All about Unix groups and access control.

learn more… | top users | synonyms

1
vote
1answer
68 views

Given a domain-controlled group, how can I get its domain?

I'm working on an application which collects data on groups. In my application I need to collect data and the residing users of local groups and send meta-data on domain-controlled groups. My ...
1
vote
1answer
57 views

Find files belonging to a group

Actually I want to find all the files and folders that are under the same group, for example I have this : [test] user1/sam a.txt user9/sam b.txt user4/sam I'm looking for a command ...
1
vote
2answers
202 views

Where is core group defined on coreos?

On CoreOS EC2 instance, I find the following: $ cat /etc/passwd root:x:0:0:root:/root:/bin/bash core:x:500:500:CoreOS Admin:/home/core:/bin/bash $ cat /etc/group wheel:x:10:root,core sudo:x:150: ...
1
vote
2answers
133 views

how to determine the permissions of groups?

When you invoke sudo, it prompts for password and then checks the /etc/sudoers configuration file to see if the user is permitted access to run the command. /etc/sudoers is the sudo configuration ...
1
vote
3answers
417 views

Delete non-unique group with group ID as primary group of a user

So say I have two groups with names testing1 and testing2. Both groups have the same group ID of 2000. Then I add a user named testing-user with GID of 2000. Along the way I want to delete group ...
1
vote
1answer
652 views

Granting permission for all users in a group to write to a directory and all its subdirectories

Trying out Linode for the first time, running an Arch Linux image, I successfully installed nginx as root. This, however, made /usr/share/nginx/html inaccessible to non-root users. Intuitively, I ...
1
vote
1answer
2k views

Allow all group members to create directories and files

There are 2 users sftp_user apache Both users belong to the updaters group as well as other groups. New directories and files are created in the /updates/ directory. drwxrwsr-x 8 sftp updaters ...
1
vote
1answer
397 views

Several groups can have the same groupID?

0:root@SERVER:/root # grep 300 /etc/group ipsec:!:300:admgrp 0:root@SERVER:/root # ?? Several groups (ipsec/admgrp) can have the same groupID (300)?? how can this be? /AIX 6.1/
1
vote
1answer
197 views

Securely running LAMP under a specific user

I'm setting up a sandbox type of server that will be used by a couple users as a development environment and knowledge base. The server will have a web frontend so I've installed Apache, MySQL and ...
1
vote
2answers
34 views

Where & How is user group information stored in Ubuntu? [closed]

Two places possible: /etc/group and /etc/passwd. If I use command: adduser [username] [groupname], then the user would be added to the group, and the file /etc/group would then be updated. However, ...
1
vote
1answer
61 views

Prompting for a password on sudo?

I'm creating users using Puppet. Here's the gist of what I'm doing in Puppet: user { 'ntkay': name => 'ntkay', uid => 10000, home => '/home/ntkay', managehome => true, ...
1
vote
1answer
82 views

Group member cannot list files in directory made by group

I am using Centos 6.6. I made a group with the following call sudo groupadd www-OtagoHarbour sudo usermod -G www-OtagoHarbour apache sudo usermod -G www-OtagoHarbour OtagoHarbour When I enter ...
1
vote
1answer
41 views

What if I add a user to a supplementary group?

I am using debian 7.0 and I added "debian-transmission" to the group "pi" with: usermod -a -G pi debian-transmission I made this change because transmission was not able to write the pi mounted ...
1
vote
1answer
61 views

sudoers file and passwd only for selected group

I have 3 users in "production" group: John, Steve and Bob. In "sales" group are: Sam and Jack. Now, I would like to give John permition to change passwords of all users but only in "production" ...
1
vote
1answer
70 views

User cannot access a file after setting an ACL [duplicate]

I cannot enter a directory after creation in a folder with an ACL: I am attempting to limit rwx access to a folder for just a single group and no one else. I would like to be able to add new users to ...
1
vote
1answer
76 views

Groups in the Samba configuration

I can't quite understand groups. For example, lets say if I add the following into my samba config: valid users = @users Must the group users exist on my system or is a samba group itself? And if ...
1
vote
1answer
166 views

Re-add accidently deleted system group

In my attempt to delete the admin user group I accidentally deleted the adm system group. I "added it back" by issuing addgroup --system adm. I have a feeling this is going to bite me back later. Is ...
1
vote
1answer
64 views

Find which directories each group can access

I need to take the /etc/group file (RHEL) and check what high level subdirectories each group has access to. Here is a made up example: Group 100 - \xxx\xxx\xxx Group 150 - \xx\xxxxx\x Is that ...
1
vote
1answer
114 views

Function of owning group versus ACL group permissions

Given the fact that we can give any number of groups rwx via POSIX ACL's is there any special privileges given to the owning group? For example, we can set any number of users with ACL's but only the ...
1
vote
1answer
6k views

Trouble adding existing user to existing group in ubuntu

I was trying to add a user called bill to www group useradd -G www bill It gives me error UX: useradd: ERROR: bill is already in use. Choose another. I checked if this user already in the group ...
1
vote
1answer
2k views

Accessing another user's files

I have a file "abc" with permissions 440 .The owner of this file is "root" and the group of this file is "groupabc" . I have a user "user1" .Is their anyway I can see the contents of files "abc" using ...
1
vote
1answer
257 views

How to disable messages in unix if mesg and chgrp not allowed?

This is one of my questions for my exam .. We are not supposed to use mesg y/n for this but we should effectively avoid mesgs along with the problem of not being able to change groups.
1
vote
2answers
2k views

Can't access Apache log folder

I want to see apache log file. This is what I tried: I granted most all permissions to apache2 folder. hieund@hieund:/var/log$ sudo chmod a+rw apache2/* But I can't cd to it. So I add my user to ...
1
vote
0answers
87 views

Give a user permission to one folder

I have made so my group "sftponly" can access the users home folder. But right now the user in the group don't have permission to other folders, but they have permission to see them. How can I do so ...
1
vote
0answers
35 views

groupadd failure: “Cannot open audit interface”

I'm trying to add a group in a chrooted environment: root@my-host:/# /usr/sbin/groupadd -g 101 games Cannot open audit interface - aborting. I'm operating with root permissions. Additional info: ...
1
vote
1answer
83 views

sort file based one colum and group by another column

I have a file of three columns: 1 A 0.5 2 B 0.7 3 A 10 4 C 4 5 B 4 I want to sort the file by increasing order of column 3 and group by column 2 1 A 0.5 3 A 10 ...
1
vote
1answer
18 views

How to only allow a group for network access?

Using OpenBSD's pf. Question: How can we modify the firewall of OpenBSD to allow ONLY a given group for network access? If somebody isn't in that group, it shouldn't have layer 3 or layer 2 network ...
1
vote
2answers
81 views

how to list users in a group and their passwords

How do I view a list of users in a specific group and their passwords or attributes? I know to use cut -d: -f1 /etc/passwd But this only lists users.
1
vote
2answers
26 views

recommended storage location for multiple users [duplicate]

Is there a conventional location to store non-secret bulk files that can be accessible by multiple users? I know that I can create a new folder (and set the right permissions) in most places in the ...
1
vote
0answers
36 views

How can I set a group policy to all access on all folders except one?

I am currently making a test environment where users will be going through a network administration course with different levels they must complete. Due to the nature of the course, we want to give ...
1
vote
0answers
53 views

Unable to access a directory despite belonging to a group with write permission [duplicate]

I am learning basic file permission in Linux and tried actions below. I have a folder "music" to which group "music" has wxr permission. I have user "finxxi" added into group "music". When user ...
1
vote
0answers
23 views

Configuring group access across a LAN

I have created a group called engineers on two VMs on the same 192.168.56.0/24 LAN. Is there any way the members from VM1 in engineers can view files created by engineers from VM2? I was thinking of ...
1
vote
0answers
586 views

Tomcat unable to create file in dir owned by same group

I have a server running Tomcat, and I need Tomcat to create a file in a particular folder. Tomcat (technically a Java app) runs as the user 'tomcat', as evidenced by top: #top 1251 tomcat 20 0 ...
1
vote
0answers
90 views

Which command would you use if you want to remove the password assigned to a group

Suppose I have one or more groups (as in the user database as backed by /etc/group or LDAP or NIS+...) configured with a password (for the sg or newgrp commands). Which command would you use to ...
1
vote
1answer
81 views

Troubleshooting joining a group in Mint in VirtualBox [duplicate]

I am trying to join my user to the vboxsf group to access a VirtualBox shared folder from inside my Linux Mint virtual machine. However I'm encountering a problem that I can't troubleshoot. I've ...
1
vote
0answers
305 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
1
vote
1answer
315 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
1
vote
1answer
530 views

Group Permission on public_html [duplicate]

Possible Duplicate: Permissions: What's the right way to give Apache more user permissions? Before I knew better, I used /home/someuser/public_html/scripts as a place from which shared ...
0
votes
3answers
6k views

What is the function of user group root? [duplicate]

Possible Duplicate: What does it mean to be in group 0? I wanted to avoid using SSH root login to backup my remote server. Thus I set up a non-root user account on the server and place it ...
0
votes
1answer
246 views

Incompatible group permissions in Linux - Is it a bug? [duplicate]

Possible Duplicate: How to apply changes of newly added user groups without needing to reboot? I am on Ubuntu 11.04. I am creating another user and placing an existing user in the group of ...
0
votes
2answers
100 views

How to write in directory out of home?

I have my Apache server running in the /srv/http/ directory. I changed the group of it to httpadmin and then added my user to that group. Then, I changed the permissions of that directory to ...
0
votes
2answers
32 views

For given directory, how to check which files has specific permission flag in the group part?

I have a directory and i want to list all files that has permissions for writing in their group part, no matter to which group they belong. Also, how it can be done for the whole filesystem?
0
votes
2answers
93 views

What is the significance of the “wheel” group? [duplicate]

I've commonly seen references to a wheel user group online as well as when setting up my sudoers file. Does naming a group wheel imply something special about the group or is it just a name for a ...
0
votes
1answer
23 views

Trying to form group with two users

I am trying to form a group with two users so that only those two users have access to a directory using chmod g+r dir I form a new group, www-OtagoHarbour, and try to add an existing user, ...
0
votes
1answer
30 views

Is there any way of knowing who [including remote users] can access a paticular file / folder?

In Windows you could enter file properties and see which users have an access to a patricular files. [Including remote users / groups that are part of your domain] In unix when you enter properties ...
0
votes
1answer
94 views

How to add “sudo” group

I've done a mistake: I've removed the 'sudo' group, because I have forgotten the -a option (I wanted to add 'video' group): sudo usermod -G video $USER Now, when I want to call sudo I have this ...
0
votes
1answer
393 views

Added user supplementary group, but 'groups(1)' not showing change [duplicate]

I'm trying to add myself to the fuse user group but it doesn't look like the change is taking effect even though /etc/group looks correct after invoking addgroup or usermod. I've tried both ... sudo ...
0
votes
2answers
138 views

Change/Create permissions for a folder

How can I create (if the folder is new) or change (if the folder was already existent) permissions for a folder? In particular, I want to create a subdirectory in /etc/bind/ where I can put the ...
0
votes
1answer
36 views

Configure ssh users under a group [closed]

I created a group called ssh_group and currently have nearly 20 users under AllowUsers in /etc/ssh/sshd_config. After I created the ssh_group, I modified the AllowGroups line like this AllowGroups ...
0
votes
1answer
32 views

Directory Permission Order [duplicate]

In Linux, let us assume we have a directory with the following properties: drwx---r-x 29 user1 group1 4096 Jun 22 14:11 dir1 can I, as user2 having group group1, navigate into dir1? Since ...