Tag Info

Hot answers tagged

5

UAC aims to improve the security of Microsoft Windows by limiting application software to standard user privileges. * That means, even though the user account is in the admin group, explorer.exe runs only with standard user privileges. And as a standard user, you are not allows to access those folders. But, when you try access those folders, Windows ...


5

Using a domain account requires administration and protection of the account and password. Using the builtin NetworkService or LocalService identities has lower administrative effort and does not require protection of the service account password. The builtin identities have predefined permissions for some objects on the system and may be shared by ...


4

The difference really boils down to how the service will interact with other machines over the network (using Microsoft networking protocols). The "Network Service" is, effectively, an unprivileged user that authenticates as the computer's domain account when accessing remote resources. Assuming that your domain account is just a member of the "Users" group ...


3

First of all make sure that the apache user has suitable (rx) access to the ~/backup directory from / down and rwx on the ~/backup directory. It is also likely that SELinux is playing it's part and denying httpd access to user home directories. Check the output of getsebool httpd_enable_homedirs httpd_enable_homedirs --> off If it is off as shown ...


3

They are two bugs opened recently related to this issue: #67244 Wrong owner:group for listening unix socket #67175 Change to the default listen.mode setting I personally experience the first one on FreeBSD with php version 5.4.30 For workaround I applied both parameters available to specify the owner of the socket like this: [default] listen = ...


2

"chown -R" will not change any file that already has the desired ownership. It will probably do the job more efficiently than writing a program that does it yourself. chown is written by some very good coders, who probably have taken into consideration a lot of edge cases that you may not have. However, the only way to know is via a benchmark. (I'd love ...


2

This is quite a broad question, and a bit depends on e.g. NFS versions. However: NFS allows you to specify a security mode on export. It also allows you to apply limits to which servers may mount your export. (Either limiting mounting at all, or enforcing read only/no root). This is nothing at all to do with permissions. If your security mode is 'sys' ...


2

The permissions are correct as you want all of the data files and other associated stuff to be owned by the postgres user. I think the issue here is that the postgres daemon is not running as the postgres user. Make sure that as root, you are running: sudo -u postgres pg_ctl -D /Library/PostgreSQL/9.3/data start Adjust the necessary paths for pg_ctl and ...


2

Just to solve this: As someone mentioned before, the problem was related to ipv6, to fix it simply add "ipv4" to the parameters to disable ipv6: # cat /etc/fstab curlftpfs#SERVER /mnt/ftp-backup fuse disable_eprt,noauto,nodev,noexec,ipv4 curlftpfs#SERVER /mnt/ftp-backup fuse.curlftpfs disable_eprt,noauto,nodev,noexec,ipv4


2

Your need is exactly opposite of this stackoverflow post. So in short, you can choose to: Set umask appropriately (presumably to 002, according to your post) before running git Add a git hook script to change file permission after cloning. The first choice is generally easier to do.


2

You don't have the group execute permission set on minecraft2 directory. Execute permission is required in order to be able to cd into directory. You can fix this by executing the following command: chmod g+x minecraft2


1

1) ssh users will be able to change/delete samba created files if the share is configured with the following options in smb.conf create mode = 0777 directory mode = 0777 2) assuming the guest account is "nobody", samba access may change/delete ssh users files if : samba share mount-point is configured to propagate the group nobody to files created ...


1

There is no equivalent because the Unix and NTFS permission models are not the same.


1

I would use something like Watcher, which utilizes Linux kernel inotify functionality. If you are familiar with incron, then you know what Watcher is, the difference is that Watcher is recursive, whereas incron can watch only a directory, not the sub-directories under it. So, instead of constantly crawling through the ever-growing /home, you can setup ...


1

The best thing to do here is not have everyone connect as root, it may be expedient but as you have discovered leads to all sorts of other issues. This is what I would pursue as the first option ( and even if it was turned down initially I would continue to pursue it long term). You may get some mileage out of the samba force user and force group directives ...


1

My suggestion is to create an environment where files are created with the right perms/owner/group in the first place. Then "chmod -R"/"chown -R" can be used to fix the situation where people messed up. "chmod ug+s" on a directory tells Linux that files created in that directory should not be created with the user's user/group but instead inherit the ...


1

This is because with UAC enabled by default you access the folders in a context that does not have admin rights, despite you being a member of the admin group. An alternative would be to run explorer as administrator. This is somewhat explained here: http://think-like-a-computer.com/2011/05/11/windows-access-denied-folder-administrator/ "When you log in as ...


1

I'm not sure why (perhaps a bug?), even though nopriv_user was set to apache, somehow vsftpd was thinking it set to ftp: # grep ^nopriv_user vsftpd.conf nopriv_user=apache # ... yet when I upload file it's like nopriv_user is set to ftp: # ls -ld test test/13924501638_26bbdf9023_o.jpg drwxrwxr-x. 2 apache ftp 41 Jun 17 13:01 test -rw-r--r--. 1 ftp ...



Only top voted, non community-wiki answers of a minimum length are eligible