The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
2answers
79 views

Prevent local administration privileges for our domain users

I am looking for possible solutions to prevent local administration privileges for our domain users. Currently, we provide our domain users local administration privileges to avoid issues with ...
1
vote
0answers
19 views

Why does SYSTEM “Privilege Use” event cause another program to crash?

This is an odd one that I've been trying to track down for while. I am not a server administrator, but a programmer/developer, but, sadly, at my company, I probably have the most knowledge of how to ...
0
votes
1answer
21 views

mysql grant select to ONE table on ALL database

I have many tables with the same table structure. I want to create a user which can access one table in all of those databases. We are adding new databases frequently, so a wildcard would be ...
1
vote
1answer
41 views

Start a remote scheduled task without administrator group

we are currently evaluating the possibility to start an already created scheduled task remotely. I already know that we can use the command: schtasks /run /s computer /tn taskname and it work fine. ...
-1
votes
1answer
74 views

Is www-data considered a non-privileged user on Apache?

Great Apache Hardening post that recommends "Run Apache from non-privileged account" because "Default apache configuration is to run as nobody or daemon." Is www-data:www-data considered a ...
0
votes
0answers
19 views

Privileges preventing meld to work

I'm only able to run meld using 'sudo' and it crashes if don't. Anybody knows at a glance where I have set the wrong privileges? $ meld aaa bbb /usr/local/lib/meld/meld/linkmap.py:57: GtkWarning: ...
0
votes
2answers
141 views

Local Privileges/Rights Issues after Domain Rename Windows Server 2012 Std R2

After renaming a domain from .com to .local I've noticed that none of my credentials work when I try to make any changes using my domain Administrator account. When I try to install software that ...
2
votes
2answers
875 views

Allowing nagios plugin check_dhcp to work without setuid root

Nagios has a plugin, check_dhcp, that does exactly what you'd think. It's widely suggested to install it setuid root, because it uses SO_BINDTODEVICE, which usually only root can do. Of course a ...
4
votes
2answers
89 views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
3
votes
0answers
109 views

Check that a given user has a given priviledge

Given a pair of a user and a privilege I need to determine if a user have the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
1
vote
2answers
345 views

Giving AD user accounts admin access on specific machines

Is there a way to give domain based accounts administrative access on specific machines and not others? I can control access and rights to which machines a user can log in to and what their ...
3
votes
2answers
202 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
2
votes
0answers
10 views

Give group of users install privilages in R but not affect root install?

So we have a few users who use a number of servers for various computations. They constantly ask us to install packages from bioconductor and cran for R. It's a real bother and truthfully they can ...
0
votes
1answer
33 views

User privileges enumerating serial device

I'm trying to use the Java Simple Serial Connector on Arch Linux. I have a simple program listed below: import jssc._ object Main { def main(args:Array[String]):Unit = { println("Started") ...
1
vote
0answers
298 views

Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges

My system: CentOS 6.5 + MySQL 5.6 I have created a backupuser for mysqldump: CREATE USER 'usr_backup'@'localhost' IDENTIFIED BY 'XXX'; GRANT USAGE ON *.* TO 'usr_backup'@'localhost' IDENTIFIED BY ...
-4
votes
1answer
71 views

User with “root” privileges can't actually see all folders [closed]

There is this problem with my newly created user with "root" privilages in my web server Ubuntu LTS 12.04 . I follow the rule: adduser newuser usermod -a -G sudo newuser then I add in visudo # ...
3
votes
1answer
133 views

“Deny Logon Locally” effects

I'm planning to harden my AD-based infrastructure. One privilege that I'm planning to limit is the "local logon" privilege. Now, if I push "Deny Logon Locally" through GPO, besides preventing ...
1
vote
1answer
38 views

fine grained Windows user permissions

Windows 8 has 2 options for setting account types: Standard Administrator I'm looking for a way to make custom account types that have finer grained permission options available. For example I ...
0
votes
2answers
43 views

Is there a way to set up a special user for kvm administration without adding to wheel group?

I'm trying to set up a user to manage kvm machines on a server, but I wanted to know if it would be possible to do without adding the user to the wheel group, as that effectively grants them ...
1
vote
2answers
3k views

Running an administrative program under user account - domain edition

I am tearing my hair out here - could use a little help. It appears that the classic RUNAS does not function under a Domain environment. At least, I cannot get it to run in a Windows Server 2012 R2 ...
1
vote
1answer
216 views

let users run program as administrator - windows xp 'sudoers'?

On linux I could just add a entry like username ALL = (root) NOPASSWD: /path/to/program to the sudoers file to enable my users to run a program with root/administrator-privileges. How can I do ...
2
votes
1answer
8k views

run sfc /scannow as administrator, but I am administrator

On my windows 2003 I have to run sfc /scannow as admin. I have tried to run it as local administrator and domain administrator, but it says I need of administrator privilege ???? I have tried runas ...
0
votes
1answer
68 views

user privileges ldap scheme

I needed to create a user (it's already created) in my LDAP schema and want to give privileges of reading/writing to that user like if they were the admin but just for a specific subtree. The thing ...
0
votes
4answers
2k views

The opposite of su: run a command without root privileges

I'm writing a shell script where most commands don't require root privileges. The script should be ran by the administrator. But I would like to be able to "su" to a normal user account for the parts ...
1
vote
2answers
199 views

Which user should cron jobs run as?

Ubuntu server with users root www-data mywebsite1 mywebsite2 There are multiple websites hosted on this server, each with their own user. Each website has their own cron jobs mostly ...
0
votes
2answers
642 views

SeTcbPrivilege not working, RSoP.msc, gpresult show it's enabled, whoami /priv shows disabled

I'm trying to install Cygwin with SSHd on a Windows Server 2008 R2 domain controller. I have installed Cygwin and SSHd several times on other machines, with no issues. Being a domain controller, the ...
1
vote
1answer
396 views

w command not showing users when not root

I have multiple users logged on my server (ubuntu 12.10), with ssh. None of them has root privileges. If I log in with my admin account and type w the resulting output is: 17:21:05 up 10 days, ...
-1
votes
1answer
257 views

Problems with user's privileges, wordpress, phpmyadmin, my host provider and I hope that's all [closed]

So I've been trying to install a new wordpress site beside an already working site. I want to have 2 different databases, so i created a new one, and I didn't go very far from that. I get the message ...
0
votes
1answer
190 views

GRANT/REVOKE on functions

I am using the has_function_privilege, to check and see if a certain user can access a function in my database. However, if I use REVOKE to revoke access, has_function_privilege still returns true: ...
3
votes
2answers
91 views

Give user-creation privileges to a user

In MySQL, how do you allow another user to create other users? In turn, those users should only be able to view some tables.
0
votes
1answer
348 views

How to grant full rights in smb.conf for subnet?

I have following smb.conf: http://pastebin.com/gCchZQvC Situation is that when I'm mapping my shares I need to login using my credentials to have ability to create directories and files. When I'm ...
0
votes
1answer
401 views

Prevent setuid from dropping setcap user privileges (VirtualBox)

I'm trying to run a web server from a headless, NAT'd VirtualBox guest. VirtualBox needs to bind to port 80, but the only way to do so is by running VirtualBox as root. To get around this, I tried ...
3
votes
1answer
3k views

Granting rights on postgresql database to another user

I'm trying to set up a system with a PostgreSQL database per user, with a PHP-FPM resource pool for an associated account. I need to grant all privileges on the database to the other user, but it ...
1
vote
1answer
767 views

Run application under Administrator when UAC is disabled [closed]

When the UAC is disabled, an application is launched in regular mode (i.e., it does not take into account the manifest) and the credentials window (for the administrator's login/password) does not ...
-1
votes
1answer
112 views

What is the point of the ''@localhost user in MySQL? [closed]

Quoting MySQL docs: If you cannot figure out why you get Access denied, remove from the user table all entries that have Host values containing wildcards (entries that contain '%' or '_' ...
2
votes
2answers
3k views

Troubleshooting sudoers via ldap

The good news is that I got sudoers via ldap working on Red Hat Directory Server. The package is sudo-1.7.2p1. I have some LDAP/Kerberos users in an LDAP group called wheel, and I have this entry in ...
5
votes
3answers
12k views

chown: changing ownership of `.': Invalid argument

I'm trying to install some new files on our new server while our sysadmin is in holidays: Here is my df # df -h Filesystem Size Used Avail Use% Mounted on /dev/sdb3 273G ...
0
votes
1answer
2k views

How can I run an elevated powershell script as part of VMWare Customization Specification?

Background / Goal I have a VMWare template that I am deploying and I am using VMWare's "customization specifications" to perform many of the sysprep tasks. The last thing I need to accomplish is ...
4
votes
3answers
22k views

How to run a command as administrator on Windows7 from a command line?

I need to run tscon.exe 0 /dest:console remotely = not manually on Windows7 as an administrator. More info here How to use tscon on Windows7? I did my research and OPTION 1 - runas for user ...
1
vote
1answer
872 views

why i cannot run screen command on openshift?

i am using redhat openshift, and find some problems now: a) why default screen can not support path which contains too much characters [xxname-xxname.rhcloud.com ~]\> which screen /usr/bin/screen ...
1
vote
2answers
1k views

Why can't I change the mode of /proc/sys/kernel/pty/max even when I am root?

Since pty is limited, I want to modify the content of /proc/sys/kernel/pty/max. The original value in max is 4096, and now I want to modify it to 10000. [root@home pty]# pwd /proc/sys/kernel/pty ...
1
vote
2answers
349 views

mass create privileges for mysql stored procedures

Is it possible to grant a privilege to a user such that they can execute all stored procs on the server (or even within a single db on that server). Looking at the grant syntax docs (5.5), it says ...
1
vote
1answer
108 views

Eliminate invalid privileges from MySQL

I have privileges floating around in the mysql.* tables pertaining to users, databases and tables which no longer exist. Is there a simple way to find and remove these orphaned entries?
1
vote
2answers
124 views

No users with ALL PRIVILEGES

I've encountered an issue after upgrade of MySQL server. Probably, upgrade procedure went south. The result was that none of the users had ALL PRIVILEGES grant. All the administrators had GRANT ...
2
votes
2answers
114 views

What are the privileges of application that runs in the security zone “Internet Zone”?

We've got an application that is deployed throught ClickOnce. When we install it from an URL, this application has the security zone "Internet Zone". As I mentionned in the title, I'd like to find a ...
8
votes
1answer
5k views

Upstart: allowing a normal user to stop and start my custom service

I have got my webserver application starting on boot using upstart. This is the upstart script: # web app node upstart file at /etc/init/webapp.conf description "web application" start on started ...
5
votes
3answers
783 views

Why can I access only the security tab on a server's printers?

Context: Win7 64-bit client, Windows Server 2003 I log into the server using MSTSC. The server is running Windows Server 2003, 32bit. I call up the list of Printers and Faxes from the Start menu. I ...
2
votes
1answer
368 views

Is it possible to specify MySQL global privileges for a specific table in all databases?

We have several databases with the same structure running on our MySQL server. Now we need an user which requires INSERT privileges on all databases, but on a specific table. Is it possible? I tried ...
2
votes
1answer
2k views

How do I automatically elevate privileges to install applications that require admin privileges?

I'm currently managing a large group of Windows 7 machines where no one has privileges to install applications (all 64-bit Enterprise version of Windows 7). Because no one has privileges to install ...
0
votes
1answer
690 views

Run batch files as administrator user

I have a segment with 100 computers. I am booting each machne from WinPE OS located on a CD. After the OS has finished loading, I want to automatically run a batch file that will copy the CD to the ...