The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
2answers
46 views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
3
votes
0answers
52 views

Check that a given user has a given priviledge

Given a pair of a user and a privilege I need to determine if a user have the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
1
vote
2answers
68 views

Giving AD user accounts admin access on specific machines

Is there a way to give domain based accounts administrative access on specific machines and not others? I can control access and rights to which machines a user can log in to and what their ...
2
votes
0answers
22 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
2
votes
0answers
9 views

Give group of users install privilages in R but not affect root install?

So we have a few users who use a number of servers for various computations. They constantly ask us to install packages from bioconductor and cran for R. It's a real bother and truthfully they can ...
0
votes
1answer
19 views

User privileges enumerating serial device

I'm trying to use the Java Simple Serial Connector on Arch Linux. I have a simple program listed below: import jssc._ object Main { def main(args:Array[String]):Unit = { println("Started") ...
1
vote
0answers
83 views

Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges

My system: CentOS 6.5 + MySQL 5.6 I have created a backupuser for mysqldump: CREATE USER 'usr_backup'@'localhost' IDENTIFIED BY 'XXX'; GRANT USAGE ON *.* TO 'usr_backup'@'localhost' IDENTIFIED BY ...
-4
votes
1answer
43 views

User with “root” privileges can't actually see all folders [closed]

There is this problem with my newly created user with "root" privilages in my web server Ubuntu LTS 12.04 . I follow the rule: adduser newuser usermod -a -G sudo newuser then I add in visudo # ...
3
votes
1answer
62 views

“Deny Logon Locally” effects

I'm planning to harden my AD-based infrastructure. One privilege that I'm planning to limit is the "local logon" privilege. Now, if I push "Deny Logon Locally" through GPO, besides preventing ...
1
vote
1answer
34 views

fine grained Windows user permissions

Windows 8 has 2 options for setting account types: Standard Administrator I'm looking for a way to make custom account types that have finer grained permission options available. For example I ...
0
votes
2answers
38 views

Is there a way to set up a special user for kvm administration without adding to wheel group?

I'm trying to set up a user to manage kvm machines on a server, but I wanted to know if it would be possible to do without adding the user to the wheel group, as that effectively grants them ...
1
vote
2answers
1k views

Running an administrative program under user account - domain edition

I am tearing my hair out here - could use a little help. It appears that the classic RUNAS does not function under a Domain environment. At least, I cannot get it to run in a Windows Server 2012 R2 ...
1
vote
1answer
170 views

let users run program as administrator - windows xp 'sudoers'?

On linux I could just add a entry like username ALL = (root) NOPASSWD: /path/to/program to the sudoers file to enable my users to run a program with root/administrator-privileges. How can I do ...
2
votes
2answers
3k views

run sfc /scannow as administrator, but I am administrator

On my windows 2003 I have to run sfc /scannow as admin. I have tried to run it as local administrator and domain administrator, but it says I need of administrator privilege ???? I have tried runas ...
0
votes
1answer
55 views

user privileges ldap scheme

I needed to create a user (it's already created) in my LDAP schema and want to give privileges of reading/writing to that user like if they were the admin but just for a specific subtree. The thing ...
0
votes
4answers
840 views

The opposite of su: run a command without root privileges

I'm writing a shell script where most commands don't require root privileges. The script should be ran by the administrator. But I would like to be able to "su" to a normal user account for the parts ...
1
vote
2answers
111 views

Which user should cron jobs run as?

Ubuntu server with users root www-data mywebsite1 mywebsite2 There are multiple websites hosted on this server, each with their own user. Each website has their own cron jobs mostly ...
0
votes
2answers
449 views

SeTcbPrivilege not working, RSoP.msc, gpresult show it's enabled, whoami /priv shows disabled

I'm trying to install Cygwin with SSHd on a Windows Server 2008 R2 domain controller. I have installed Cygwin and SSHd several times on other machines, with no issues. Being a domain controller, the ...
1
vote
1answer
237 views

w command not showing users when not root

I have multiple users logged on my server (ubuntu 12.10), with ssh. None of them has root privileges. If I log in with my admin account and type w the resulting output is: 17:21:05 up 10 days, ...
-1
votes
1answer
173 views

Problems with user's privileges, wordpress, phpmyadmin, my host provider and I hope that's all [closed]

So I've been trying to install a new wordpress site beside an already working site. I want to have 2 different databases, so i created a new one, and I didn't go very far from that. I get the message ...
0
votes
1answer
95 views

GRANT/REVOKE on functions

I am using the has_function_privilege, to check and see if a certain user can access a function in my database. However, if I use REVOKE to revoke access, has_function_privilege still returns true: ...
3
votes
2answers
88 views

Give user-creation privileges to a user

In MySQL, how do you allow another user to create other users? In turn, those users should only be able to view some tables.
0
votes
1answer
275 views

How to grant full rights in smb.conf for subnet?

I have following smb.conf: http://pastebin.com/gCchZQvC Situation is that when I'm mapping my shares I need to login using my credentials to have ability to create directories and files. When I'm ...
0
votes
1answer
341 views

Prevent setuid from dropping setcap user privileges (VirtualBox)

I'm trying to run a web server from a headless, NAT'd VirtualBox guest. VirtualBox needs to bind to port 80, but the only way to do so is by running VirtualBox as root. To get around this, I tried ...
2
votes
1answer
2k views

Granting rights on postgresql database to another user

I'm trying to set up a system with a PostgreSQL database per user, with a PHP-FPM resource pool for an associated account. I need to grant all privileges on the database to the other user, but it ...
1
vote
1answer
489 views

Run application under Administrator when UAC is disabled [closed]

When the UAC is disabled, an application is launched in regular mode (i.e., it does not take into account the manifest) and the credentials window (for the administrator's login/password) does not ...
-1
votes
1answer
106 views

What is the point of the ''@localhost user in MySQL? [closed]

Quoting MySQL docs: If you cannot figure out why you get Access denied, remove from the user table all entries that have Host values containing wildcards (entries that contain '%' or '_' ...
2
votes
2answers
2k views

Troubleshooting sudoers via ldap

The good news is that I got sudoers via ldap working on Red Hat Directory Server. The package is sudo-1.7.2p1. I have some LDAP/Kerberos users in an LDAP group called wheel, and I have this entry in ...
5
votes
3answers
9k views

chown: changing ownership of `.': Invalid argument

I'm trying to install some new files on our new server while our sysadmin is in holidays: Here is my df # df -h Filesystem Size Used Avail Use% Mounted on /dev/sdb3 273G ...
0
votes
1answer
1k views

How can I run an elevated powershell script as part of VMWare Customization Specification?

Background / Goal I have a VMWare template that I am deploying and I am using VMWare's "customization specifications" to perform many of the sysprep tasks. The last thing I need to accomplish is ...
3
votes
3answers
17k views

How to run a command as administrator on Windows7 from a command line?

I need to run tscon.exe 0 /dest:console remotely = not manually on Windows7 as an administrator. More info here How to use tscon on Windows7? I did my research and OPTION 1 - runas for user ...
1
vote
1answer
780 views

why i cannot run screen command on openshift?

i am using redhat openshift, and find some problems now: a) why default screen can not support path which contains too much characters [xxname-xxname.rhcloud.com ~]\> which screen /usr/bin/screen ...
1
vote
2answers
900 views

Why can't I change the mode of /proc/sys/kernel/pty/max even when I am root?

Since pty is limited, I want to modify the content of /proc/sys/kernel/pty/max. The original value in max is 4096, and now I want to modify it to 10000. [root@home pty]# pwd /proc/sys/kernel/pty ...
1
vote
2answers
159 views

mass create privileges for mysql stored procedures

Is it possible to grant a privilege to a user such that they can execute all stored procs on the server (or even within a single db on that server). Looking at the grant syntax docs (5.5), it says ...
1
vote
1answer
89 views

Eliminate invalid privileges from MySQL

I have privileges floating around in the mysql.* tables pertaining to users, databases and tables which no longer exist. Is there a simple way to find and remove these orphaned entries?
1
vote
2answers
112 views

No users with ALL PRIVILEGES

I've encountered an issue after upgrade of MySQL server. Probably, upgrade procedure went south. The result was that none of the users had ALL PRIVILEGES grant. All the administrators had GRANT ...
2
votes
2answers
104 views

What are the privileges of application that runs in the security zone “Internet Zone”?

We've got an application that is deployed throught ClickOnce. When we install it from an URL, this application has the security zone "Internet Zone". As I mentionned in the title, I'd like to find a ...
6
votes
1answer
3k views

Upstart: allowing a normal user to stop and start my custom service

I have got my webserver application starting on boot using upstart. This is the upstart script: # web app node upstart file at /etc/init/webapp.conf description "web application" start on started ...
5
votes
3answers
607 views

Why can I access only the security tab on a server's printers?

Context: Win7 64-bit client, Windows Server 2003 I log into the server using MSTSC. The server is running Windows Server 2003, 32bit. I call up the list of Printers and Faxes from the Start menu. I ...
2
votes
1answer
290 views

Is it possible to specify MySQL global privileges for a specific table in all databases?

We have several databases with the same structure running on our MySQL server. Now we need an user which requires INSERT privileges on all databases, but on a specific table. Is it possible? I tried ...
2
votes
1answer
2k views

How do I automatically elevate privileges to install applications that require admin privileges?

I'm currently managing a large group of Windows 7 machines where no one has privileges to install applications (all 64-bit Enterprise version of Windows 7). Because no one has privileges to install ...
0
votes
1answer
566 views

Run batch files as administrator user

I have a segment with 100 computers. I am booting each machne from WinPE OS located on a CD. After the OS has finished loading, I want to automatically run a batch file that will copy the CD to the ...
1
vote
1answer
317 views

phpMyAdmin sends me to login page when clicking on Privileges tab

I had wanted to change the root mysql passwords so I went into the privileges tab and changed all of the passwords with the user name root (not smart with not knowing what I was doing I know). I went ...
5
votes
3answers
438 views

Delegate log off privilege?

Is it possible to delegate the right to log other users off? I'd like to give users the ability to log another user off of a computer, but I'm not willing to make everyone administrators to do so. We ...
3
votes
3answers
298 views

Is there a way to do a “run as” in a command line?

So, we are trying to push out the full .Net Framework 4 to all out client workstations within an Active Directory environment via the login batch file in the SYSVOL folder. I added the following ...
6
votes
2answers
371 views

Can I modify a Windows 7 environment to allow a .NET program to always run as Administrator?

We are about to roll out several hundred new machines running Windows 7 x64, with the OS installed via WDS so at the moment we can make changes and sysprep them into the build. The problem is a ...
0
votes
1answer
243 views

Efficient privilege separation under Apache2 + PHP 5.3

What's the preferred way to setup a privilege separated, shared environment with Apache2 security and performance wise? I'd like to run each virtualhost under a different user/group and handle PHP ...
3
votes
2answers
133 views

Different level of configuration commands for different users

I'd like to allow junior staff to make certain changes to the configuration on our Cisco routers. I don't much like having to divulge the enable password, but if I can at least keep them to a few ...
0
votes
1answer
59 views

How do I grant the privilege to add users to a specific Active Directory group?

I want give a user privileges to add users to a specific Active Directory group in my domain. How can I do this?
0
votes
1answer
362 views

Is there a GPO for prompting login for accessing network resources?

I get the error message that I don't have the right privileges to access the network resource (and that is correct) when I want to access my network share from a workstation (Windows 7) in the domain. ...