All about Unix groups and access control.

learn more… | top users | synonyms

1
vote
1answer
92 views

Re-add accidently deleted system group

In my attempt to delete the admin user group I accidentally deleted the adm system group. I "added it back" by issuing addgroup --system adm. I have a feeling this is going to bite me back later. Is ...
11
votes
2answers
372 views

Why is root in wheel and operator? Can root being in a group ever make a difference?

I just noticed on my FreeBSD machine that root is in wheel and operator. I'm trying to think of a situation where UID 0 being in a group would have any effect on... well... anything, and I'm coming up ...
0
votes
1answer
37 views

Trying to change GID on AIX server

I am trying to change GID on Unix server "AIX". I want to change mygroupname:!:79002: from group GID from 79002 to 79003. I have permission to use sudo /usr/bin/chgroup. I have tried everything, ...
4
votes
2answers
72 views

Why are newly created users assigned to primary groups of their usernames?

I've noticed that on a number of linux distributions that whenever a new user is created, it is assigned to a primary group of its own name. eg. If i create a user called "testuser", by default it is ...
0
votes
1answer
111 views

How can I allow a group to execute a command as another user?

I'm conservative about my sudoers policy. I'm trying to allow wheel users to run psql postgres postgres as the postgres user (because when ident that's the only way it works). root ALL=(ALL) ALL ...
5
votes
2answers
367 views

Group memberships and setuid/setgid processes

Processes which de-escalate privileges via setuid() and setgid() do not seem to inherit the group memberships of the uid/gid they set. I have a server process that must be executed as root in order ...
1
vote
1answer
39 views

Find which directories each group can access

I need to take the /etc/group file (RHEL) and check what high level subdirectories each group has access to. Here is a made up example: Group 100 - \xxx\xxx\xxx Group 150 - \xx\xxxxx\x Is that ...
4
votes
1answer
66 views

When a member of multiple groups, how do I set the default group for newly created files?

With umask, I can determine the permissions for newly created files. But if I am a member of multiple groups, how do I set the default group for newly created files? This question seems relevant, ...
0
votes
1answer
87 views

Confusion about group `cdrom` in linux system

When I type command groups ubuntu, the output would we like, ubuntu : ubuntu adm dialout cdrom floppy audio dip video plugdev netdev admin I am interested in the cdrom group. What does the group ...
4
votes
3answers
551 views

granting write permissions to a group to a folder

How can I grant write permission to 1 group ? I have 2 users (alex and ben). alex is member of group alex and of group consult. ben is member of group ben and of group consult. I want to grant read ...
2
votes
1answer
76 views

Should I assign gid explicitly when I create a group?

I thought gid is automatically assigned when I create a group. But I found a chef receipt file that assigns a number 403 to gid directly. ...
5
votes
1answer
149 views

How to run a process with a specific group?

I have to start an application with my own user rights, but the group must be different. So, instead of: $ ps -eo "user,group,args" | grep qbittorrent morfik morfik /usr/bin/qbittorrent it ...
3
votes
4answers
2k views

How to configure permissions to allow file access?

I'm running Wowza Media Server on my server as "root". The problem is that all files created (recorded) by Wowza are "root:root" and aren't writable, editable, or deletable by any other users. How can ...
1
vote
1answer
60 views

Putting two accounts in group not giving read access to group members

I have an Apache based web site and am trying to allow the user to upload files to a drop box on one machine and then have them transferred to another. So I form a group for two users: www-data which ...
0
votes
1answer
15 views

Trying to form group with two users

I am trying to form a group with two users so that only those two users have access to a directory using chmod g+r dir I form a new group, www-OtagoHarbour, and try to add an existing user, ...
1
vote
2answers
86 views

How to get the group that a user belongs to in SCO

I can see how to add a user, but is there a way to get information on a user, such as the group that it belongs to?
1
vote
1answer
343 views

delete user from group in fedora from command line

I have been using ubuntu extensively and use the following from the command line: deluser <username> <groupname> It doesn't seem to work in fedora. Is there an equivalent?
0
votes
1answer
59 views

Permissions not extended to user in minecraft group [duplicate]

I have a directory, under /srv: drwxrwxr-x 3 minecraft minecraft 4096 Dec 30 06:23 minecraft Owned by user minecraft, group minecraft. Group has read/write/search permissions. I have a user, ...
5
votes
2answers
84 views

Nested POSIX groups in Linux [duplicate]

If I want to add all of the members who belong to the supplemental group web_users to the apache group (as an additional supplemental group) can I just add web_users group to the apache group? Or do ...
1
vote
1answer
285 views

Granting permission for all users in a group to write to a directory and all its subdirectories

Trying out Linode for the first time, running an Arch Linux image, I successfully installed nginx as root. This, however, made /usr/share/nginx/html inaccessible to non-root users. Intuitively, I ...
1
vote
2answers
261 views

Modify Default Group for new Users in Solaris 11

I would like to change the default group for new users which are added to the system. Does anybody know in which file this is stored? I'm using Solaris 11
1
vote
1answer
180 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
0
votes
0answers
28 views

gksu login and groups

After installing Wireshark, I added my user to wireshark group. As I didn't want to restart my X session in order to relogin, I tried running it with gksu -l -u myuser. As su - myuser showed my new ...
4
votes
3answers
197 views

restrict student account permissions, give faculty access

I have set up two user groups, students and faculty on Ubuntu 12.04 and created a number of students and faculty accounts. The problem is a student can currently see & read all of the files of a ...
3
votes
3answers
205 views

Is there way to stop random software packages from remotely transferring your files?

I am running a bitcoin client on my archlinux computer. If somebody can get ahold of the wallet.dat file, located in the ~/.bitcoin/ directory they can steal my coins. I have minimal software ...
4
votes
2answers
157 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
1
vote
3answers
871 views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
4
votes
2answers
2k views

How do i extend a partition with a LVM and the contained physical volume and logical volume?

On my 240 GB SSD i had at first two partitions, one containing the Logical Volume with Linux Mint and the other had contained a NTFS partition to share with Windows. Now i removed the NTFS partition ...
9
votes
1answer
2k views

In /etc/group what is the meaning of the second field?

A sample /etc/group file contains the following entries: root:*:0: adm:!:4:logcheck antoine:x:1000: The man pages I've read (Debian & OSX) says the second field is to store a group password. ...
0
votes
1answer
2k views

UNIX: how to change group of read-only file system

I am trying to change the group of a file that I (user123) am an owner of but I am getting an error. It won't let me change the directory permissions, either. It keeps saying the file system is ...
2
votes
1answer
47 views

Allow a specific user to sudo to users that are part of group X

I have several users, which are all part of group X. And I want to be able to give user Y to sudo to members of group X. Obviously I don't want to edit sudoers everytime I add a user to group X, is ...
3
votes
2answers
49 views

Why does “logging out” of a session activate a newly added supplementary group? [duplicate]

I asked the following question Added user supplementary group, but 'groups(1)' not showing change earlier today. Now I'd like to know why the answer works. After running adduser user group ...
0
votes
1answer
198 views

Added user supplementary group, but 'groups(1)' not showing change [duplicate]

I'm trying to add myself to the fuse user group but it doesn't look like the change is taking effect even though /etc/group looks correct after invoking addgroup or usermod. I've tried both ... sudo ...
2
votes
1answer
114 views

RHEL - Group assigned incorrectly

In our lab, all the LDAP users are assigned to a group vboxusers whose home directory is present in the server. We are using NFS to mount the home directory of an user to the client machines. I was ...
3
votes
2answers
249 views

Seems that chown is allowed to non root user

We are using LDAP authentication and probably another things that I did not understand well, in our company so maybe the following questions are result of this. I have found strange behavior of chown ...
2
votes
2answers
56 views

Directory permissions vs file permssions

If I have two users called john and sally. Both are part of the users group. john creates a directory with permissions 775. sally then puts a file there with 644 permissions. Even though the file ...
1
vote
3answers
408 views

Can't change group of files on mount point

I have mounted some ntfs drives. /etc/fstab looks like this: /dev/mapper/fedora-root / ext4 defaults 1 1 UUID=b6603ac8-e004-4cd6-b141-9bc95409e32a /boot ...
2
votes
2answers
246 views

Execute user script as root in startup applications

I just created a script (logscreenlock) to log lock/unlock screen events (derived from this post): #! /bin/bash dbus-monitor --session "type='signal',interface='org.gnome.ScreenSaver'" | ( while ...
2
votes
3answers
752 views

How can a group own a file?

Whe I do ls -l, two of the fields are username of the owner and name of the owning group. The username is clear - I created the file, it is mine. However the group entry confuses me. My user is a ...
2
votes
1answer
206 views

how to map users and group with sshfs

As you can see below I'm able to map the user from kevcoder00 to kevcoder01 but the group gets mapped to marigold although that group does not exists on kevcoder01 l00py@kevcoder00:~$ sshfs -o ...
3
votes
3answers
70 views

Can I forbid the creation of files with certain permissions?

I have a directory with a certain group ID, and I only want files with the same ID to be in that directory. So I set the SGID bit on that directory, so that everytime a file is created inside it, it ...
0
votes
1answer
63 views

How do I set up proper ownership of these files?

I need the directory /var/www/ (and everything inside it) to be modifiable by only authorized users. The way I tried to do this was: sudo groupadd webmasters sudo usermod -G webmasters pi # My user ...
3
votes
1answer
292 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
385 views

File owner must belong to file group?

I have a rather simplistic understanding of file permissions on *nix systems. I understand that there is a file owner and file group, but is there a hard and fast rule on whether the said file owner ...
2
votes
2answers
906 views

CentOS can't remove user from group

Asked and answered many times, but I can't get it working!!! (On CentOS) I have the user userA and I want to remove it from group sftponly. #groups userA userA : sftponly #id -Gn userA sftponly ...
1
vote
0answers
106 views

Udev rule- change group

I would like to change group of /dev/nvidia0. I was write udev rule: KERNEL="nvidia[0-9]", GROUP="video", MODE="0666" But it does't change group, after reboot file is in rootgroup. How do this?
0
votes
1answer
298 views

Which tasks/commands can't be executed with user gid=0 but not uid=0 on Linux [duplicate]

In a Linux server I will have an user with gid=0 but it's uid won't be 0. As there are many commands with root:root and execute permissions for group I know there will be a lot of administrative task ...
3
votes
1answer
2k views

Give default write permission to group to any newly created files and folders

Let's say that we have 2 users: a and b, that are both part of group general. I would like that any file or folder that A creates, would have write permission to the group GENERAL. How can I do it? ...
2
votes
1answer
8k views

Changing user and group ID system wide (including file system attributes)?

(this question possibly related to Linux: simulating/masking user ownership upon mount of 'external' partitions? - Stack Overflow) I typically use Ubuntu (currently 11.04) as my desktop OS; let's say ...
3
votes
2answers
122 views

how to initialize `/etc/group`?

After editing /etc/group, How this update starts functioning without restarting the system in Unix? Is there any command we need to run?