All about Unix groups and access control.

learn more… | top users | synonyms

3
votes
3answers
77 views

Can I forbid the creation of files with certain permissions?

I have a directory with a certain group ID, and I only want files with the same ID to be in that directory. So I set the SGID bit on that directory, so that everytime a file is created inside it, it ...
0
votes
3answers
467 views

How to add group to a user without removing other group in suse linux with usermod?

I have one user, which has one primary group & one secondary group, like: [ testuser Welcome ~ ]$ id uid=2000(testuser) gid=2000(testuser) groups=2000(testuser),27(sudo),2001(testgroup) ...
4
votes
2answers
179 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
1
vote
2answers
74 views

how to list users in a group and their passwords

How do I view a list of users in a specific group and their passwords or attributes? I know to use cut -d: -f1 /etc/passwd But this only lists users.
2
votes
1answer
51 views

Allow a specific user to sudo to users that are part of group X

I have several users, which are all part of group X. And I want to be able to give user Y to sudo to members of group X. Obviously I don't want to edit sudoers everytime I add a user to group X, is ...
1
vote
1answer
67 views

sort file based one colum and group by another column

I have a file of three columns: 1 A 0.5 2 B 0.7 3 A 10 4 C 4 5 B 4 I want to sort the file by increasing order of column 3 and group by column 2 1 A 0.5 3 A 10 ...
1
vote
1answer
18 views

How to only allow a group for network access?

Using OpenBSD's pf. Question: How can we modify the firewall of OpenBSD to allow ONLY a given group for network access? If somebody isn't in that group, it shouldn't have layer 3 or layer 2 network ...
1
vote
1answer
306 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
0
votes
1answer
43 views

What are the differences between sudo and the use of groups?

I know these are tools used for improving security. But what I would like to know is what they are and how they work?
0
votes
1answer
50 views

Trying to change GID on AIX server

I am trying to change GID on Unix server "AIX". I want to change mygroupname:!:79002: from group GID from 79002 to 79003. I have permission to use sudo /usr/bin/chgroup. I have tried everything, ...
0
votes
1answer
97 views

How do I set up proper ownership of these files?

I need the directory /var/www/ (and everything inside it) to be modifiable by only authorized users. The way I tried to do this was: sudo groupadd webmasters sudo usermod -G webmasters pi # My user ...
2
votes
0answers
257 views

Samba: system group mapping

I have w2008R2 PDC and Linux server with samba and winbind. Now I'd like to add some domain users to Unix adm group in AD. Let's say I have adm group defined in AD, and every user from this group ...
1
vote
0answers
19 views

give group permissions to specific device

I have a panning web camera I built, (future robot arm). The camera pans via a web interface (cgi scripts and JS interface) which access an arduino. To enable sending of commands via the interface, I ...
1
vote
0answers
35 views

How can I set a group policy to all access on all folders except one?

I am currently making a test environment where users will be going through a network administration course with different levels they must complete. Due to the nature of the course, we want to give ...
1
vote
0answers
23 views

Configuring group access across a LAN

I have created a group called engineers on two VMs on the same 192.168.56.0/24 LAN. Is there any way the members from VM1 in engineers can view files created by engineers from VM2? I was thinking of ...
1
vote
0answers
532 views

Tomcat unable to create file in dir owned by same group

I have a server running Tomcat, and I need Tomcat to create a file in a particular folder. Tomcat (technically a Java app) runs as the user 'tomcat', as evidenced by top: #top 1251 tomcat 20 0 ...
1
vote
0answers
84 views

Which command would you use if you want to remove the password assigned to a group

Suppose I have one or more groups (as in the user database as backed by /etc/group or LDAP or NIS+...) configured with a password (for the sg or newgrp commands). Which command would you use to ...
1
vote
0answers
288 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
1
vote
0answers
135 views

Udev rule- change group

I would like to change group of /dev/nvidia0. I was write udev rule: KERNEL="nvidia[0-9]", GROUP="video", MODE="0666" But it does't change group, after reboot file is in rootgroup. How do this?
0
votes
0answers
16 views

Implications creating System Accounts “useradd -r” Linux Fedora/RHEL/CentOS

I want to know what are the implications of create an account using -r option? # useradd -r ... The help says: -r, --system Create a system account. System users will be created with no aging ...
0
votes
0answers
17 views

groupadd failure: “Cannot open audit interface”

I'm trying to add a group in a chrooted environment: root@my-host:/# /usr/sbin/groupadd -g 101 games Cannot open audit interface - aborting. I'm operating with root permissions. Additional info: ...
0
votes
0answers
41 views

How to Sync UNIX Passwords SAMBA4.x?

My current server is running Debian 8 jessie with Samba 4. Its purpose will be to host a simple file sharing server for around 100 people on Windows machines. I already have a collection of UNIX users ...
0
votes
0answers
22 views

Force group permissions

I have a problem with my Ubuntu server. I want all files that are created in a directory to have rwx permissions for the group. I set the parent folder UID with the following command: chmod -R ...