Permissions are the unix way of controlling access to resources such as files, directories and devices and may be specified for an owner, group, or all users.

learn more… | top users | synonyms (1)

7
votes
0answers
167 views

Tracing executable without read permissions

I found some surprising behavior on Ubuntu 14.04 when using strace on an executable, which I do not have read permission on. I wonder if this is a bug, or if some standard mandates this obscure ...
6
votes
0answers
629 views

How do I let an SDL app (not running as root) use the console

I want to use an SDL-based program to display graphics on the console, without having to log on from the console, and without running the program as root. For example, I want to be able to run it via ...
4
votes
0answers
46 views

tor works when its in /usr/bin but not in /usr/sbin/

I have this very strange behaviour, I have two servers both running Ubuntu 14.04. I've installed tor on both. on machine A tor was installed (by default) in /usr/bin/ and works without any issues. on ...
3
votes
0answers
221 views

Permission problems. Can't retrieve inbox mails from dovecot

I got a VPS server at a webhoster which has CentOS 6.6 as operating system. Because I have multiple domains which are used by various people this server is going to serve multiple roles: nameserver ...
3
votes
0answers
43 views

Protecting my server from it's own users

Are there any tools to check my server's file system for permission vulnerabilities? My server is a low security web and email server running our local email and website. Anyone in my organization ...
3
votes
0answers
5k views

fatal: bad ownership or modes for chroot directory component “/”

I used to be able to connect via ssh with the user I have created but now I keep getting: "Write Failed: Broken Pipe" and I can only connect as root In the ssh auth.log I get the following: ...
3
votes
0answers
574 views

Network Manager doesn't show Wireless connection

I've just installed on my Debian Sid with XFCE4 network manager, but I have a problem, no wireless connection are shown. What Should I do? I used to use wicd but I had problems to connect to free ...
3
votes
0answers
3k views

Samba's “inherit permissions” does not inherit modes for other

I have a share with "inherit permissions = yes". I have a directory in the share with mode rwxrwsr-x. If I create a subdirectory, the modes are rwxrws---. The same happens with a parent directory with ...
2
votes
0answers
17 views

Cleanup old /dev/pts files?

My company has a policy that sweeps all files on our AIX servers to see if any are world writeable. They are upset because there are some files in /dev/pts (a few with me as owner) that are world ...
2
votes
0answers
39 views

Disable viewing/listing rights to users

I'm new to linux administration and I'm not sure how to search for this problem. When I create a new user, s/he can browse the filesystem. E.g. ll /. How can I restrict the user to a few select ...
2
votes
0answers
64 views

Maildir permissions for courier

I'm having difficulty with maildir permissions for Courier, an IMAP server I've installed on a box running Debian Wheezy. The mail directory I use is /var/mail/users, with the following permissions: ...
2
votes
0answers
185 views

Logrotate no longer reads symlinked configuration file due to non-root ownership

We are currently upgrading from Ubuntu 12.04 LTS to 14.04 LTS on our ruby on rails application servers, and have noticed that the log files are no longer rotating. On both machines we have a file ...
2
votes
0answers
94 views

Easiest way to sandbox an user

I'd like to sandbox a user so that they can only read files under /media/shared/somefolder. What's the easiest way to accomplish this? Users/groups? ACL? AppArmor? Some context: Plex Media Server is ...
2
votes
0answers
406 views

Java plugin not working with FireFox 24.3.0 on Red Hat Enterprise Linux 5.10

In the about:plugin tab, there is not Java plugin. I have created the symbolic link as suggested. The output of the 'ls -al' command is: lrwxrwxrwx 1 shehab shehab 58 Jun 4 11:21 libnpjp2.so -> ...
2
votes
0answers
475 views

Give domain users permissions on cifs shares?

I am using CentOS 6.5 - users authenticate using winbind, all are domain users except for root. /home is mapped to a cifs share on a windows server in /etc/fstab with this line: \\server\home$ /home ...
2
votes
0answers
1k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
106 views

NFS mount edits on local NFS-exported filesystem change permissions on the remote NFS mount

I believe there is a noperm or something to that effect option in NFS, but how do I make sure that if server A is exporting /opt/nfs and it is mounted as an NFS mount on server b /export/serverA that ...
2
votes
0answers
174 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
2
votes
0answers
4k views

Permission denied for user accessing mount

Using root I can mount another Linux share no problem. root@crunchbang:/mnt# mkdir javalib root@crunchbang:/mnt# mount -t cifs //10.1.3.7/javalib ./javalib -o username=guest Root can read/write to ...
2
votes
0answers
61 views

LXC: Have rootfs mounted without nosuid

I have the container's rootfs in a volume mounted with the nosuid option. When I start the container, its / mounted is then also mounted nosuid, which breaks programs such as sudo. How can I avoid ...
2
votes
0answers
2k views

Permission denied when Ubuntu is attempting to mount to a remote Windows share folder

Fellow guys, I encountered the error when I's mounting my Ubuntu server to a remote Windows share folder, the following is the error on terminal after I typed command line 'mount -a': mount ...
2
votes
0answers
126 views

Problem with encrypting /var/www and ikiwiki

I tried to encrypt /var/www with encfs. To do so I did following: mv /var/www /var/www.bak mkdir /var/www_enc encfs --public /var/www_enc /var/www cp -a /var/www.bak/* /var/www/ /etc/init.d/apache2 ...
2
votes
0answers
242 views

Samba: system group mapping

I have w2008R2 PDC and Linux server with samba and winbind. Now I'd like to add some domain users to Unix adm group in AD. Let's say I have adm group defined in AD, and every user from this group ...
2
votes
0answers
874 views

Owner & Group setting for OpenCart install on CentOS 6.3

I'm setting up a development server on a HP microserver with CentOS 6.3. I'm relatively new to Linux and have ran into some issues/confusion. I have the server fully setup/updated with yum. It's a ...
2
votes
0answers
573 views

proper permissions under HTTP root with Apache2 + FastCGI + Suexec

I currently have a setup which runs Apache2 + FastCGI PHP + Suexec. As an example, I'm using /mnt/data/www/vhosts/inflex.co.uk/htdocs as a DocRoot for one of my virtual hosts. I have a script ...
2
votes
0answers
850 views

Permissions for Apache and FTPd users

I'd like advice about permissions on directories and files on a web/ftp server. Here is my situation: Debian Server with those user:group userme:userme for SSH www-data:www-data for apache/php ...
1
vote
0answers
16 views

MySQL read only error but permissions set and SELinux AFAICT correct

I am new to MySQL and Linux and because I had issues with an old MySQL version (5.1) I used mysqldump and installed MySQL 5.6. I changed the datadir location by copying everything to the new folder ...
1
vote
0answers
12 views

Centos 7 FTP Hidden Directory Issue

After setting up Centos 7 with a web server standard install and LAMP stack. I installed vsftpd. Everything works fine and configured it to accept passive to enable gui ftp programs. However, when ...
1
vote
0answers
32 views

OS X: Apply inheritable ACL permissions to pre-existing subfolders and files

I have a folder with numerous ACL permissions set. Most of these include file_inherit and directory_inherit permissions and therefore should be, and are, automatically propagated to any new ...
1
vote
0answers
30 views

In the Linux Kernel what file/process controls the assignment of permissions to memory pages?

A given memory page may be writable, readable or executable. What kernal source code file in the linux kernal describes the setting of these rights? What process or kernal data structure would set the ...
1
vote
0answers
94 views

Execute a .exe on a samba share

I have a linux machine and a windows machine, the linux machine has a samba share with a .exe file on it. I can read and write files from the windows machine to the samba share, but I cannot execute ...
1
vote
0answers
33 views

files & directories are not share on remote server with 777 permission using sshfs

I am successfully mount the remote directories on my local directories, I have to created folder and files with 777 permission so others can able to access this files so that's why I used umask=000 ...
1
vote
0answers
23 views

Dealing with git permission errors on root mounted partition

I am trying to clone a git repository from my home directory to a cifs partition, but I keep getting this file permission error. [cguest@devserver groupmount]$ pwd /mnt/groupmount [cguest@devserver ...
1
vote
0answers
16 views

How do I move a vmware guest machine to another user?

I have 2 users in my computer running Arch Linux. I recently moved a virtual installation of windows 7 from one user to another. I changed the owner of the moved folder to the new user recursively. I ...
1
vote
0answers
74 views

Linux Executable with Unknown type asking to be executable every time I run it in Nemo

When I try to open an executable with the type Unknown I get a message saying: "The file 'file name' has no known programs associated with it. If you trust the source of this file, and have ...
1
vote
0answers
47 views

Linux: how to run a program with rw access to only a folder

How can I execute a program in a way that all the system is RO and only some folders are RW? Eg: steam (:P) roexec --rw ~/.steam steam Is there any tool that allows me to do this? I've tried mount ...
1
vote
0answers
68 views

ssh not using ~/.ssh/config, even after I play around with permissions

I tried modifying my ~/.ssh/config file to allow automatic fast X forwarding as per this site http://xmodulo.com/how-to-speed-up-x11-forwarding-in-ssh.html I then tried logging into a server and ...
1
vote
0answers
54 views

Is file creation atomic?

I have a problem to solve: I just can make one CURL operation each second, but this operation can send up to 40 parameters. Those parameters are Id's. I have one web site that may sometimes ask for ...
1
vote
0answers
17 views

give group permissions to specific device

I have a panning web camera I built, (future robot arm). The camera pans via a web interface (cgi scripts and JS interface) which access an arduino. To enable sending of commands via the interface, I ...
1
vote
0answers
30 views

How can I set a group policy to all access on all folders except one?

I am currently making a test environment where users will be going through a network administration course with different levels they must complete. Due to the nature of the course, we want to give ...
1
vote
0answers
89 views

How to gain ownership of external HDD (and all files/folders) mounted to /mnt

I've plugged in a USB Hard Drive to my new Debian Jessie machine. I've got it to auto-mount by updating /etc/fstab: UUID=21AE-9B96 /mnt/local/ext001 vfat defaults 0 2 ...but it's owner is root and ...
1
vote
0answers
377 views

Tomcat unable to create file in dir owned by same group

I have a server running Tomcat, and I need Tomcat to create a file in a particular folder. Tomcat (technically a Java app) runs as the user 'tomcat', as evidenced by top: #top 1251 tomcat 20 0 ...
1
vote
0answers
55 views

id mapping of NFS does not work for all directories

I have an NFS server/client setup. On both server and client, the user me exists and has the same UID. If I mount the /home directory from the NFS server on the client, I see that nobody owns the ...
1
vote
0answers
48 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say i just need to give all permissions to all users belonging to the group "workgroup" to ...
1
vote
0answers
82 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
1
vote
0answers
22 views

After restoring a backup my permissions seem to be borked

I made a complete backup of the system with "rsync -aAXv", and set up my encryption. After restoring everything, and booting up and trying to login, openbox didn't want to start, and "startx" didn't ...
1
vote
0answers
284 views

Permission denied when running logrotate with anacron

I am trying to figure out what is causing anacron to send me the following error message: /etc/cron.daily/logrotate: /var/log/mariadb/mariadb.log-20140710.gz: Permission denied error: error running ...
1
vote
0answers
75 views

Limit program execution to a list of arguments

I would like that my Unix users can only run a specific command insecurecommand with a controlled list of arguments stored in a file. The only solution I have found at this time is to : Create a ...
1
vote
0answers
37 views

Traffic Control user permission

My users need to emulate packet loss on RTP video streams to achieve visual effects. We are in a artistic environment and don't worry about security. The application works only as super user. I ...
1
vote
0answers
821 views

checking sendmail status as NON root user

I am in the process of converting to CentOS 6.5 from 5.5 and need a way to check if sendmail is on or not. For reasons I don't want to go through, I need to be able to check if sendmail is ON as a ...