All about Unix groups and access control.

learn more… | top users | synonyms

3
votes
3answers
78 views

Can I forbid the creation of files with certain permissions?

I have a directory with a certain group ID, and I only want files with the same ID to be in that directory. So I set the SGID bit on that directory, so that everytime a file is created inside it, it ...
4
votes
2answers
187 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
1
vote
2answers
93 views

how to list users in a group and their passwords

How do I view a list of users in a specific group and their passwords or attributes? I know to use cut -d: -f1 /etc/passwd But this only lists users.
2
votes
1answer
52 views

Allow a specific user to sudo to users that are part of group X

I have several users, which are all part of group X. And I want to be able to give user Y to sudo to members of group X. Obviously I don't want to edit sudoers everytime I add a user to group X, is ...
2
votes
1answer
140 views

Udev rule- change group

I would like to change group of /dev/nvidia0. I was write udev rule: KERNEL="nvidia[0-9]", GROUP="video", MODE="0666" But it does't change group, after reboot file is in rootgroup. How do this?
1
vote
1answer
107 views

sort file based one colum and group by another column

I have a file of three columns: 1 A 0.5 2 B 0.7 3 A 10 4 C 4 5 B 4 I want to sort the file by increasing order of column 3 and group by column 2 1 A 0.5 3 A 10 ...
1
vote
1answer
18 views

How to only allow a group for network access?

Using OpenBSD's pf. Question: How can we modify the firewall of OpenBSD to allow ONLY a given group for network access? If somebody isn't in that group, it shouldn't have layer 3 or layer 2 network ...
1
vote
1answer
325 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
0
votes
1answer
44 views

What are the differences between sudo and the use of groups?

I know these are tools used for improving security. But what I would like to know is what they are and how they work?
0
votes
1answer
55 views

Trying to change GID on AIX server

I am trying to change GID on Unix server "AIX". I want to change mygroupname:!:79002: from group GID from 79002 to 79003. I have permission to use sudo /usr/bin/chgroup. I have tried everything, ...
0
votes
1answer
109 views

How do I set up proper ownership of these files?

I need the directory /var/www/ (and everything inside it) to be modifiable by only authorized users. The way I tried to do this was: sudo groupadd webmasters sudo usermod -G webmasters pi # My user ...
2
votes
0answers
646 views

Tomcat unable to create file in dir owned by same group

I have a server running Tomcat, and I need Tomcat to create a file in a particular folder. Tomcat (technically a Java app) runs as the user 'tomcat', as evidenced by top: #top 1251 tomcat 20 0 ...
2
votes
0answers
264 views

Samba: system group mapping

I have w2008R2 PDC and Linux server with samba and winbind. Now I'd like to add some domain users to Unix adm group in AD. Let's say I have adm group defined in AD, and every user from this group ...
1
vote
0answers
96 views

Give a user permission to one folder

I have made so my group "sftponly" can access the users home folder. But right now the user in the group don't have permission to other folders, but they have permission to see them. How can I do so ...
1
vote
0answers
43 views

groupadd failure: “Cannot open audit interface”

I'm trying to add a group in a chrooted environment: root@my-host:/# /usr/sbin/groupadd -g 101 games Cannot open audit interface - aborting. I'm operating with root permissions. Additional info: ...
1
vote
0answers
37 views

How can I set a group policy to all access on all folders except one?

I am currently making a test environment where users will be going through a network administration course with different levels they must complete. Due to the nature of the course, we want to give ...
1
vote
0answers
23 views

Configuring group access across a LAN

I have created a group called engineers on two VMs on the same 192.168.56.0/24 LAN. Is there any way the members from VM1 in engineers can view files created by engineers from VM2? I was thinking of ...
1
vote
0answers
93 views

Which command would you use if you want to remove the password assigned to a group

Suppose I have one or more groups (as in the user database as backed by /etc/group or LDAP or NIS+...) configured with a password (for the sg or newgrp commands). Which command would you use to ...
1
vote
0answers
322 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
0
votes
0answers
62 views

Implications creating System Accounts “useradd -r” Linux Fedora/RHEL/CentOS

I want to know what are the implications of create an account using -r option? # useradd -r ... The help says: -r, --system Create a system account. System users will be created with no aging ...
0
votes
0answers
94 views

How to Sync UNIX Passwords SAMBA4.x?

My current server is running Debian 8 jessie with Samba 4. Its purpose will be to host a simple file sharing server for around 100 people on Windows machines. I already have a collection of UNIX users ...
0
votes
0answers
30 views

Force group permissions

I have a problem with my Ubuntu server. I want all files that are created in a directory to have rwx permissions for the group. I set the parent folder UID with the following command: chmod -R ...