0
votes
1answer
40 views

Mount a Symlink Directory to Document Root for Deployment

Trying to establish a secure multiuser environment with limited user permissions and automated deployment. The example has been made simple to express the idea. Docroot: ...
-3
votes
2answers
86 views

Permissions and access security for a shared folder on a server

I need to set permissions to a folder for two people. I am not an administrator on the server but I have access to grant and remove permissions to folders. Not even the Server Admin should have ...
1
vote
3answers
194 views

Running programs with 'pre-allowed' admin rights Windows [closed]

I'm working in a high security corporate environment on a Windows 8 machine. I don't have administrator privileges, but am a developer. I won't go into the absurdity of this. The short is; there are ...
-1
votes
1answer
62 views

I'm able to login via “psql” as “posgres” with any linux user - is this a security issue?

I used sudo su postgres and set up my database while logged in as the linux user postgres. After exiting to my normal shell, logged in as my non-root user, I can simply use psql -U postgres and then ...
-2
votes
1answer
166 views

Is running Supervisor as root a bad idea for security reasons? [closed]

I want to have a flexible setup (will need to run Redis, Celery, and uWSGI), but I'm wondering whether or not it's a bad idea to run Supervisor as root (the default), and if so, why it is bad.
4
votes
1answer
1k views

Granting service control manager access permission to user outside of administrator group

I have a user outside of administrator group. How can I grant service control manager access permission for that (specific) user? It's like SC_MANAGER_ALL_ACCESS from the following link: ...
1
vote
2answers
117 views

prevent files modification from users: is this method safe?

I was wondering today if there was a way to enforce a non root user to have a specific authorized_keys file (among other sensible files). I came up with this solution. Disable StrictModes in ...
0
votes
1answer
60 views

Is it possible to create an FTP user that can only access certain directories?

Suppose I have the following directories inside my www folder: private_info_1 public_info_1 private_info_2 public_info_2 Is it possible to create an FTP user (I'm using cPanel) that could access ...
0
votes
2answers
314 views

Most secure settings for user dedicated for SSH Tunnel

Due to security reasons, I have created a user on my remote VPS only to use it for SSH tunneling. My local PC goes in hands of many others which scares me because I need to leave that SSH session ...
1
vote
0answers
461 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
2
votes
2answers
1k views

creating security groups from scratch - best practices

I need to create security groups in AD. I can identify the groups that I need, let's say they are: Management,Finance,Sales & Engineering. And I can identify the resources that each group requires ...
0
votes
4answers
243 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...