Questions tagged [user-permissions]
The user-permissions tag has no usage guidance.
417
questions
1
vote
1
answer
3k
views
How to create a very limited linux user
I need a user in my linux machine to execute some commands in .bash_profile. But I don't want this user can have access to sftp, ftp and any other protocols. Also any commands can't be executed except ...
1
vote
1
answer
89
views
kernel tunables for non privileged user
How can i permit non privileged user to set kernel tunables within specific limit. For instance to let user set hugepages up to 40
sysctl -w vm.nr_hugepages=40
0
votes
1
answer
2k
views
How to fix permissions on a linux webserver
Short version : i can't upload images using php and i have no idea how to fix the permissions issue
Details :
I've been using a vps for around three years now
I set it up to run Sendy (a little ...
1
vote
2
answers
207
views
GCP AppEngine Permissions
I need to grant a GCP project user permissions so he is able to run cron tasks from the app engine console. I've been looking around and could not find suitable permissions for that.
Any tip??
3
votes
2
answers
13k
views
Difference between PGID/PUID and GID/UID when setting up docker containers
I'm new to Docker and I've seen that some scrips for running containerized software require to specify either of those to match certain user and group. So I was wondering what is the difference ...
3
votes
1
answer
4k
views
Best practices for docker users on a shared machine
We would like to use docker on the servers of our university. From reading
https://docs.docker.com/install/linux/linux-postinstall/#manage-docker-as-a-non-root-user
I understand that it is ...
0
votes
1
answer
398
views
SeBackupPrivilege, but cannot read all files
I am trying to read full directories independent of the current file-permissions. But even though I do have "SeBackupPrivilege", the following code leads to an "UnauthorizedAccessException". How can ...
0
votes
1
answer
539
views
Is it possible to disable new bluetooth connections for non-admin accounts(Windows 10)?
I can disable bluetooth entirely, but I want the previously attached bluetooth keyboard & mouse to continue working, but the guest/non-admin users unable to pair new devices. I looked at stopping ...
-1
votes
1
answer
2k
views
List of active users and their access rights to O.S. in Windows Server 2003 [closed]
How I can get a list of active users and their profiles (access rights) to O.S. in Windows Server 2003 ?
0
votes
1
answer
918
views
Which user permissions are needed for accessing (read) operational attributes in openldap
I'm configuring at the moment a openldap server. For defining user permissions I use a ldif file. For checking the permissions and to see if all works like expected I use the Apache Directory Studio.
...
0
votes
1
answer
707
views
Folder shared with Full Control, yet is Read-only for client
Server is Win 2008r2, non-domain.
Client is Windows 7.
User XYZ on client has matching account on server in group Users.
Credentials for server account for XYZ are stored in credential manager on ...
0
votes
1
answer
396
views
How to manage custom application specific permissions in AD?
We are planning to let our customers of our software configure users and their permissions entirely in Active Directory.
Once a AD-user is member of the AD-group "SoftwareXyz" he can log in and use ...
-1
votes
1
answer
776
views
Debian 9 give User permission for all folders
How can I give a user permissions for all folders? So /home, /var etc.
1
vote
0
answers
345
views
Glusterfs support for user namespaces
I have a gluster volume mounted on a host machine and tried to run a namespaced docker container with a bind mount from the gluster mount on the host.
It seems that the user namespacing is not ...
3
votes
1
answer
11k
views
How to troubleshoot 'permission denied' errors while accessing files in linux?
My question is concerning generic troubleshooting when getting 'permission denied' errors while accessing files as certain user and here is a specific example where I could use some extra help:
As a ...
1
vote
2
answers
4k
views
Modify new user home directory permissions with powershell
I am needing assistance with a script. What I am trying to accomplish is when new users are created in ADUC and their profile path(home folder) is created, it gives the users "Full Control". I am ...
1
vote
0
answers
1k
views
How to allow AD group to access and manage IIS sites and pools?
i manage actually a domain with around 34 IIS servers running webapplications.
I would like to get a better user right management in my domain.
For the moment, my users allowed to manage IIS ...
0
votes
1
answer
2k
views
PHP creates files as root user instead of nginx
I've set up a new server on Debian Stretch.
The web server user is nginx:
ps aux | grep -E '[a]pache|[h]ttpd|[_]www|[w]ww-data|[n]ginx' | grep -v root | head -1 | cut -d\ -f1
nginx
I have already ...
5
votes
1
answer
5k
views
File Permissions have Question Marks? How did this happen? How to scan for them?
I have a bunch of files that are messing up my backup system (via rsync). The permissions are all question marks. How does this happen? How do I find them / scan for them? This partially breaks my ...
0
votes
1
answer
426
views
Setting up proftpd/users for User Perivate Groups
I am using User Private Groups on a CentOS7 server and I can't seem to get things quite working.
Firstly the standard users seen to have a mask of 0022 and I am fairly sure it should be 002 for UPG.
...
4
votes
3
answers
11k
views
How to know if a Active Directory user can log in interactively
I would like to know if and how is it possible to know if an AD user can log in interactively (on a server) in a Windows domain.
I need to know if I can find it out using an LDAP search.
0
votes
1
answer
400
views
How to remove at job generated by www-data with another Linux user
Script executed by www-data creates an at job.
Afterwards, normal Linux user cannot remove this job (atrm) because "Not owner".
How can this be achieved?
4
votes
1
answer
1k
views
Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator can
I am working on Windows Server 2016 (workgroup) and enabled powershell remoting on it.
Only the default administrator account can perform tasks that require administrative permission such as
Get-...
-1
votes
1
answer
2k
views
setting umask for a directory so that all directories, executable file(.sh , .cmd, .bat) are 750 and regular file 640
need to create and change existing file and directory such that all directories and executable files(*.sh, *.bat, *.cmd ..) are 750 and regular file are 640 . I need to this in shell and python both.
...
1
vote
1
answer
242
views
Sudo required to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop
I am wondering why I need sudo to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop. Installed kubectl:kubectl, minikube and docker.io on both an Ubuntu Server 18.04 and on an Ubuntu Budgie ...
-3
votes
1
answer
761
views
Freebsd shutdown privileges
I need to create a user and deny them permission to turn off the machine.
DO SOMEONE KNOW HOW TO CHANGE THE PERMISSIONS OF A NORMAL USER TO NOT ALLOW ME TO TURN OFF?
0
votes
1
answer
1k
views
PHP 7 FPM checkconf is throwing invalid user: ‘www-data:www-data’, but I'm not using a www-data user
I'm using a different user for my web services. Screw convention.
I don't have www-data set in any php config files:
$ grep -rnw /etc -e 'www-data'
$
But I'm still getting this error:
$ ...
0
votes
0
answers
198
views
Use default `ubuntu` user to deploy an app or make separate users?
I have a Ruby on Rails app and use Capistrano to deploy it to the server.
The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1
answer
138
views
Restrict domain admins from joining servers to domain.
I work for a large company that has acquired multiple additional sites over the last 5 years. We're fully integrated these sites into our corporate site. The problem I'm running into now is, most of ...
0
votes
0
answers
29
views
How to remotly validate an installation for a basic user?
We have 10 PC on the network and we don't have ActiveDirectory.
Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
0
votes
1
answer
1k
views
Why does rsync+cron fail with opendir permission denied?
I am trying to make a nightly offsite backup using rsync. There is a folder /media/raid1/backup that is to be uploaded to a different server every night using a cron job running as the user ...
8
votes
5
answers
6k
views
How can I chown a file to a subuid without sudo
Basically, What is going on here and what am I not understanding?
I have a set of subuids for my user. I want to chown a file to specific subuid which is part of this user's allocation
...
3
votes
2
answers
17k
views
Setting a Windows Non-Interactive User Account
Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user.
I would like to set specific Windows domain service accounts as "non-interactive" so ...
3
votes
2
answers
7k
views
Can I "allow logon locally" for ALL local accounts and some domain accounts?
I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level ...
1
vote
1
answer
798
views
User Group permission for apache website
Apache is running with www-data:www-data
I added a user
sudo useradd -s /bin/false -d /var/www/dev -m dev
and added to www-data group
sudo usermod -G www-data --append dev
uid=1001(dev) gid=1001(...
-1
votes
2
answers
4k
views
How to copy user permissions in Windows server 2012 r2?
I have windows server 2012 r2 and two storage drive. lest say A and B. I have created users and given files and folder access in drive A but now it is crashed and now I want to give all the same user ...
1
vote
1
answer
21k
views
List all users with ALL PRIVILEGES in MySQL
I need to find a way to list all database users that have ALL PRIVILILEGES on *.* (all databases and tables). Additionally, it would be great if it could also list only those with GRANT OPTION.
My ...
0
votes
1
answer
1k
views
Unable to remove security group from OU advance permission due to inheritance + Active directory 2012
I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory.
When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
3
votes
1
answer
17k
views
How do I fix OpenShift permission denied error?
I'm try to run OrientDB docker container in OpenShift. I encounter a permissions error when it tries to deploy. I'm using a Mac.
This is the error:
/orientdb/bin/server.sh: line 114: can't create /...
2
votes
3
answers
1k
views
How to create superuser in CentOS 7
I am very new to Linux OS (i've started with CentOS 7), so i was wondering if it's possible to create some sort of super user who will have same privileges as root. By that i mean ability to write + ...
0
votes
1
answer
3k
views
ssh connects okay from command line but from cron using publickey
To rsync (incremental) from remote server (Centos 6.x) to local client (Ubuntu 18.04) I copied the public key I created from client to server to execute rsync without password.
...
1
vote
0
answers
67
views
remote access - restrict accessible user accounts depending on client
I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
0
votes
1
answer
202
views
Sharing folders revokes user permission
I am currently trying to move files from server A to server B.
Server A is currently hosting a website, and server is suppose to host it in the future.
Server A has a severe firewall, connection ...
0
votes
0
answers
583
views
Gunicorn Permission denied: '/dev/ttyUSB0'
This is my gunicorn config file, with username specification:
$ cat /etc/gunicorn.d/wsgi.work
CONFIG = {
'working_dir': '/home/ubuntu/workdir',
'user' : 'ubuntu',
'group' : 'ubuntu',
'args': (...
-2
votes
1
answer
763
views
setup apache www directory for multiple users over sftp [duplicate]
I have standard Ubuntu 16.04 droplet over digitalocean with LAMP stack.
By default I have one user with root privileges (for admin use). I access any directory from root through ssh like with ...
2
votes
1
answer
2k
views
Give zabbix agent read permissions on root log files
I'm running zabbix-agent on a centos 7 machine under user/group zabbix. I want to give the zabbix user access to a couple of log files in folders under:
/var/log
/usr/local/cpanel/logs/
What is the ...
0
votes
1
answer
1k
views
Domain Users Unable to Access Home Directory Without Sharing Folder
So I run a windows 2012 r2 for a client with 20-30 employees. I have created a home directory for each person as a means to save data onto the server. However, recently new users that are added are ...
1
vote
1
answer
1k
views
How to set up secure permissions: Multiple Users & Websites / Apache / www-data
I had my own private VPS that my hosting service managed and now I am switching to a cloud server where I have to manage everything myself. I am trying to mimic their secure setup that they had. On my ...
1
vote
2
answers
22k
views
'/var/lib/mysql/mysql.sock' (13 "Permission denied") when accessing the socket as non mysql user
I am trying to connect to local mysql server I use for development
The server starts fine, but I can not connect to it as a non-root user.
[root@somepc ]# mysql -u [someuser] -p[somepass]
ERROR ...
1
vote
1
answer
55
views
Windows Server 2008 r2 security permissions [closed]
I hope I've selected the correct StackExchange for this question. I have searched google and StackExchange but haven't been able to find an answer to my question with the search queries used.
I ...