Tag Info

Hot answers tagged

2

>_< I'm an idiot.... I never restarted the apache2 service after adding www-data to the user group. So the process to make this work was usermod -aG user-group www-data service apache2 restart Keep in mind I'm running this on Debian 8, but running the reloading as follows seems to work without having to restart Apache, and without terminating existing ...


2

If you look at the default permission for C:\inetpub\wwwroot: BUILTIN\IIS_IUSRS:(RX) BUILTIN\IIS_IUSRS:(OI)(CI)(IO)(GR,GE) NT SERVICE\TrustedInstaller:(I)(F) NT SERVICE\TrustedInstaller:(I)(OI)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(I)(F) NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F) BUILTIN\Administrators:(I)(F) BUILTIN\Administrators:(I)(OI)(CI)(IO)(F) ...


2

Did you try the "No access" role on "SUB-Folder"? That should override the permissions propagated from "Top-Folder" with, well, no access at all. edit: "Use the No Access role to mask specific areas of the hierarchy if you do not want for certain users or groups to have access. Best Practices for Roles and Permissions


2

Add default ACLs, like this: default:user::rwx default:group::rwx default:other::--- Default ACLs are applied on new files and directories under the affected directory. You can use the following command to accomplish this: setfacl -dm u::rwx,g::rwx,m::rwx,o::0 /home/myuser


1

Powershell could do this. get-exchangeadministrator | format-list


1

Because the IUSR account is put in the users group by virtue of the NT Authority\Authenticated Users group. Mostly these two exist for legacy reasons, but serve two distinct purposes. The IUSR account is used for anonymous authentication The IIS_IUSRS group is used to allow for security control for application pool users There are some write-ups on ...


1

you can use command option in authorized_keys(*) of destination user to restrict acces. e.g. keys looks like: command="/bin/ls -l /foo/bar.txt" ssh-rsa AAB.... command="/bin/df -Ph " ssh-rsa AAC.... this means each command is access via its own key, but all df can share the same key. (*) see man 5 authorized_keys


1

My suggestion for a workaround: Put the authorized_keys file somewhere outside of the user's home directory, using the AuthorizedKeysFile directive in sshd's config file. However, I'm a bit puzzled - the StrictModes directive should specifically do what you want. Does this not work as documented? StrictModes Specifies whether sshd should check ...


1

I solved this problem on a windows server 2012R2 machine by creating the following key in the registry HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Script Host\Settings And then granting full control permissions to the IIS Apppool\{AppPoolUser} user on the 'Windows Script Host' key.


1

If your data is correct, then there ist nothing wrong with squid. The url you posted is http:// ubuntuforums.org/ - see the space between http:// and ubuntufoums.org/


1

Please note the leading space in ' /data/ocdata'. Remove it and you will be ok.


1

How about using chmod g+ws /web/foo? This sets the setgid and write bits on the directory, which makes all created files' groups to be apache in that directory, and allows all apache group users to write to that directory and create further directories inside it. And another thing that you need to do is to update your umask so that group has write ...



Only top voted, non community-wiki answers of a minimum length are eligible