All about Unix groups and access control.

learn more… | top users | synonyms

2
votes
2answers
445 views

AT&T UNIX System V Release 4 - How do I create a new “Administrator” user?

I am running AT&T UNIX System V Release 4 Version 2.1 inside VirtualBox, and want to create a new "user account" for myself. At first, I simply created a new user with the useradd command, but ...
2
votes
3answers
710 views

Delete non-unique group with group ID as primary group of a user

So say I have two groups with names testing1 and testing2. Both groups have the same group ID of 2000. Then I add a user named testing-user with GID of 2000. Along the way I want to delete group ...
7
votes
4answers
392 views

Groupwise uniq command?

I am searching for a command to get from a file in this format: hello 32 hello 67 hi 2 ho 1212 ho 1390 ho 3000 To this format (deduplicate by taking the last row of a "group"): hello ...
2
votes
3answers
1k views

User permissions problem Linux

Every time I create a new file from "eclipse", I need to run these two lines of code to get the r/w permission: chmod -R 775 /var/www/folder/filename.extension And/Or sudo chown -R www-data:www-...
5
votes
3answers
2k views

Precedence of user and group owner in file permissions

I just ran into something unexpected (for me) regarding file permissions on Linux (Arch Linux). Basically I have: userX in groupX fileX userX:groupX ---rwx---- What puzzles me: I cannot perform ...
-1
votes
2answers
161 views

Clarification on permissions with GID & UID in UNIX

If Test1 & Test2 are users, then Test1 : UID : 501, GID :501, groups=501,100 Test2 : UID : 502, GID :502, groups=502,100 What will be the correct option from below and explain how? Test1 can'...
1
vote
0answers
474 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
3
votes
1answer
300 views

Two users with different permissions on same directory

Is it possible to give two users different permissions on the same directory? I want to use it for ftp: userFull gets R+W and userLim gets only Read, depending on who logs on. Im getting stuck on the ...
0
votes
2answers
4k views

Privileges for jenkins at apache's folder

I'm having issue similar to this: How to copy files as Jenkins "post build" action if i don't have privileges to destination directory I'm willing to move/copy/rsync files from jenkins ...
3
votes
2answers
277 views

/etc files on a different partition

My setup requires that some of my /etc files reside on a separate partition. For this purpose I've created a softlink: ls -li /etc/group 956 lrwxrwxrwx 1 root root 21 May 7 15:48 /etc/group -> /...
2
votes
2answers
73 views

Who should own files shared by a group and where should they go

I am configuring a Linux work station that will be used by a small number of users (20-30). These users will belong to a small set of groups (5-10) with each user belonging to at least one group and ...
3
votes
1answer
3k views

Can one directory be owned by two groups?

Can one directory be owned by two groups (RHEL 6.2)? I have created one directory: mkdir /opt/shared, then I created two groups: groupadd sales groupadd marketing I added manually to each of ...
1
vote
2answers
147 views

Store a file for all users within a group

If user A is member of group foo, is it then possible for A to share a file for all members within foo without root permissions? chown foo:foo file Is not permitted without privileges. A can say ...
4
votes
1answer
227 views

How do you give a developer group access to apache, MySQL, php and the webroot?

We have 3 web designers that are currently logging in to our server via root to configure apache and setup websites. I have very basic linux knowledge (I'm a web designer) and have created users and ...
5
votes
1answer
3k views

Apache, Group Permissions and User Uploads

I have a folder named "digitalgoods" with the following ownership -- apache:apache residing outside of the htdocs folder and is therefore not accessible to the public. However I need the same folder ...
1
vote
2answers
494 views

Command to know privileges of a user group

If I run cat /etc/group command or groups username I am able to know the list of groups as group of a particular user. Is there any command through which I could know which type of privileges a ...
7
votes
1answer
5k views

Why cannot a user change group ownership of his own files? [duplicate]

Why cannot a user change the group permissions of files which he owns. Let's suppose I have user martin: $ ls -lAd /home/martin/ drwx------ 8 martin martin 4096 Apr 20 01:06 /home/martin/ For some ...
1
vote
1answer
225 views

Re-add accidently deleted system group

In my attempt to delete the admin user group I accidentally deleted the adm system group. I "added it back" by issuing addgroup --system adm. I have a feeling this is going to bite me back later. Is ...
4
votes
2answers
464 views

Why are newly created users assigned to primary groups of their usernames?

I've noticed that on a number of linux distributions that whenever a new user is created, it is assigned to a primary group of its own name. eg. If i create a user called "testuser", by default it is ...
0
votes
1answer
1k views

How can I allow a group to execute a command as another user?

I'm conservative about my sudoers policy. I'm trying to allow wheel users to run psql postgres postgres as the postgres user (because when ident that's the only way it works). root ALL=(ALL) ALL %...
14
votes
2answers
2k views

Why is root in wheel and operator? Can root being in a group ever make a difference?

I just noticed on my FreeBSD machine that root is in wheel and operator. I'm trying to think of a situation where UID 0 being in a group would have any effect on... well... anything, and I'm coming up ...
5
votes
2answers
2k views

Group memberships and setuid/setgid processes

Processes which de-escalate privileges via setuid() and setgid() do not seem to inherit the group memberships of the uid/gid they set. I have a server process that must be executed as root in order ...
1
vote
1answer
172 views

Find which directories each group can access

I need to take the /etc/group file (RHEL) and check what high level subdirectories each group has access to. Here is a made up example: Group 100 - \xxx\xxx\xxx Group 150 - \xx\xxxxx\x Is that ...
6
votes
1answer
234 views

When a member of multiple groups, how do I set the default group for newly created files?

With umask, I can determine the permissions for newly created files. But if I am a member of multiple groups, how do I set the default group for newly created files? This question seems relevant, ...
0
votes
1answer
661 views

Confusion about group `cdrom` in linux system

When I type command groups ubuntu, the output would we like, ubuntu : ubuntu adm dialout cdrom floppy audio dip video plugdev netdev admin I am interested in the cdrom group. What does the group ...
14
votes
3answers
59k views

granting write permissions to a group to a folder

How can I grant write permission to 1 group ? I have 2 users (alex and ben). alex is member of group alex and of group consult. ben is member of group ben and of group consult. I want to grant read ...
27
votes
2answers
52k views

Getting new files to inherit group permissions on Linux

I am having a problem with permissions on a Linux server. I am used to BSD. When a directory is owned by a group the user who owns it isn't in such as www-data, files created in it will be owned by ...
0
votes
1answer
75 views

Trying to change GID on AIX server

I am trying to change GID on Unix server "AIX". I want to change mygroupname:!:79002: from group GID from 79002 to 79003. I have permission to use sudo /usr/bin/chgroup. I have tried everything, ...
2
votes
1answer
243 views

Should I assign gid explicitly when I create a group?

I thought gid is automatically assigned when I create a group. But I found a chef receipt file that assigns a number 403 to gid directly. https://github.com/treasure-data/chef-td-agent/blob/master/...
8
votes
1answer
4k views

How to run a process with a specific group?

I have to start an application with my own user rights, but the group must be different. So, instead of: $ ps -eo "user,group,args" | grep qbittorrent morfik morfik /usr/bin/qbittorrent it ...
1
vote
1answer
94 views

Putting two accounts in group not giving read access to group members

I have an Apache based web site and am trying to allow the user to upload files to a drop box on one machine and then have them transferred to another. So I form a group for two users: www-data which ...
0
votes
1answer
32 views

Trying to form group with two users

I am trying to form a group with two users so that only those two users have access to a directory using chmod g+r dir I form a new group, www-OtagoHarbour, and try to add an existing user, ...
1
vote
2answers
234 views

How to get the group that a user belongs to in SCO

I can see how to add a user, but is there a way to get information on a user, such as the group that it belongs to?
1
vote
1answer
2k views

delete user from group in fedora from command line

I have been using ubuntu extensively and use the following from the command line: deluser <username> <groupname> It doesn't seem to work in fedora. Is there an equivalent?
0
votes
1answer
88 views

Permissions not extended to user in minecraft group [duplicate]

I have a directory, under /srv: drwxrwxr-x 3 minecraft minecraft 4096 Dec 30 06:23 minecraft Owned by user minecraft, group minecraft. Group has read/write/search permissions. I have a user, ...
5
votes
2answers
242 views

Nested POSIX groups in Linux [duplicate]

If I want to add all of the members who belong to the supplemental group web_users to the apache group (as an additional supplemental group) can I just add web_users group to the apache group? Or do ...
1
vote
1answer
902 views

Granting permission for all users in a group to write to a directory and all its subdirectories

Trying out Linode for the first time, running an Arch Linux image, I successfully installed nginx as root. This, however, made /usr/share/nginx/html inaccessible to non-root users. Intuitively, I ...
4
votes
3answers
453 views

restrict student account permissions, give faculty access

I have set up two user groups, students and faculty on Ubuntu 12.04 and created a number of students and faculty accounts. The problem is a student can currently see & read all of the files of a ...
3
votes
3answers
226 views

Is there way to stop random software packages from remotely transferring your files?

I am running a bitcoin client on my archlinux computer. If somebody can get ahold of the wallet.dat file, located in the ~/.bitcoin/ directory they can steal my coins. I have minimal software ...
3
votes
3answers
11k views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
12
votes
3answers
32k views

How do i extend a partition with a LVM and the contained physical volume and logical volume?

On my 240 GB SSD i had at first two partitions, one containing the Logical Volume with Linux Mint and the other had contained a NTFS partition to share with Windows. Now i removed the NTFS partition ...
2
votes
1answer
64 views

Allow a specific user to sudo to users that are part of group X

I have several users, which are all part of group X. And I want to be able to give user Y to sudo to members of group X. Obviously I don't want to edit sudoers everytime I add a user to group X, is ...
3
votes
2answers
70 views

Why does “logging out” of a session activate a newly added supplementary group? [duplicate]

I asked the following question Added user supplementary group, but 'groups(1)' not showing change earlier today. Now I'd like to know why the answer works. After running adduser user group ...
0
votes
1answer
694 views

Added user supplementary group, but 'groups(1)' not showing change [duplicate]

I'm trying to add myself to the fuse user group but it doesn't look like the change is taking effect even though /etc/group looks correct after invoking addgroup or usermod. I've tried both ... sudo ...
2
votes
1answer
281 views

RHEL - Group assigned incorrectly

In our lab, all the LDAP users are assigned to a group vboxusers whose home directory is present in the server. We are using NFS to mount the home directory of an user to the client machines. I was ...
3
votes
2answers
2k views

Seems that chown is allowed to non root user

We are using LDAP authentication and probably another things that I did not understand well, in our company so maybe the following questions are result of this. I have found strange behavior of chown ...
2
votes
2answers
123 views

Directory permissions vs file permssions

If I have two users called john and sally. Both are part of the users group. john creates a directory with permissions 775. sally then puts a file there with 644 permissions. Even though the file ...
20
votes
3answers
4k views

Typical use case for a group password

I checked more than half a century worth Unix experience and neither my colleagues, nor myself has ever set a password on a group (sg and gpasswd). What would be a typical use case for a group ...
1
vote
2answers
1k views

Can't change group of files on mount point

I have mounted some ntfs drives. /etc/fstab looks like this: /dev/mapper/fedora-root / ext4 defaults 1 1 UUID=b6603ac8-e004-4cd6-b141-9bc95409e32a /boot ...
2
votes
2answers
597 views

Execute user script as root in startup applications

I just created a script (logscreenlock) to log lock/unlock screen events (derived from this post): #! /bin/bash dbus-monitor --session "type='signal',interface='org.gnome.ScreenSaver'" | ( while true;...