The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
0answers
32 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
2
votes
0answers
51 views

Set list of applications allowed for execution by unprivileged user

I am working on a project of security enforced Linux-based system (kernel 2.6.32 + Gnome 2 + Centos package base mostly). We need to implement the restriction of execution of unallowed executables. ...
2
votes
2answers
49 views

Specialized access control for directories in RedHat

I have a requirement where I want to change permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able ...
4
votes
1answer
684 views

allowing users to access certain ports on server

I have an RHEL 6 system which has 20 users. I have 20 ports on which separate versions of a service is running. I want user a to access port a, but not other ports. Is there a way to do this? (...
6
votes
1answer
2k views

How can I enable URL rewriting on a DD-WRT router?

I would like to be able to add a parameter to certain URL requests that go through my DD-WRT router. Specifically, I'm trying to figure out how to force safe search in Google, which means I have to ...
3
votes
1answer
341 views

Can systemd do some setup before forking as a user?

Having written several small daemons or web applications for my personal use, I like to manage them using systemd (I am using Arch Linux, if that matters). So I write service files like the one below: ...
4
votes
2answers
2k views

Add ssh user with minimum rights for backup [duplicate]

I have a small server running Debian and I want to add an account with SSH access for backups. The user of this account should have no console access. He can only transfer (backup) data via SCP to/...
6
votes
2answers
1k views

Restrict particular applications from accessing certain files

Normally the private files stored in the home directory of a user can be accessed by applications running with the effective UID of the user. How can I restrict a particular application from accessing ...
0
votes
1answer
239 views

not able to login by ftp

I've installed vsftp and set the home directory of user ftp with sudo usermod -d /var/www/ ftp , I've also set the password with sudo passwd ftp and restarted the server but I can not login with user ...
1
vote
2answers
3k views

How to stop telnet access for a particular IP address?

How can I stop telnet access for a particular IP address on the command line?
1
vote
4answers
260 views

LD_PRELOAD or similar to warn user about modifications to a file?

I am running a (complex) script that seems to modify at some point a file. I would like to get warnings whenever the script / program tries to write, chmod, chown or perform any other attempt that I ...
6
votes
2answers
778 views

Can a user brute-force a directory listing without having read permission on the directory?

I noticed that when a user is working in a directory to which he does not have read permission that using cd produces different error messages, depending on whether or not a subdirectory exists: $ ls ...
6
votes
3answers
15k views

How can I block a specific URL on a DD-WRT router?

I've been looking everywhere for this. Does anyone know how to block a specific URL on a DD-WRT router? For example, I want to block website.com/whatever but not website.com, blah.website.com, or ...
2
votes
2answers
1k views

How to password-protect a script on Linux?

How do you set a password to execute a command or script in Linux? I need to avoid a script (in which user and password details are included) from being used/executed from unauthorized users. So is ...
1
vote
1answer
72 views

How do I isolate my file system data from another system root?

I have a linux machine(kubuntu 13.04) A my friend asked me give him an account with being able to use sudo. So, I made an account for him and put the account in /etc/group for him to use sudo I don't ...
0
votes
1answer
88 views

Removing access privileges to backup while maintaining current setup

I have a giant directory, and I am dealing with a backup. I would like to store this backup in as safe of a way as possible. One of the ways of doing that is removing rwx privileges through chmod. ...
1
vote
1answer
322 views

Set up proper programming environment

I'm starting to think how to set up the most convenient environment for programming, with the following conditions. I run Linux Mint 14. I've got a computer at work but would like to have access to ...
4
votes
3answers
292 views

How to prohibit from changing an owner of modifiable files?

I sometimes need to run a Qt Creator from root. After that, some config files of Qt Creator suddenly have a root as an owner. Therefore when running Qt Creator as user, I am getting nag warnings about ...
1
vote
3answers
124 views

group file and everything related to it [closed]

I'm quite new to *nix OS. I understand the format and usage (at least what the man pages says) of the /etc/group file. One day I was trying to replace my group file with a backup copy. I changed the ...
10
votes
1answer
4k views

How to stop users from Switching to Root user

I have disabled the root user login from Sshd.conf file so now no one can login using root user even if they know the password SOMEHOW. Now I have 3 users in server ROOT,EMERG and ORACLE. I want to ...
0
votes
2answers
94 views

Problem accessing an Apache-hosted folder

I'm running Centos 6.2, and Apache. I'm running into an error to do with access rights/permissions when trying to navigate to a webpage. I'm trying to go to the URL http://localhost/repos, but I get ...
3
votes
2answers
4k views

How to allow www-data to create a folder without giving read access to the parent folder

I'm not exactly sure the right question to ask, so I'll try to explain what I'm trying to do. I have an internal web application (in PHP) that I want to be able to create a folder. The trouble is ...
7
votes
4answers
9k views

When does chmod fail?

Under what circumstances will chmod fail? I looked at the man page but it only specifies usage and doesn't go into details about what circumstances it won't work in. I'd assume chmod will work if: ...
2
votes
1answer
81 views

Optimal way to setup user account / accesses?

I have a (home) Ubuntu machine; upon installation I created the "x" user during the installation (who is not the root) so often when I want to run apt-get or other things that require write access to /...
4
votes
1answer
121 views

Can I force myself to enter a password when run certain processes?

I frequently work in an environment where, lets call them "pranksters" may gain access to my console. I am diligent in locking my screen whenever I walk away, but given enough time someone gets the ...
3
votes
1answer
3k views

Redirect linux serial console

I want to redirect my serial port while telnet session in linux. I have an embedded Linux box which is has a serial console. After I do a telnet to the box, I can type in both the serial console as ...
4
votes
2answers
440 views

Password protecting a system file? (e.g. /etc/resolv.conf)

I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the /etc/resolv....
2
votes
1answer
318 views

Overwrite file and apply file system rights of overwritten files?

I backed up some linux configuration files to a windows machine, so the file system rights were lost. Now I would like to restore my backed up configuration by overwriting the configuration currently ...
3
votes
4answers
6k views

Permissions to deny SSH users from accessing other user's folders

I am currently running Fedora on a network computer, acting as a host to other users who will SSH into my terminal to do their work. However I realised that they are also able to access my /home ...
5
votes
1answer
686 views

How can I setup a wifi access point to only allow users if they accept an EULA?

I need to setup an access point to only allow users through if they first accept an EULA. To make things slightly simpler, I'm looking into doing this with a unix machine that shares the connection ...