me to allow the user to do that?
I'm using Ubuntu ...
37
votes
3
answers
15k
views
Copy a file's owner permissions to group permissions
How can I copy a file's user/owner permissions to it's group permissions?
For example if the permissions are 755 I want them to become 775.
Clarification:
755 -> 775
123 -> 113
abc -> aac
Bonus if ...
23
votes
2
answers
19k
views
What is the sticky bit in UNIX file systems? When is it used?
What is the sticky bit in a UNIX file system?
As an admin when and how would you use it?
22
votes
6
answers
33k
views
Why am I missing /var/run/sshd after every boot?
I'm running a Ubuntu 16.04 container under Proxmox 5.2-11. After applying the latest round of patches1 I'm unable to login at the console or over ssh.
I mounted the container root FS on the ...
21
votes
2
answers
122k
views
Failed at step EXEC spawning... Permission denied
I have read alot about this but still not sure why this is not working. as far as I know all dirs have the right permission and even with everything being 777 I still get permission denied when trying ...
17
votes
3
answers
8k
views
KVM guest cannot write to 9p share owned by non-root
I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
15
votes
2
answers
28k
views
Can I override my umask using ACLs to make all files created in a given directory world readable?
Assume that my umask is 0077.
I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
12
votes
5
answers
22k
views
Resetting NTFS Permissions Disk Wide
Someone messed up majorly in setting permissions on an NTFS drive and I'm looking at a way to reset all permissions to default. The OS will be reinstalled but I'm trying to salvage data from their ...
11
votes
4
answers
50k
views
Account to read AD, join machine to domain, delete computer accounts and move computers to OUs
I want to create an account that will perform the following:
Join computers to a domain (not restricted to 10, like a normal user)
Check for computer accounts in AD
Delete computers from AD
Move ...
9
votes
1
answer
24k
views
Scheduled Task in Windows Server 2016, run by non-admin Users
In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps:
Scheduled Task: run under system, execute ...
8
votes
2
answers
4k
views
What is the best way to allow a domain user to start and stop services on the machine?
What is the best way to allow a domain user to start and stop services on the machine? The domains user cannot be made admin.
8
votes
2
answers
30k
views
Allow www-data to execute shell script
I have a shell script called boot.sh on an Ngnix server
I am trying to call it via PHP, but I don't think I have permissions.
How can I give www-data permission to run boot.sh - and only boot.sh
...
8
votes
2
answers
5k
views
How can root user create file/directory unwritable for itself?
Normal users can chmod files to make them unaccessible like
evgeniy@ubuntu:~$ touch test
evgeniy@ubuntu:~$ chmod 444 test
evgeniy@ubuntu:~$ echo 'test' > test
bash: test: Permission denied
Can ...
6
votes
2
answers
17k
views
Is it safe to delete "Account Unknown" entries from Windows ACLs in a domain environment?
It's not uncommon to see entries in Windows ACLs (NTFS files/folders, registry, AD objects, etc.) with the name "Account Unknown (SID)". Obviously these are because of old AD users or groups which at ...