5
votes
2answers
99 views

Group memberships and setuid/setgid processes

Processes which de-escalate privileges via setuid() and setgid() do not seem to inherit the group memberships of the uid/gid they set. I have a server process that must be executed as root in order ...
1
vote
1answer
30 views

Find which directories each group can access

I need to take the /etc/group file (RHEL) and check what high level subdirectories each group has access to. Here is a made up example: Group 100 - \xxx\xxx\xxx Group 150 - \xx\xxxxx\x Is that ...
4
votes
1answer
30 views

When a member of multiple groups, how do I set the default group for newly created files?

With umask, I can determine the permissions for newly created files. But if I am a member of multiple groups, how do I set the default group for newly created files? This question seems relevant, ...
4
votes
3answers
101 views

granting write permissions to a group to a folder

How can I grant write permission to 1 group ? I have 2 users (alex and ben). alex is member of group alex and of group consult. ben is member of group ben and of group consult. I want to grant read ...
4
votes
1answer
59 views

Getting new files to inherit group permissions on Linux

I am having a problem with permissions on a Linux server. I am used to BSD. When a directory is owned by a group the user who owns it isn't in such as www-data, files created in it will be owned by ...
0
votes
1answer
38 views

Permissions not extended to user in minecraft group [duplicate]

I have a directory, under /srv: drwxrwxr-x 3 minecraft minecraft 4096 Dec 30 06:23 minecraft Owned by user minecraft, group minecraft. Group has read/write/search permissions. I have a user, ...
1
vote
1answer
69 views

Granting permission for all users in a group to write to a directory and all its subdirectories

Trying out Linode for the first time, running an Arch Linux image, I successfully installed nginx as root. This, however, made /usr/share/nginx/html inaccessible to non-root users. Intuitively, I ...
4
votes
3answers
127 views

restrict student account permissions, give faculty access

I have set up two user groups, students and faculty on Ubuntu 12.04 and created a number of students and faculty accounts. The problem is a student can currently see & read all of the files of a ...
1
vote
3answers
213 views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
3
votes
2answers
181 views

Seems that chown is allowed to non root user

We are using LDAP authentication and probably another things that I did not understand well, in our company so maybe the following questions are result of this. I have found strange behavior of chown ...
2
votes
2answers
44 views

Directory permissions vs file permssions

If I have two users called john and sally. Both are part of the users group. john creates a directory with permissions 775. sally then puts a file there with 644 permissions. Even though the file ...
1
vote
3answers
177 views

Can't change group of files on mount point

I have mounted some ntfs drives. /etc/fstab looks like this: /dev/mapper/fedora-root / ext4 defaults 1 1 UUID=b6603ac8-e004-4cd6-b141-9bc95409e32a /boot ...
2
votes
2answers
153 views

Execute user script as root in startup applications

I just created a script (logscreenlock) to log lock/unlock screen events (derived from this post): #! /bin/bash dbus-monitor --session "type='signal',interface='org.gnome.ScreenSaver'" | ( while ...
0
votes
1answer
473 views

UNIX: how to change group of read-only file system

I am trying to change the group of a file that I (user123) am an owner of but I am getting an error. It won't let me change the directory permissions, either. It keeps saying the file system is ...
0
votes
1answer
44 views

How do I set up proper ownership of these files?

I need the directory /var/www/ (and everything inside it) to be modifiable by only authorized users. The way I tried to do this was: sudo groupadd webmasters sudo usermod -G webmasters pi # My user ...
1
vote
1answer
677 views

Give default write permission to group to any newly created files and folders

Let's say that we have 2 users: a and b, that are both part of group general. I would like that any file or folder that A creates, would have write permission to the group GENERAL. How can I do it? ...
3
votes
2answers
94 views

how to initialize `/etc/group`?

After editing /etc/group, How this update starts functioning without restarting the system in Unix? Is there any command we need to run?
3
votes
1answer
204 views

File owner must belong to file group?

I have a rather simplistic understanding of file permissions on *nix systems. I understand that there is a file owner and file group, but is there a hard and fast rule on whether the said file owner ...
1
vote
1answer
75 views

Function of owning group versus ACL group permissions

Given the fact that we can give any number of groups rwx via POSIX ACL's is there any special privileges given to the owning group? For example, we can set any number of users with ACL's but only the ...
4
votes
2answers
141 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
1
vote
1answer
550 views

Allow all group members to create directories and files

There are 2 users sftp_user apache Both users belong to the updaters group as well as other groups. New directories and files are created in the /updates/ directory. drwxrwsr-x 8 sftp updaters ...
1
vote
1answer
74 views

Securely running LAMP under a specific user

I'm setting up a sandbox type of server that will be used by a couple users as a development environment and knowledge base. The server will have a web frontend so I've installed Apache, MySQL and ...
1
vote
1answer
227 views

Group permissions ineffective, permission still denied

I've got a problem with UNIX permissions : I'm working under Debian Squeeze, and one of my scripts, run by www-data, needs to move a file, 23550.zip, placed in the home directory of another user, ...
1
vote
2answers
383 views

How to handle user permission issue?

We have created an asset management application web app using php. This app allows users to browse, upload, rename, replace assets (binary files like images and 3d models) We developed in windows ...
0
votes
2answers
112 views

Change/Create permissions for a folder

How can I create (if the folder is new) or change (if the folder was already existent) permissions for a folder? In particular, I want to create a subdirectory in /etc/bind/ where I can put the ...
1
vote
1answer
889 views

Accessing another user's files

I have a file "abc" with permissions 440 .The owner of this file is "root" and the group of this file is "groupabc" . I have a user "user1" .Is their anyway I can see the contents of files "abc" using ...
1
vote
2answers
2k views

wireshark: Couldn't run /usr/sbin/dumpcap in child process [duplicate]

Possible Duplicate: How to add write permissions for a group? When I run Wireshark, It shows the following message: Couldn't run /usr/sbin/dumpcap in child process: Permission denied Are ...
6
votes
1answer
2k views

addgroup vs groupadd

I happen to know there is a slight difference between adduser and useradd. (i.e., adduser has additional features to useradd, such as creating a home directory.) Then what is the relation between ...
1
vote
1answer
148 views

How to disable messages in unix if mesg and chgrp not allowed?

This is one of my questions for my exam .. We are not supposed to use mesg y/n for this but we should effectively avoid mesgs along with the problem of not being able to change groups.
5
votes
3answers
608 views

Can't read a file although it's in my group and permissions for group read are set

I encounter a strange problem on a unix/linux machine: I'm member of a group, let's call it group A and a certain file (which has a different owner) belongs to group A as well. The permissions of ...
2
votes
0answers
188 views

Samba: system group mapping

I have w2008R2 PDC and Linux server with samba and winbind. Now I'd like to add some domain users to Unix adm group in AD. Let's say I have adm group defined in AD, and every user from this group ...
0
votes
1answer
2k views

Full access by group user of /var/www/html [duplicate]

Possible Duplicate: How to add write permissions for a group? On Centos 6 I'm trying to give full access to make and delete by the user mitch for /var/www/http. I did addgroup www and then ...
4
votes
1answer
3k views

Group within group file permissions

I tried finding this on here, but couldn't so sorry if it's a duplicate. Say I have 2 groups and a user: group1, group2, user1 with the following structure: group1 is a member of group 2, user1 is a ...
1
vote
1answer
365 views

Group Permission on public_html [duplicate]

Possible Duplicate: Permissions: What's the right way to give Apache more user permissions? Before I knew better, I used /home/someuser/public_html/scripts as a place from which shared ...
1
vote
1answer
3k views

Why this error: “cannot create directory `foo': Permission denied”

I get this error when I try creating a directory: [rex <03:57 PM> /var/tmp/pb82]$ mkdir foo mkdir: cannot create directory `foo': Permission denied But doesn't the following output indicate ...
2
votes
3answers
805 views

Limited SSH user on Ubuntu 12

I'm running Minecraft on a server. How can I give my friend SSH access just to the minecraft folder (a root folder), the screen command, and some ports?
2
votes
3answers
4k views

What does GID mean?

What does GID actually mean? I have Googled it and this is what linux.about.com said: Group identification number for the process. Valid group numbers are given in /etc/group, and in the GID field ...
1
vote
2answers
214 views

How to maintain file ownership when running 'yum update'

I'm running CentOS 6.2 and installed nginx as root. After the install I changed the owner and group of the install to it's own user and group to keep thing a bit more secure. I logged in as root and ...
2
votes
1answer
1k views

How do I set permissions for a directory so that files and directories created under it maintain group write permissions? [duplicate]

Possible Duplicate: Make all new files in a directory accessible to a group I have a directory in which collaborative files / directories are stored. Say directory abc is owned by root and ...
3
votes
3answers
196 views

When adding a user to a new group when does the user group permissions become active when its a /nologin user?

I have a service level account to run my webserver, and this user is setup with /sbin/nologin. Normally when you add a user to a group you must logout and login to use the new group permissions. ...
0
votes
1answer
212 views

Incompatible group permissions in Linux - Is it a bug? [duplicate]

Possible Duplicate: How to apply changes of newly added user groups without needing to reboot? I am on Ubuntu 11.04. I am creating another user and placing an existing user in the group of ...
6
votes
2answers
2k views

linux permission, group member cannot write even with write permission

The logged in user is a member of a group that has a write permission on a folder. But when this user is trying to write something, "permission is denied". The log below summarizes the question: ...
3
votes
2answers
1k views

Using umask to set group permissions

A long time ago an old friend showed me a way to use an octal or hex umask with a group I think using /etc/profile. I'm not sure. I'm trying to create group on Debian so that every member of that ...
2
votes
2answers
518 views

Can I share a folder inside my home directory with another user?

Can I share a folder inside my home directory with another user? I have two users on a system, agent and daemon. An external server connects as agent and rsyncs files to ~agent/incoming I want ...
0
votes
2answers
1k views

Can't access Apache log folder

I want to see apache log file. This is what I tried: I granted most all permissions to apache2 folder. hieund@hieund:/var/log$ sudo chmod a+rw apache2/* But I can't cd to it. So I add my user to ...
2
votes
1answer
6k views

Changing user and group ID system wide (including file system attributes)?

(this question possibly related to Linux: simulating/masking user ownership upon mount of 'external' partitions? - Stack Overflow) I typically use Ubuntu (currently 11.04) as my desktop OS; let's say ...
0
votes
2answers
91 views

How to write in directory out of home?

I have my Apache server running in the /srv/http/ directory. I changed the group of it to httpadmin and then added my user to that group. Then, I changed the permissions of that directory to ...
4
votes
1answer
5k views

what is 'nogroup' group's purpose

When I list al groups I see one called 'nogroup'. What is this for? Is it supposed to be least privileged one or something? I'm using ubuntu 11.04.
2
votes
2answers
602 views

su user fails with “grep: /var/cpanel/users/user: Permission denied”

I just did something pretty simple. Given a user user, I modified his user id, primary group's id, and added him to a new group in order to make my server use the same uid and gid as another server ...
12
votes
2answers
5k views

How to apply changes of newly added user groups without needing to reboot?

Assume I'm logged in with user takpar: takpar@skyspace:/$ As root, I've added takpar as a member of group webdev using: # usermod -a -G webdev takpar But it seems it has not been applied. because ...