Questions tagged [permissions]
In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.
3,660
questions
0
votes
0
answers
7
views
Can Google Cloud Platform administration be separated from Google Workspace?
Is it possible to separate GCP Administration from Google Workspace Administration? Or by being super admin of an Organization in Workspace you inherit super admin permissions in the organization for ...
1
vote
0
answers
91
views
'Permission denied' executing 'ls -l' against cifs share on Fedora 39
Setup:
Windows Server 2016, workgroup mode, a shared folder 'SHARE' with username/password security, owned by BUILTIN\Everyone.
Fedora 39, everything updated to the latest versions.
etc/fstab:
//...
0
votes
1
answer
45
views
Allow user to pull in `www-data` owned folder
I have a github workflow, that runs whenever a branch is merged to main:
jobs:
deploy:
name: Deploy to Production
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: ...
2
votes
2
answers
222
views
How can one copy an S3 bucket as faithfully as possible (e.g., copying all permission settings)?
I want to copy an S3 bucket as faithfully as possible (e.g., copying all permission settings).
The standard:
aws s3 sync s3://old-bucket s3://new-bucket --source-region us-west-1 --region us-west-2
...
0
votes
0
answers
82
views
Got read permissions but not write permissions in aws SFTP in EC2
I'm a bit new to aws and especially SFTP but I'm trying to set up an EC2 instance with SFTP so I can access it with FileZilla and I've set it up and can copy files from it into my own directories but ...
0
votes
1
answer
60
views
.NET application cannot connect to ServiceController when executed through PsExec
I am trying to automate an installation of an application with Packer and Ansible.
At some point the installer of the software, which we have automated using Selenium, checks whether certain Windows ...
0
votes
0
answers
107
views
Remove bash permissions for a user
I have to create a user that uses /bin/sh as initial shell. This is something I have already done but, I need that this user cannot access bash under any circumstance.
After searching on the internet ...
0
votes
1
answer
151
views
Properly mounting a Samba share in Ubuntu/Linux
I am working in a company that uses a Windows AD.
We have a TrueNAS setup with some SMB shares that work well under Windows, but I don't really understand how to properly set them up under Ubuntu.
So ...
0
votes
1
answer
32
views
Permission error when setting global-acls in dovecot
Dovecot's ACL plugin instructions indicate that for global acl's, we're supposed to create an acl file in /etc/dovecot/. and to include the access control list items in it. So I've created /etc/...
0
votes
1
answer
178
views
Is it the OS or Samba that is restricting access to systemd on a shared folder?
I have two Rocky Linux 9 servers that we can call svr1 and svr2.
svr1 has Samba service installed and share the folder /home/rocky/shared_folder with this configuration:
[global]
# workgroup = ...
3
votes
4
answers
974
views
Openssh - Allow root to access both sftp and ssh
I want to configure sftp on my server to be accessed by root user.
I changed my configuration of /etc/ssh/sshd_config to:
PermitRootLogin yes
AuthorizedKeysFile .ssh/authorized_keys
...
0
votes
1
answer
54
views
Windows filesystem access permissions: how to grant permission to AD users in local Windows groups
Need help granting permissions to a local Windows group for a folder on an NTFS drive on a Windows Server 2019 server joined to an AD domain.
I have successfully configured that for a domain group, ...
0
votes
1
answer
149
views
Why would IT lock down SeIncreaseWorkingSetPrivilege?
Question:
Why would anyone lock down the SeIncreaseWorkingSetPrivilege == Increase a process working set == https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-...
0
votes
1
answer
113
views
Need to allow only specific file extensions via Apache config
I'm struggling with allowing only specific file extensions via Apache (2.4.58).
I'm doing this in httpd.conf.
The problem is if I deny all files at first either like that:
<Files *>
Require ...
0
votes
1
answer
229
views
OpenResty permission denied even though user has access when testing with sudo
I have a weird issue I can't seem to figure out.
I am using OpenResty. The way it should work on that particular server is that the whole configuration and Lua scripts and everything comes from a Git ...
0
votes
0
answers
33
views
IAM Roles AnyWhere
I've been using the IAM roles anywhere.
To Authenticate from your environment Your non AWS workloads authenticate via a certificate trusted by your trust anchor and obtain temporary credentials from a ...
0
votes
0
answers
111
views
IIS 10 - prevent USERS to access directory but allow IIS_IUSRS
I'm running IIS 10 on Windows Server 2019.
I want to share a directory only to certain network users, so they should be able to read/write content, while other users should be blocket.
On the other ...
0
votes
0
answers
46
views
MySQL Database refusing connection to user with USAGE privileges
I have a user 'salesman'@'%' trying to connect to my database with USAGE privileges on *.*, and SELECT privileges on one view within the database.
Whenever I try to connect to the database whether via ...
0
votes
1
answer
38
views
Access Forbidden 403 no search permission for the directory
I installed the Apache server on Manjaro (no tag for it, Arch is the closest). It works well. I added a virtualhost and tried to set directory permissions with chmod, but no luck. I got 403 error when ...
0
votes
0
answers
57
views
Permission problems with uWSGI and Modoboa
I have run a manual installation of Modoboa (https://modoboa.readthedocs.io/en/latest/installation.html#manual-installation), which runs a webapp in uWSGI. I moved the static content to /var/www/html ...
0
votes
0
answers
22
views
Permissions for block devices in FreeBSD
If I look at the permissions of the block devices on a freeBSD box I see the following.
crw-r----- 1 root operator 0x9a Oct 29 17:39 ada0
crw-r----- 1 root operator 0x9c Oct 29 17:39 ...
-1
votes
1
answer
108
views
open() "/var/lib/nginx/cache/fastcgi/3/d0/bce7bdb8e2c388c7675c97c7324efd03" failed (13: Permission denied)
I am trying to add Caching for Proxy & FastCGI but once i try to view any page on the site it fails with 500 Internal Server Error and when i tried searching my logs for any errors i found that ...
1
vote
0
answers
88
views
Debian NFS client-side permissions issue
I have the following environment:
host1:
Debian 12 with zfs 2.1.11 : open ldap server with default packages, nfs-utils 2.6
host2:
Debian 12: open ldap client with default packages, nfs-utils 2.6
On ...
0
votes
1
answer
141
views
New Added Local Administrator cannot access drive and not able to access drive
I've only been with this company for a month as system administrator, the servers was not install by me, a file server - member of a domain
I found some curious setting and errors need to help !!!
The ...
0
votes
0
answers
318
views
How to fix NetworkManager-dispatcher script permission denied error?
I've got a fully updated RockyLinux 9.2 server, where I have a couple of network services running via Systemd.
Following the instructions such as from here and here, I created a shell script that's ...
-2
votes
1
answer
301
views
Unable to move uploaded files with php (Apache 2.4) - Permission denied
In my project I can't use move_uploaded_file PHP function because of:
Notice: PHP Request Startup: file created in the system's temporary directory in Unknown on line 0
Warning: move_uploaded_file(.....
1
vote
1
answer
81
views
Why does `getfacl` output for basic permissions differ from `ls -al`?
I have a directory that shows r-x group permissions in ls -al output:
mburr@burrvm-mint20:~$ ls -ald /media/mburr
drwxr-x---+ 2 root root 4.0K Oct 6 17:11 /media/mburr
The ls -al output also shows ...
0
votes
1
answer
474
views
Group Policy Management Access Denied on Delegation Tab
I'm running a Windows Active Directory Domain using two 2016 DCs. Everything about the domain and my GPO policies are functioning correctly. However, when I open up Group Policy Management and then ...
0
votes
1
answer
47
views
NetBSD 9.3 - NFS Permissions
I have installed NFS on a server in my lab, the server exports two disks, /disk1 and /disk2, i can successfully see the exported drives using:
showmount -e 192.168.1.245
I can also mount the drives:
...
0
votes
0
answers
63
views
Access is denied, with Gstreamer audio capture on Windows Server 2022
Note: I'm posting to ServerFault with this as I believe there's some sort of permissions or isolation or perhaps missing system component needed specifically for Windows Server. This is not a general ...
10
votes
4
answers
4k
views
How do I prevent users from messing with their own .ssh folder?
I'm administrating a RedHat server where users log in through SSH with private/pub key based authentication.
I'd like to prevent them from accidentally changing / deleting /chmoding the content of ...
0
votes
0
answers
152
views
Zabbix Permission denied for read log from item of teample
Error:
Value of type "string" is not suitable for value type "Numeric (float)". Value "tail: cannot open '/home/user/mc/plugins/Skript/logs/tps.log' for reading: Permission ...
0
votes
2
answers
336
views
Linux user can't access mergerfs directory that he already has permissions
I use proxmox on top of Debian 12 (bookworm).
As root user I set the owner for the directory '/data' to berdux:berdux and even set permissions to 777.
Then I mount 4 disks to this folder with mergerfs ...
0
votes
2
answers
216
views
wordpress directory file ownership changes everytime after uploading files/plugins
on centos 7, i have created wordpress website with root directory ownership websitename:websitegroup and directory permissions 755, file permissions 644 set by default
when the developer, login to ...
0
votes
1
answer
101
views
Windows shared folder accessible only by Administrators
Windows Server 2012 R2.
A shared folder was created and the permissions set to full control.
The share is only accessible by Administrators.
Why?
0
votes
0
answers
285
views
"/etc/nginx/nginx.conf is meant to be read-only" when editing with nano after upgrading Ubuntu 20.04 to Ubuntu 22.04
I am recently upgraded Ubuntu Server 20.04 to Ubuntu Server 22.04. It is a LEMP server running the latest Mainline version of Nginx. After the upgrade, when I try modifying the /etc/nginx/nginx.conf ...
0
votes
0
answers
692
views
pg_ctl start on Windows gives error: could not open file "global/pg_control": Permission denied
On Windows Server 2022, I am logged in as Administrator and trying to do a pg_ctl start on a Postgresql database that was initially created by user SYSTEM, but get the following error in the cmd ...
0
votes
0
answers
357
views
Portainer can't access docker socket without chmod 666 workaround
Environment: Alpine Linux (3.18)
I've got a portainer docker container that can't access the docker socket. I've added my user to the docker group. I make the container with the following command:
...
1
vote
0
answers
17
views
permissions and rights on a shared drive
I don't understand exactly how things work and how to solve the following correctly.
I have a mounted HD to my server, to this I upload and download photos from domain X. This works perfectly. Domain ...
1
vote
1
answer
408
views
macOS: Open GUI application over SSH not possible
I'm working on automating the installation of a macOS application using Ansible. I am installing the application by copying its .app folder from a .dmg image to the /Applications/ directory.
After ...
0
votes
0
answers
38
views
Deny deletion of file but then programs cant save new files. (With a twist)
This has been covered a million times, but after trying every suggestion on here, I am still stuck.
I have a Windows 10 system. We need to lock down a folder to allow files to be created (both ...
0
votes
0
answers
43
views
Why am I not able to revoke GraphAPI Permissions in Graph Explorer Sandbox?
When I go to https://developer.microsoft.com/en-us/graph/graph-explorer and log in with my Azure account, I cannot revoke access to mail.send:
And am presented with this message:
"You require ...
0
votes
2
answers
419
views
Incorrect Permissions and Ownership in /etc/nginx/sites-available Folder for Containers
I seem to have encountered an issue with the default permissions and ownership of the containers within my /etc/nginx/sites-available directory. The current permissions and ownership structure appears ...
0
votes
1
answer
464
views
Wordpress permissions issue - How to set ownership and permissions for WordPress files properly and securely?
I am facing some problems with setting up WordPress on my local server. After a successful connection to the local database, Wordpress dropped me Unable to write to the wp-config.php file.. I created ...
0
votes
0
answers
560
views
How can I get all folders associated with an Active Directory group using powershell or something similar?
At my job we have hundreds of AD groups that we add users to to give them access to folders. For each folder/group of folders we give access to there is supposed to be a read, write, and modify group. ...
0
votes
0
answers
37
views
Azure AKS Persistent Volume and Storage class permissions
I am looking for specific permissions that will allow read access to view the storage configurations and set up in Azure AKS.
There just doesn't seem to be anyway to provide limited read access to ...
0
votes
0
answers
104
views
No read/write access to files owned by root, when using sshfs as root
I am using sshfs. I log in as root: sshfs [email protected]:/ /mnt/remotes/domain.pl-root (using keys). The login process is successful. When I create any file anywhere in /mnt/remotes/domain-root/, its ...
0
votes
0
answers
132
views
Apache 2.4 ProxyPass to url results in errors 403 and 502 for Diaspora and Mastodon
I'm trying to run Diaspora and Mastodon on my server (crazy idea, right?) and Apache's ProxyPass won't work to localhost ports 3000 (Diaspora) and 4000 (Mastodon). I get a 403 for both https://...
0
votes
1
answer
32
views
Protecting the service of a specific application
We have a business requirement where we don't want even Admins to be able to stop a service of a specific application running on windows machines. Reason being the application plays an important role ...
0
votes
0
answers
530
views
SonarQube Installation Issue - “Fail to unzip plugin [python]”…”Operation not permitted”
I'm having an issue where SonarQube 10.1.0 Community seems to be having a difficult starting for the first time.
I've set it up using Kubernetes (K3s v1.27.1) and adapted the official SonarQube Helm ...