All about Unix groups and access control.

learn more… | top users | synonyms

3
votes
3answers
79 views

Can I forbid the creation of files with certain permissions?

I have a directory with a certain group ID, and I only want files with the same ID to be in that directory. So I set the SGID bit on that directory, so that everytime a file is created inside it, it ...
4
votes
2answers
211 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
1
vote
2answers
54 views

How can I create a sub-directory where my group has no write permissions?

I am working in my Tomcat deployment directory. The files in the directory have the permission: drwxrwsr-x. 10 tomcat www 4.0K Mar 15 15:14 webapps A sample sub-directory within webapps looks ...
1
vote
2answers
200 views

how to list users in a group and their passwords

How do I view a list of users in a specific group and their passwords or attributes? I know to use cut -d: -f1 /etc/passwd But this only lists users.
0
votes
2answers
26 views

How to make a folder that set to a specific group and permission automatically

How can i make a folder in linux which will be automatically set to the specific group and the permission is set to 770. for example I will create a folder name test. when i type ls -l the output ...
5
votes
1answer
635 views

Implications creating System Accounts “useradd -r” Linux Fedora/RHEL/CentOS

I want to know what are the implications of create an account using -r option? # useradd -r ... The help says: -r, --system Create a system account. System users will be created with no aging ...
2
votes
1answer
59 views

Allow a specific user to sudo to users that are part of group X

I have several users, which are all part of group X. And I want to be able to give user Y to sudo to members of group X. Obviously I don't want to edit sudoers everytime I add a user to group X, is ...
2
votes
1answer
162 views

Udev rule- change group

I would like to change group of /dev/nvidia0. I was write udev rule: KERNEL="nvidia[0-9]", GROUP="video", MODE="0666" But it does't change group, after reboot file is in rootgroup. How do this?
1
vote
1answer
115 views

share encfs folder within the same group

given an encfs folder mounted under its own user, is it possible to permit read access to someone else (especially a system user), who belongs to the same group? For example user1 owns ...
1
vote
1answer
290 views

sort file based one colum and group by another column

I have a file of three columns: 1 A 0.5 2 B 0.7 3 A 10 4 C 4 5 B 4 I want to sort the file by increasing order of column 3 and group by column 2 1 A 0.5 3 A 10 ...
1
vote
1answer
23 views

How to only allow a group for network access?

Using OpenBSD's pf. Question: How can we modify the firewall of OpenBSD to allow ONLY a given group for network access? If somebody isn't in that group, it shouldn't have layer 3 or layer 2 network ...
1
vote
1answer
420 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
0
votes
1answer
60 views

How can I add all my groups to a different user in bash?

I've got a user named foo. I'd like foo to have all the same group memberships that I do. I thought I was close, with this: sudo usermod -a -G $(id -Gn | tr " " ",") node4 The id piped to tr is ...
0
votes
1answer
46 views

What are the differences between sudo and the use of groups?

I know these are tools used for improving security. But what I would like to know is what they are and how they work?
0
votes
1answer
65 views

Trying to change GID on AIX server

I am trying to change GID on Unix server "AIX". I want to change mygroupname:!:79002: from group GID from 79002 to 79003. I have permission to use sudo /usr/bin/chgroup. I have tried everything, ...
0
votes
1answer
180 views

How do I set up proper ownership of these files?

I need the directory /var/www/ (and everything inside it) to be modifiable by only authorized users. The way I tried to do this was: sudo groupadd webmasters sudo usermod -G webmasters pi # My user ...
2
votes
0answers
124 views

Give a user permission to one folder

I have set up my machine so that my group "sftponly" can access the users home folder. But right now, the users in the group don't have permission to other folders, but they have permission to see ...
2
votes
0answers
1k views

Tomcat unable to create file in dir owned by same group

I have a server running Tomcat, and I need Tomcat to create a file in a particular folder. Tomcat (technically a Java app) runs as the user 'tomcat', as evidenced by top: #top 1251 tomcat 20 0 ...
2
votes
0answers
372 views

Samba: system group mapping

I have w2008R2 PDC and Linux server with samba and winbind. Now I'd like to add some domain users to Unix adm group in AD. Let's say I have adm group defined in AD, and every user from this group ...
1
vote
0answers
33 views

What command should I use to explicitly set list of groups and execute a command?

To execute a command as other uid, one uses su. The list of supplementary groups is not specified on command line, but instead read from configuration files (/etc/passwd, /etc/group), etc. Which tool ...
1
vote
0answers
146 views

groupadd failure: “Cannot open audit interface”

I'm trying to add a group in a chrooted environment: root@my-host:/# /usr/sbin/groupadd -g 101 games Cannot open audit interface - aborting. I'm operating with root permissions. Additional info: ...
1
vote
0answers
44 views

How can I set a group policy to all access on all folders except one?

I am currently making a test environment where users will be going through a network administration course with different levels they must complete. Due to the nature of the course, we want to give ...
1
vote
0answers
28 views

Configuring group access across a LAN

I have created a group called engineers on two VMs on the same 192.168.56.0/24 LAN. Is there any way the members from VM1 in engineers can view files created by engineers from VM2? I was thinking of ...
1
vote
0answers
134 views

Which command would you use if you want to remove the password assigned to a group

Suppose I have one or more groups (as in the user database as backed by /etc/group or LDAP or NIS+...) configured with a password (for the sg or newgrp commands). Which command would you use to ...
1
vote
0answers
462 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
0
votes
0answers
35 views

How to set correct user group rights to application running with java?

How to set correct user group rights to application using java? There is this scenario: 1) I have created user group and user (the same) - call it "groupgroup" 2) When I create a file with this ...
0
votes
0answers
238 views

How to Sync UNIX Passwords SAMBA4.x?

My current server is running Debian 8 jessie with Samba 4. Its purpose will be to host a simple file sharing server for around 100 people on Windows machines. I already have a collection of UNIX users ...