Questions tagged [permissions]
In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.
3,666
questions
0
votes
1
answer
512
views
Wordpress permissions issue - How to set ownership and permissions for WordPress files properly and securely?
I am facing some problems with setting up WordPress on my local server. After a successful connection to the local database, Wordpress dropped me Unable to write to the wp-config.php file.. I created ...
- 5
0
votes
0
answers
623
views
How can I get all folders associated with an Active Directory group using powershell or something similar?
At my job we have hundreds of AD groups that we add users to to give them access to folders. For each folder/group of folders we give access to there is supposed to be a read, write, and modify group. ...
- 13
0
votes
0
answers
43
views
Azure AKS Persistent Volume and Storage class permissions
I am looking for specific permissions that will allow read access to view the storage configurations and set up in Azure AKS.
There just doesn't seem to be anyway to provide limited read access to ...
- 170
0
votes
0
answers
116
views
No read/write access to files owned by root, when using sshfs as root
I am using sshfs. I log in as root: sshfs [email protected]:/ /mnt/remotes/domain.pl-root (using keys). The login process is successful. When I create any file anywhere in /mnt/remotes/domain-root/, its ...
- 103
0
votes
0
answers
140
views
Apache 2.4 ProxyPass to url results in errors 403 and 502 for Diaspora and Mastodon
I'm trying to run Diaspora and Mastodon on my server (crazy idea, right?) and Apache's ProxyPass won't work to localhost ports 3000 (Diaspora) and 4000 (Mastodon). I get a 403 for both https://...
- 1
0
votes
1
answer
35
views
Protecting the service of a specific application
We have a business requirement where we don't want even Admins to be able to stop a service of a specific application running on windows machines. Reason being the application plays an important role ...
0
votes
0
answers
559
views
SonarQube Installation Issue - “Fail to unzip plugin [python]”…”Operation not permitted”
I'm having an issue where SonarQube 10.1.0 Community seems to be having a difficult starting for the first time.
I've set it up using Kubernetes (K3s v1.27.1) and adapted the official SonarQube Helm ...
1
vote
0
answers
1k
views
What are the proper permissions and ownership (including wp-config.php and .htaccess) for Wordpress installations on a LEMP server
I am running an Ubuntu based Linux/Nginx/MariaDB/PHP (LEMP), server with my Wordpress installation in the root account at /var/www/example.com/. My Wordpress is running as the www-data user, and Nginx ...
- 93
0
votes
1
answer
137
views
NT Security Descriptor
In active directory an object have several permissions on many objects.
how to view permissions of particular object?
i am asking like for eg user Kavin have read permissions on some folder, full ...
0
votes
1
answer
516
views
Why don't I have permission to create this directory / file? Permissions on Debian 11 Linux
I thought I understood Linux permissions, but alas... why don't I have permissions here?
I'm part of the www-data group:
docker@docker01:/home/docker$ id
uid=1002(docker) gid=998(docker) groups=998(...
- 1,173
0
votes
0
answers
42
views
0x80004005 when performing administrative tasks
We have an AD network, and a group of users has higher privileges than the standard, configured via GPO in Computer Configuration > Policies > Windows Settings > Security Settings > ...
- 300
0
votes
0
answers
15
views
Specific olcAccess does not work for an OU in LDAP
On my OpenLDAP server, I would like the accounts in my "ou=partners" OU to have "read" permissions to all objects in "ou=abos". Here is the tree of my DIT :
[ditTree][1]
...
0
votes
1
answer
255
views
Cannot execute PHP binary as non-root user in Plesk server (Linux)
I am running Plesk 18.0.44 on my Debian 9.13 server. It has multiple subscriptions and hence different users for these vhosts. I was always able to run /opt/plesk/php/7.4/bin/php -v as a vhost user (...
- 101
0
votes
0
answers
64
views
Which service principal role will provide the minimum permissions necessary to automate installation of a website certificate?
I wish to grant a third-party application API access to my Azure tenant for purposes of installing a TLS certificate on a certain website ("App Service," in Azure terminology).
However, ...
- 765
0
votes
0
answers
429
views
Auth/permission issues with Dovecot/Postfix with virtual users and dovecot Passwd-file
I currently have Postfix/Dovecot email-server configured to run a local system account (Dovecot auth-system) and everything runs fine with a local user set up using /etc/passwd, /etc/shadow.
I would ...
- 1
0
votes
1
answer
679
views
How to migrate User Data to OneDrive without granting administrators permissions
Performing a migration of all users "personal" files to OneDrive and I'm quite new to this all.
My small organization is in the process of migrating to SharePoint and OneDrive, and our Users ...
- 13
0
votes
1
answer
2k
views
How to take ownership of all contents in CSC folder?
I have files that was saved as offline files from a Synology server to the CSC folder on my computer that I would like to delete. I cannot delete the files unless I individually take ownership of ...
0
votes
1
answer
581
views
Move docker compose wordpress with local volume to new host with correct permission
I'm struggling to migrate / move my Docker Compoe project with Wordpress and Mysql to a new host.
My docker-compoye.yaml is as follows:
version: '3.1'
services:
wordpress:
image: wordpress
...
- 101
0
votes
1
answer
547
views
OSError: [Errno 30] Read-only file system: <relative_path_to_file>
(On Ubuntu 22.04 LTS)
When trying to create or edit any file or directory on my hard drive I get a 'Read-only file system'-error (two days ago I could still do that):
$ whoami
mattia
$ mkdir example
...
- 1
3
votes
0
answers
423
views
Unable to su or ssh as anyone but root on CentOS 7
I seem to be unable to ssh or su as a local user on my CentOS 7 machine as of today.
$ adduser ndejay
$ passwd ndejay
Changing password for user ndejay.
New password:
Retype new password:
$ su ndejay
...
- 209
0
votes
2
answers
136
views
Best Path for nginx Files [closed]
I've always struggled with various paths for nginx files and where they should be positioned. As we know, we can change where we can park both the www directories for our web app, as well as the ...
- 125
1
vote
0
answers
583
views
How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?
Usually, in Linux-based systems I create new user without admin rights (sudo group).
I'm able to login as that user via SSH and then, when I need admin rights, I can just,
$ su root
...entering pwd...
...
0
votes
0
answers
262
views
How to enable sudo and disbale sudo su on ubuntu 20.04
We need to capture user commands, on logs now the user has Sudo access. we have planned to disable sudo and they need to use sudo before the command. How to enable sudo and disable sudo su on ubuntu ...
- 1
0
votes
1
answer
1k
views
stat Permission denied for user that belongs to the group
I installed nginx in a machine, and the site is not working because the user that nginx uses (www-data) doesn't have access to the folder with the site contents.
I decided to add the user www-data to ...
1
vote
0
answers
140
views
permission denied when writing to mounted directory exported by NFS server running on OpenBSD OS
I have a default installation of openbsd, with portmap, mountd, nfsd services started by via rcctl. I have following entry in /etc/exports
/nfs/testdir -alldirs -maproot=root -network=192.168.0 -mask=...
- 133
0
votes
0
answers
124
views
Auditing Domain Administrators - Best practice / Advice needed please
Please do advise if I am posting in the wrong place, I have not found this the easiest site to navigate (or maybe it is me...).
I have been tasked with auditing and fixing our privileged accounts ...
0
votes
1
answer
2k
views
Sudo privileges limited to a specific group of users
I'm configuring our new Ubuntu 22.04 VPS to host our react app and REST API.
I followed this tuto that seems relatively advanced and complete :
https://gofoss.net/server-hardening-advanced/
I'm ...
0
votes
0
answers
380
views
Why do all users still have full access in my samba server after i have set limited permissions?
I have a debian 11 server running samba and is hosting a share of a drive that's mounted in fstab. I have added "acl" to the fstab and installed acl in the samba config.
To be clear: my end ...
- 1
4
votes
1
answer
1k
views
How to make get_current_user() return the same user as $_SERVER['AUTH_USER']?
I have a PHP app that uses LDAP for logging in. The app is served on Windows Server with IIS.
In the past, I was using $_SERVER['AUTH_USER'] to get the remote Windows user that was using the app:
$...
- 239
1
vote
1
answer
702
views
Create shared folder as active directory would in powershell
With Active Directory I can manually create new users. Every time I do that, I use right click -> Copy on that user, then I modify some things like Name, Surname and SamAccountName. This process ...
- 11
0
votes
1
answer
5k
views
Limit AD user to only login to computer in a specific OU
We have an AD domain (still on-premise) that supports a library, among other things. This library has a number of public computers, and these public computers are in their own OU in Active Directory. ...
- 13k
0
votes
1
answer
123
views
Different behavior of SGID in *BSD and Linux
I came across an interesting thing: on BSD systems a new file will have group set to the group of the directory. On System V systems it will have the primary group of the user that created the file.
...
- 1
0
votes
2
answers
128
views
Are there any potential pitfalls to changing the permissions of config files under /etc to a non-root user?
There are various services which are being run on our machines, e.g. cassandra, datadog, etc.
Occasionally, we need to change the configuration, and we wish to automate the propagation of the config ...
0
votes
1
answer
64
views
I'm trying to provide limited access to certain functionality using links, bash scripts and SUID. SUID script does not run with root access
EDIT: this Sticky bit enabled Script can't write to a root file appears to be a similar problem
EDIT: How can I use SetUID on a shell script to run as a non-root user? is very similar as well.
I ...
- 9
-1
votes
1
answer
30
views
How to create a non-modifiable structure of shared folders on NTFS?
I am in the process of finding a suitable solution of the following.
I have a Windows Server 2013 share with a set of shared folders. This share has a central folder (say Shares) and a set of ...
- 1
0
votes
1
answer
722
views
How to set limited permissions using command line on windows?
user want to delete all permissions and keep only modify permission for everyone and full permission to system.
Like this.
But present with icacls command
icacls "%ProgramData%\myfolder\...
- 165
0
votes
1
answer
2k
views
Set folder permission by OU
I'm attempting to setup folder permissions on my DC to a shared desktop. I have an OU containing the users I want to allow to view this folder, and a GPO which handles the permissions linked to the OU....
- 15
0
votes
2
answers
39
views
Simple NTFS/permissions q
Say I would like to only allow domain admins write permissions to a folder, and disallow everyone else.
If I set write permissions for domain admins, but then read-only for 'authenticated users', ...
- 240
0
votes
0
answers
150
views
Adding a group to a folder structure "basing" on another existing group's rights
thanks for reading this wall of text anyways.
My scenario:
i have a mega-folder called Projects. Every subfolder is a different project. So, for example, i have Projects\N123456 - New Coca Cola.
Now, ...
0
votes
1
answer
231
views
Getting command not found using sudo, but not for running command as root without sudo
wierd issue where if you use sudo command for certain commands it is not found. But runnning it as root user WITHOUT sudo does work
root@ip-172-31-43-153:/home/ubuntu# sudo xfs_growfs -d /
sudo: ...
- 101
3
votes
2
answers
164
views
How to properly secure user's folders?
On a file server, a base folder contain user's folders:
This base folder is protected against user's actions (deletion, rename, dump of files, etc), users can only read and traverse it:
To ...
- 1,761
1
vote
1
answer
700
views
Rsync makes the destination folder unwritable before copying files to it (and then of course it fails with Permission Denied)
I want to use rsync to deploy a project from my dev machine (Windows 11, CygWin) to a remote server (Ubuntu) through SSH. I've made sure that my SSH user has full write access to the destination ...
- 133
1
vote
0
answers
1k
views
'user ... is not allowed to execute .... as root on ... ' - even with SUDO privileges but not sure why?
I am in the processing of installing singularity using the terminal on my Linux Mint computer (Ubuntu).
I have the following command:
sudo apt-get update
The computer then asks me to enter my ...
- 111
0
votes
0
answers
377
views
My samba share does not keep permissions when moving files onto it. What am I missing?
I have a samba server running on a debian host so I can share an specific directory with an ubuntu client machine.
This directory on host has no files on it.
Samba config on host is as follows:
sudo ...
- 1
1
vote
0
answers
2k
views
Mounting a Linux NFS share with the Windows 10 client seems to ignore groups (despite --manage-gids)
I have an NFS share exported from a Centos 7.9 VM and mounted on a Windows 10 PC. The share is accessible from Windows, but directories who's permissions are set not readable by the user but readable ...
- 111
1
vote
0
answers
608
views
Need help regarding NFS shares permissions
I recently switched to using Proxmox as my OS of choice from OMV as the main OS and running a bunch of docker containers on the same host. I installed OMV (OpenMediaVault) inside a VM. I passed ...
- 11
0
votes
1
answer
308
views
What if I don't declare a reused volume in the top level `volumes` key of a compose file
The compose specification says:
To reuse a volume across multiple services, a named volume MUST be declared in the top-level volumes key.
I am currently trying to debug an application with a docker ...
1
vote
1
answer
529
views
executing a command without password prompt or root
For the sake of writing a script, I'd like my minikube-role-user to execute the command minikube tunnel without a password prompt, without switching user to root, be it by su or temporarily by sudo, ...
- 13
0
votes
0
answers
2k
views
how to hide Active Directory objects for all domain users
All users in the OU "Society\Members" and "Society\Members_ENG" are members of the bullitin group "Domain Users".
How can I set in the Domain Controller's Active ...
- 11
2
votes
1
answer
507
views
Temporary / Intermittent "Access Denied" error on IISReset
I have a system on which I intermittently use iisreset.
Mostly it JustWorks. But occasionally, it'll error reporting "AccessDenied" and leave the website somewhat broken. Immediately re-...
- 170