Tagged Questions
0
votes
0answers
51 views
IIS6 - How to restrict users between two FTP sites on the same machine?
On a Server 2003 machine, I've installed IIS6 and FTP services. I've created two different FTP sites, each one is listening on a different network adapter (2 IP addresses). The machine is joined to a ...
0
votes
1answer
45 views
Is there a way to allow specific permissions to a non-root user?
I have a program that, at some point, create/destroys tun/tap virtual adapters.
Obviously, for these specific operations this program requires root privileges.
According to the program ...
0
votes
0answers
53 views
IIS + ASP.NET MVC - no permission to read css file?
I have set up my new asp.net mvc application - it works okay but it doesn't let the browser read the .css file.
This is the error i get:
You do not have permission to view this directory or page ...
0
votes
0answers
24 views
How to give Admins Access to move users to a Single OU [duplicate]
We are delegating few acceses to some admins via taskpads;
So we created a OU called "Delete" and we want the admins to move all the users to be deleted to that OU; How can we do that , how can we ...
0
votes
1answer
30 views
Stop certain users accessing C:\Source by security group
We have a security group called SourceCode which allows certain users access to the SVN / GIT repository. This allows them to get the latest repo and store it in C:\Source. This works fine but the ...
4
votes
1answer
51 views
What is this user name for and how did it get created?
When I created a website named Portal on my IIS 7.5 on the website permissions->security I got this user. What is its purpose?
From what I have read the ApplicationPool runs under NetworkService ...
1
vote
0answers
189 views
Disabling all write (cd burning) permissions for a specific group of users on all CD/DVD drives mounted in Windows XP Pro SP3
I want all users within 'Restricted' user group (Windows XP Professional SP3) to be able to read from CDs/DVDs they insert. I don't want these users to be able to burn any CDs/DVDs using CDRW/DVDRW ...
0
votes
0answers
19 views
Need to allow Paste, Move and Rename permissions without delete permission [duplicate]
Possible Duplicate:
Is it possible to grant rename permissions, but not delete, in NTFS?
I’m administering a Windows domain that started with a Windows 2003 standard server (32bit) that had ...
0
votes
1answer
80 views
postfix feed to program as root
trying to get postfix to pipe stdin from an email into a script that needs to be run by root (yes I understand the security issues of doing this. no lectures, please).
myalias: |/root/script/thing.rb ...
1
vote
1answer
87 views
Setting up limited AD account for external support person
I'm trying to setup a limited account for an outside company in active directory. They need to connect to one server to setup their software. I created a new group called "Limited Access", made that ...
4
votes
1answer
419 views
Granting service control manager access permission to user outside of administrator group
I have a user outside of administrator group.
How can I grant service control manager access permission for that (specific) user?
It's like SC_MANAGER_ALL_ACCESS from the following link:
...
2
votes
1answer
43 views
Is it possible to change User's Home Directorys permission in OSX?
Most of your staff uses OSX as main operation system. The problem is that recently we were attacked with some odd malware: users are getting zip-file via mail, and when they open this zip file, they ...
1
vote
1answer
45 views
Exchange 2007: Which permissions required to change folder permissions for all mailboxes?
Which permission(s) are required to modify permissions on folders in all mailboxes in Exchange 2007?
I'm looking a least-privilege setup. I've seen hints pointing towards that the role Organizational ...
0
votes
1answer
49 views
Is it possible to create an FTP user that can only access certain directories?
Suppose I have the following directories inside my www folder:
private_info_1
public_info_1
private_info_2
public_info_2
Is it possible to create an FTP user (I'm using cPanel) that could access ...
2
votes
1answer
399 views
Should I use suPHP or DSO (mod_PHP) when php scripts need to manipulate files?
I recently asked a question on StackOverflow and I'm going to re-ask it here as a different question and with some changes and additional information.
I have a bunch of php scripts that need the ...
4
votes
5answers
408 views
NTFS: Deny all permissions for all files, except where explicitly added
I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
0
votes
2answers
140 views
Can Solaris RBAC roles be ported to Linux using SElinux only?
We are migrating an application from Solaris to Linux and the main user is allowed, through the use of RBAC roles, to run a few system commands like svccfg/svcadm (chkconfig on redhat).
Is it ...
0
votes
1answer
116 views
Should the webserver user have write permission on the uploads/ directory?
I always gave to the webserver user full permissions on these dirs:
cache/
logs/
web/uploads/
But now I am wondering if the uploads part is 0K. I was thinking that maybe it would be better if I use ...
-3
votes
1answer
98 views
Protecting a chmodded 0777 cache directory?
A website I'm developing requires several directories to have their permissions set to 0777. The directories are used as cache directories for HTML and PHP files generated by the website.
The ...
4
votes
3answers
757 views
How do I configure active directory when Sql Server 2012 is using a Virtual Account?
I'm getting the following event log entry from Sql Server 2012:
SQL Server Scheduled Job 'Replication agents checkup' - Status: Failed - Invoked on: 2012-08-04 10:00:00 - Message: The job failed. ...
1
vote
0answers
180 views
How to set linux permissions to allow Apache to have access to a file [closed]
Linux noobie here, I'm still figuring things out as I move along.
At my school we have a shared server environment where every student gets an account.
But we have very limited permissions.
I have a ...
0
votes
1answer
207 views
SQL Server NETWORK SERVICE account permissions
My SQL Server Windows service is set to use the NETWORK SERVICE account.
The server is installed to C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL.
However looking at the ...
1
vote
1answer
472 views
How should I structure my users/groups/permissions for a web server?
How should I setup permissions in the most secure way on my dedicated server which I'm running FTP + Nginx on? I want FTP to be able to read/write files and I want Nginx to be able to read/write the ...
0
votes
1answer
74 views
Making directories visible only by owners
I am in the process of creating a secured shared hosting and, between the hosting features, I want to give SSH access.
I've already chrooted the users via SSH, FTP and PHP (using PHP-FPM), and would ...
10
votes
5answers
1k views
Why is /dev/urandom only readable by root since Ubuntu 12.04 and how can I “fix” it?
I used to work with Ubuntu 10.04 templates on a lot of servers.
Since changing to 12.04 I have problems that I've now isolated.
The /dev/urandom device is only accessible to root.
This caused SSL ...
5
votes
5answers
499 views
Prevent linux from being replaced [closed]
This is somewhat related to physical security breach.
Consider a Linux server with all firewall and other security stuffs running in it. However, if someone gets physical access to the server, he ...
0
votes
0answers
370 views
What permissions are required to copy folders with security attached on a NAS
What permissions does a user require to copy folders and the folders permissions from one mapped drive to another using explorer?
Our office has a large NAS with a number of shares. These shares are ...
3
votes
2answers
195 views
Preventing users from deleting SQL data
We just purchased a program that requires the users to have an account in the MS SQL server, with read/write access to the program's database.
My concern is that since these users will now have write ...
1
vote
1answer
549 views
Set Default User / Group (Sticky Bit) in Ubuntu
To enforce the following permissions on files in /var/www, can I use the commands chmod u+s and chmod g+s?
Permissions:
chown -R root:web /var/www
chmod -R g+rw /var/www
0
votes
1answer
158 views
Minimum access required for Visual Studio 2010 on SharePoint
Hi we are trying to set up a SharePoint development environment for multiple developers on Windows 2008 server, we do not want to give the developers admin rights to the servers.
Does anyone know ...
3
votes
1answer
3k views
Windows 2008 R2 NTFS file permissions not working as intended
We just got our first Windows Server 2008 R2 server in. It's going to be a file server. However, I am running into a weird issue with it that seems to be a result of UAC.
When I try to share a ...
0
votes
3answers
77 views
Restricting access to a video file on the network
I have an MP4 file on our Windows 2008R2 fileserver that I want people to be able to view, but not to create copies of. Is there a security permission configuration that would allow this?
0
votes
1answer
651 views
How to make sure www directory is secure?
I managed to order a new VPS account from linode
I have installed Ubuntu 10.04 LTS with 'LAMP Stack' StackScript.
I notice the website directory is located in /srv/www/ and I thought this is quite ...
-3
votes
2answers
128 views
How do you prevent any and all access to a user's home folder by anyone other than the user in Windows XP?
We've tried editing permissions from an administrator account, but even users with all categories filed under "Deny" were able to edit their own security permissions. How do you fix this/Is there a ...
2
votes
1answer
131 views
who should own the web root of my server?
I read a book about security in web servers and I found this:
If your web server has the ability to write to the files in your
WordPress directories, then the automatic upgrade functionality ...
0
votes
1answer
78 views
Windows Copy and permissions
I have copied a which has Everyone permission. The duplicated file doesn't have these permissions other than the default permission. I'd like to know more about how Windows Copy defines the ACLs. It ...
27
votes
2answers
11k views
What are the best linux permissions to use for my website?
This is a Canonical Question about File Permissions on a Linux web server.
I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/.
...
1
vote
0answers
389 views
Nginx, uWSGI, Python, users, groups and permissions. Questions about security
Ok, yesterday I finally get nginx and uWSGI servers running on my PC.
Nginx and uWSGI configuration files, new users, groups and their privileges, and chrootdir for SSH I configured
based on knowledge ...
-2
votes
1answer
454 views
How to create dummy user?
I want to create user with least privileges. Without home, without rights, without shell. How to do that?
When I call useradd it creates user with home
0
votes
1answer
51 views
Directory directive for directory outside doc root - best practice
I have a virtual host which has access to a directory outside of its document root. In the config for this host I specify the directory directive to allow access to this directory.
<Directory ...
0
votes
3answers
761 views
How to give user root access without giving him root password
The scenario is this:
I have a development machine I want (need) to have root access to
Our admin setups the machines using his own credentials for the root user. The explanation being that if ...
0
votes
1answer
66 views
Secure Access to NFS Share?
Is it safe to use an NFS share as the root of a web directory on another server? Under this config, multiple users would place their files on the NFS (not the web server).
How would you go about ...
3
votes
1answer
662 views
Jail User to /var/www/username Directory via SSH
I have multiple folders in /var/www for different websites -- Apache uses name-based Virtual Hosts (Ubuntu Server). Suppose I want to allow someone to access their /var/www/user directory, but not cd ...
2
votes
2answers
766 views
creating security groups from scratch - best practices
I need to create security groups in AD. I can identify the groups that I need, let's say they are: Management,Finance,Sales & Engineering.
And I can identify the resources that each group requires ...
1
vote
1answer
882 views
How to edit /etc/sudoers to allow a user to run specific shell scripts?
I have a few scripts in a directory which I need www-data to run (from PHP) with root permissions. It seems like
CMND_ALIAS= /path/to/script, /bin/sh
www-data ALL=(ALL) NOPASSWD: CMND_ALIAS
gives ...
2
votes
2answers
381 views
What's the logic of default permissions of /etc/ssh/ssh_known_hosts?
By default, Debian and Ubuntu (at least) set /etc/ssh/ssh_known_hosts without read permission for others. What's the logic behind that? I can't think of any security risks with o+r, and, on the other ...
3
votes
2answers
340 views
Permission audit on Windows file system
We're connecting a SharePoint 2010 to our file system so it can crawl and index the files on our network. However, the files have incorrect permissions in many cases and so we need to perform a ...
1
vote
3answers
3k views
Correctly setting up apache2 permissions in /var/www/example.com
I'd like to know what is a correct way to set up permissions for directory /var/www/example.com and all the files in it. The entire server will be used to set up my sites only so I'm not sure if it is ...
0
votes
4answers
235 views
Webserver and PHP File Security
I'm trying to figure the right security settings for the files on my shared webserver and I have a few basic questions that I've not figured out by looking around.
How do I stop people reading my PHP ...
1
vote
1answer
518 views
Minimum SQL login permissions for an AD domain group
I've created a web application that uses a SQL Server 2008 R2 database in the background. Application uses integrated security SSPI connection to database so users need granted access to database ...
