The tag has no wiki summary.

learn more… | top users | synonyms (1)

0
votes
1answer
92 views

Is it possible to create an FTP user that can only access certain directories?

Suppose I have the following directories inside my www folder: private_info_1 public_info_1 private_info_2 public_info_2 Is it possible to create an FTP user (I'm using cPanel) that could access ...
0
votes
2answers
350 views

I have two domains on my Linux Server. How to do Cross domain uploading?

I have two domains DomainA.com , DomainB.com on my Linux Server , each with separate space. I am using PHP and MySQL for both my websites. I have a page on DomainA.com from where users upload files. ...
3
votes
2answers
505 views

setting up rhel 5.x RPM build server for mortal users

My task is to setup a RHEL 5.x build host, that can build RPMs for mortal users. On RHEL 6.x with rpm version 4.8, I have in /usr/lib/macros: # Path to top of build area. %_topdir ...
0
votes
1answer
828 views

Apache virtual host configured with a sym-link to a folder in my user directory fails with 403 Forbidden

I'm sure someone has asked/answered this before but my search hasn't helped me much so... I have Eclipse IDE installed on my Linux box (LM13) with the 'workspace' folder located @ ...
1
vote
1answer
2k views

shell /bin/false allowing SFTP access [Ubuntu 12.04]

I have a Linux installation (Ubuntu 12.04), managed not only by me. I had restricted SSH access to a user using /usr/sbin/usermod -s /bin/false my_user This didn't allow neither SFTP access nor ...
2
votes
2answers
2k views

How to Lock Down an Active Directory Remote Desktop User

Please advise me on how I can ensure that remote desktop users cannot install software onto the Active Directory Server they are logging into remotely. Some Background: I have a client whose Server ...
2
votes
1answer
163 views

SSH jumpbox with group Authorisation

I'm trying to setup a SSH Jumpbox. Users logged on the Jumpbox needs to be able to authorize to another SSH servers depending on their group. (UserA is on group Project1, UserB is on group Project2, ...
1
vote
1answer
178 views

Data loss through permissions change?

I seem to have deleted some files on my media drive, simply by changing the permissions. The Story I have many operating systems installed on my computer, and constantly switch between them. I ...
2
votes
4answers
12k views

Key-Based SSH Permission denied (publickey) Ubuntu 12-04

I have configured sshd to accept key-based ssh logins with LogLevel on DEBUG, and uploaded my public key to ~/.ssh.authorized_keys, where permissions are set as: 700 ~/.ssh 600 ~/.ssh/authorized_keys ...
0
votes
2answers
223 views

Linux user cannot read or edit outside their home directory

I was wondering how to setup user accounts on linux where the user cannot read or edit outside their home directory. Thanks, Ben
1
vote
1answer
166 views

Create Windows user with LocalService permissions

Is it possible to create a user account in Windows 7 that has the same permissions as LocalService? I need this for debugging purposes: I am debugging windows services by running my service as ...
2
votes
1answer
2k views

How do you specify a User or Group for Client Remote Desktop Access?

Existing User in our domain can use RDC to take control over a Windows 7 workstation. When I create a user in Active Directory, an add them to Remote Desktop User, they cannot use RDC : The ...
2
votes
1answer
167 views

Running a batch script as network services on windows

On linux I know you can run files under different users pretty easily but on Windows how do you do it? Do I have to log in under that user? Can I run it with the schedule system? I need to be able to ...
2
votes
2answers
415 views

“your users are out of order, click re-order to fix” - what exactly does this mean and why does it effect a programs ability to load?

"your users are out of order, click re-order to fix" - what exactly does this mean and why does it effect a programs ability to load? OS: Windows 7 64 bit ultimate edition What does it mean when ...
-3
votes
1answer
487 views

Dropbox writes files owned by root on server [closed]

Basically, we have Dropbox running on a server to keep some files synced. It works nicely, except when Dropbox has to write the files itself. It keeps writing them as root, and my webserver cannot ...
2
votes
3answers
636 views

Give apache write access to DocumentRoot on dev server

I've got apache running on my mac workstation (OS X 10.7, with the pre-installed copy of apache), and our web applications require write access to certain sections of the filesystem to run (usually ...
1
vote
5answers
5k views

how to extract all permissions that a domain user have on the network

I would like to know all the permissions a windows domain user have in my network. Is there a way, with a script file or a tool, that can extract this kind of information by checking all the servers ...
3
votes
1answer
2k views

Limit which processes a user can restart with supervisor?

I have used supervisor to manage a Gunicorn process running a Django site, though this question could pertain to anything being managed by supervisor. Previously I was the only person managing and ...
0
votes
1answer
3k views

How to restrict user to a particular folder in CentOS 6?

I will need to create users so developers can log in and clone/pull/push changes/repositories from a github like platform. I've managed to add a user (using the root) to this CentOS machine; I now ...
2
votes
1answer
3k views

rm: cannot remove `/var/run/httpd/httpd.pid': Permission deniedLED]

I am unable to start the Apache server on linux I have tried : service httpd start and /etc/init.d/httpd start but both commands are showing :-- rm: cannot remove `/var/run/httpd/httpd.pid': ...
0
votes
1answer
241 views

FTP user without access to other folders

I'm a newbie with FTP/User permissions. I have a domain and a dedicated server. Lets say my domain is www.mysite.com All my files are inside httpd folder. I'd like to create a folder for a new user ...
0
votes
3answers
306 views

How do I allow users to have access to only a specific subset of folders on my Ubuntu server?

I need freelancers to be able to download and upload files to some of my websites on my Ubuntu server, but not all. How do I set it up so that each freelancer is a user who has access to only the ...
1
vote
1answer
2k views

domain user disabling screensaver

I have the following situation: Due to security reasons the screensaver is activated after 10 minutes, and immediately locks the screen. There are GPOs preventing the user from changing the ...
1
vote
1answer
64 views

Removing Apache per user directories

I am trying to access my localhost but I am getting a "Not Found" error. What I am trying to do is get to my Sites directory (/User/[username]/Sites). Right now I have the following commented: # ...
0
votes
1answer
129 views

Limit login on machines for users

Im wondering whats the best practice, we currently have a singel domain. And what we need is Guest accounts that should be able to logon course room and randndom work stations at time ( If they need ...
2
votes
1answer
3k views

User permissions added with set-acl do not get inherited to files and subfolders

I have written two PowerShell scripts. One asks the user for a foldername. It creates a folder with that name, gives the user full control, gives the administrators group full control and strips the ...
4
votes
3answers
7k views

How does mysql determine the hostname of its clients?

I'm trying to create a MySQL user which will only be allowed to connect to the MySQL database from a specific hostname. grant all on db_name.* to 'user_name'@'appserver-lan.mydomain.com' ...
0
votes
2answers
233 views

What permissions should I give these files? [closed]

I have some files that nobody needs read access to and apache needs read and write access to. Should I do chown nobody.apache file chmod 460 file or chown apache.nobody file chmod 640 file or ...
0
votes
1answer
51 views

Dovecot - different authentification mechanisms for different users

How can I make several groups of users and tune dovecot in a such way, that one group can use plain text auth (for example), second - APOP, third - MD5-CRYPT, etc? Thanks in advance.
0
votes
1answer
386 views

Adding existing user to existing group and providing permissions

can someone shed some light on this issue I've set up and installed vsftpd. Created a user ftp-user and created a home directory, so they can log in, and just have access to drop their files here. ...
0
votes
2answers
383 views

Most secure settings for user dedicated for SSH Tunnel

Due to security reasons, I have created a user on my remote VPS only to use it for SSH tunneling. My local PC goes in hands of many others which scares me because I need to leave that SSH session ...
2
votes
0answers
331 views

WebDAV user permissions on a per file basis

My team and I are building a webDAV server using Apache 2.2. We have run into an issue with user permissions. We have it currently set up so that user permissions work for folders on the server but ...
3
votes
2answers
6k views

Permissions for Scheduled Tasks on a Domain Controller

I'm trying to run a Scheduled Task on a 2008 R2 Domain Controller and all was well until I set it into the production environment. I'm running the task as a Domain User that's defined in the "Log on ...
1
vote
2answers
835 views

Lock down or limit user access on Windows Server 2000/2003?

I am looking for a way to severely restrict user account access on Windows servers. Is there a way to programmatically do this? I have found a few options like forcing a user to start in a program ...
1
vote
0answers
866 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
2
votes
1answer
1k views

How to export User Rights Assignments and import them on another machine

How would one export all of the user rights assignments from one Windows Server 2008 box and import them on another. Neither would be on a domain so this would just be local security policy.
2
votes
1answer
312 views

Limit user resources on dedicated server

Is there a WHM plugin mode or something like that which would limit the amount of resources a user on a dedicated server can use (CPU and RAM) or ideally something which gives certain users priority ...
2
votes
1answer
565 views

How is non admin domain user able to change Administrator for local computer?

On a Windows Server 2003 / XP LAN, non admin domain users are able to manage the users and groups of the local computer including changing the Administrator password and make themselves ...
0
votes
1answer
78 views

Prevent PHP from including files from other sites directories

Currently I am running nginx 1.0.11 and PHP-FPM. Each site has it's own user/group and has their home directory in /srv/www/.... I have the PHP-FPM pools set to run as the sites' user and group on ...
1
vote
1answer
788 views

Allow non-admins to install fonts on Windows 7 without GPO

Is there a way in Windows 7 to allow users without admin rights to install fonts on their machine? Our designers need to install new fonts regularly, but with no admin access, this means putting in ...
0
votes
1answer
370 views

How to give permission to an account to reboot server?

I use centOS 5.7 and I need an account I have on the server to be able to reboot the server. How do I do this? Should I maybe be worried about security issues with this? The reason I need it...I ...
1
vote
1answer
237 views

How to chown when a user name contains a dash?

A user and group contains a dash: abc-def. When I try to use chown I get an error: chown abc-def.abc-def * -R chown: invalid user: `abc-def.abc-def' the user is valid and it should work... how can ...
0
votes
1answer
101 views

Permissions of httpd apache2 and running certain php commands

I ran some recursive linux command that changed the permissions to all my website files.. all files are now like -rwxrwxrwx and all dictionaries are. drwxrwxrwx I don't know if that has anything to ...
3
votes
2answers
694 views

Setting up a limited user account on Windows Server

I'd like to create a user account on a Windows Server which can read whatever bits of C:\ it needs to be able to execute programs, but have no read access to D:\ except for D:\Special. It seems that ...
5
votes
2answers
4k views

Win2008: SC SDSET - how to grant a specific local user rights to stop and start a specific local service?

Where is a useful reference for the sdset command? I can read and read, and I have yet to find a straightforward list of steps to say: Service: App User: Joe Grant Joe start/stop/restart to App ...
0
votes
1answer
32 views

Service generated content interaction with PHP

I have a daemonized service that generates content at /usr/share/service/content I need this content to be accessible from PHP. The service runs under a user named _service which belongs to the same ...
2
votes
1answer
67 views

How can I have all my SFTP users created files be in a certain group?

The problem is, they're all creating files for the website and I always have to change the group to www-data so they have permission to it. I can run a cron job, but that seems like a ghetto fix. The ...
-4
votes
1answer
36 views

How can I know which are my rights [closed]

On a fedora server, I have access to the cli. On that server I have a webapp which generates some pdf files using a php library through some ajax request. The problem is that one of the apache ...
0
votes
1answer
305 views

Debian + Nginx + Unicorn Rails 3 project permissions

Is there a security risk in running a web server like Unicorn as root? The Nginx master process runs as root, the Nginx worker runs as the limited www-data user, but I can't set another user like ...
3
votes
2answers
5k views

Executing a command as a nologin user

I've recently set up my server so that my suPHP 'virtual' users can't be logged into by using this article My issue now is that before when I ran a rake command for my Ruby on Rails application ...