Questions tagged [access-control]

The tag has no usage guidance, but it has a tag wiki.

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

Categorizing Debian Linux VPS

I like to Categorize or Divide one Debian VPS for different Tasks and Testing. For Example two Apache Web Servers with no any connection between both. Something like installing apache2 web server only ...
user avatar
0 votes
2 answers
40 views

Applications of fakeroot and chroot

Why are there two utilities chroot and fakeroot when both can fake a privileged access to the user?
user avatar
  • 137
1 vote
1 answer
88 views

How do you make a non-root user use openconnect?

Openconnect website does have a chapter called "Running as a non-root user". However, if you read it more closely, you will see that it does not answer the question of how to run openconnect ...
user avatar
  • 209
0 votes
0 answers
19 views

SFTP jailed user access limited to an Apache webserver directory

I would like to create an SFTP jail for a user, jailed to an Apache webserver directory. User should access only /var/www/html/sftpaccess/ directory. Currently the /var/www/html/sftpaccess/ ...
user avatar
  • 394
0 votes
0 answers
26 views

How can I allow multiple users or groups the w+x access to a certain directory? [duplicate]

I'm aware of how to change the owner or group of a directory. However, I want to know that how I can allow multiple groups or users to have w+x access to a certain directory without chaning the actual ...
user avatar
  • 1
8 votes
3 answers
707 views

Is there a tool that could allow the users of our scientific computer to book it exclusively?

We have one beefy ubuntu rig for our research department that can do heavy lifting with its CPUs and GPUs. All of our researchers SSH into the machine and run (machine learning) workloads on the ...
user avatar
0 votes
1 answer
44 views

User directory permissions

I'm trying to make it so that different users have different permissions for certain directories. For example user Bob has access to read, write, and execute the directory of /configuration, but Alice ...
user avatar
  • 1
1 vote
2 answers
55 views

Sudo Help - normal user should not change root password as sudo

I am adding sudo rules for L0 team wherein they will be able to change password for OS users. BUT i dont want the L0 team to change root password using sudo How to do it PS - !/usr/bin/passwd root - ...
user avatar
0 votes
1 answer
83 views

Restrict linux process write permission to one folder

I want a process (and all its potential children) to be able to read the filesystem according to my user profile but I want to restrict that process's write permission to only a set of pre-selected ...
user avatar
1 vote
1 answer
11 views

How to schedule a period of time in which power-on or log-in is prevented?

So you may get a better idea of the context, this idea comes from the specific problematic of "letting kids being progressively responsible of their own devices". So I was wondering if there ...
user avatar
  • 23
0 votes
0 answers
34 views

Why am i able to access a folder which technically shouldn't allow me in?

I found a folder whose ls -ld output goes like this drwxr-x--- 14 root somegroup 12K Jan 13 20:10 somefolder I dont belong to the group somegroup as found from the groups command. Rules say that i ...
user avatar
0 votes
2 answers
113 views

Can ssh-copy-id respect my ssh config?

I store all my keys outside of .ssh and configured which key to use for which server in my .ssh/config. How can I make ssh-copy-id respect that?
user avatar
  • 403
1 vote
1 answer
59 views

AIX ACLs difference "permit" versus "specify"

What's the difference in AIX ACLs with permit versus specify: This is what the documentation says: "The permit, deny, and specify keywords are defined as follows: permit Grants the user or ...
user avatar
  • 25
1 vote
1 answer
16 views

Is it possible to whitelist-limit programs from accessing audio input?

I guess I'm paranoid enough that I will install something bad, but not paranoid enough to think that I'll give that bad program privileges... I want to allow microphone access only to the programs I ...
user avatar
0 votes
0 answers
28 views

Use selinux for path based access

Consider the following scenario. I've a ro file system mounted at /system and I can't remount it rw at all. There is a file /system/bin/xyz with context u:r:bin_t. Naturally I cannot change the ...
user avatar
0 votes
1 answer
25 views

Authorize and Unauthorize by adding and remove user to a group

I want to authorize (or unauthorise) by adding (or removing) user to a group. Is it possible to have the changes be effective immediately without having to reboot? I just want to give one time access ...
user avatar
  • 1,354
0 votes
1 answer
62 views

Why is changing password on user account is taking time?

I have created a few accounts on my Linux Mint installation. A few of them have admin privileges. About 30 min ago I changed the password on one of the admin accounts using the Users Settings GUI. But ...
user avatar
0 votes
0 answers
65 views

Restrict access to a directory to just one process and its children

I want to mount a remote directory via sshfs to the local machine in order to use a code editor (Visual Studio Code) to locally edit files on the remote location. Is there a way to limit access to ...
user avatar
  • 571
0 votes
0 answers
18 views

Can there be multiple hosts in one computer in linux? [duplicate]

When I was reading an article about visudo command to edit sudoers file , I saw thi root ALL=(ALL:ALL) ALL , it indicates all hosts can run the commands . What does it mean ? Can there be multiple ...
user avatar
1 vote
0 answers
31 views

Restrict root to su local accounts

I know that root can modify any config file. As a best practice, I would like to disable the capacity for root to su on accounts which authenticates against NIS or Active Directory. As a best practice,...
user avatar
  • 111
0 votes
1 answer
735 views

Restrict user to switch to root user but have all commands to execute

I want to provide a user to execute all command what a root user can do except from switching to root user. SO I added as below in sudoers file in centos7/redhat7 guest ALL=(ALL:ALL) NOPASSWD: ALL,!/...
user avatar
  • 213
1 vote
1 answer
206 views

Is there a way to disable all write access for a specific user in a directory?

I recently learned about ACL and setfacl for setting per-user access rights. But there is one thing that I cannot figure out how to pull off, and that is restricting all write(*) access for a specific ...
user avatar
  • 11
0 votes
1 answer
222 views

How to restrict the access/activation times for a service/socket with systemd?

I have a simple systemd service that is activated by system socket. It's as simple as that (a little simplified): $ systemctl cat example.socket # /usr/lib/systemd/system/example.socket [Unit] ...
user avatar
  • 2,206
0 votes
2 answers
92 views

Can't access files I own

I have created a folder /root/bin where I inteded to store my custom scripts. The idea is that these scripts shall be accessible to any user, so I added users to "users" group. I gave this ...
user avatar
  • 1
1 vote
0 answers
29 views

Counting directories based on access

I need to get the number of directories that Can only be read and opened by the owner of the directory. Can only be opened by their group. My current solution is this: ls -la . | grep "^dr-x--x-...
user avatar
  • 29
1 vote
1 answer
296 views

Can you access bluetooth or Audio devices over XRDP

I have setup XRDP on a ubuntu computer that I wanted to access remotely. There are Bluetooth and audio devices attached to that remote device that I would like to access. Using XRDP, it shows that ...
user avatar
0 votes
0 answers
26 views

Is there any free system for testing fs security implementation?

I'm writing my own Fuse filesystem and I'm in need of good testing, in particular the access control implementation investigation, as I've already found test suites for I/O. There will be other things ...
user avatar
0 votes
0 answers
90 views

SSH Restrict User Access

When I ssh into the machine as webmaster I ssh into the correct chroot directory var/www/domainname/public_html but I can still access the entire filesystem. I have changed the home ssh directory of ...
user avatar
1 vote
1 answer
53 views

Linux Security Modules - SELinux/AppArmor

can someone explain to me why SELinux is officially broken under Ubuntu while AppArmor works fine? AppArmor is build on the "Linux Security Modules" framework and so is SELinux. As a result, ...
user avatar
  • 11
2 votes
0 answers
329 views

Failed to mount "Volume" The given volume was not found

I have been experiencing the following problem since a long time now: So, When I start my computer and I get my Xubuntu op system Desktop, I always get an usb icon to be shown up on my Desktop. When ...
user avatar
  • 21
0 votes
1 answer
26 views

user permission reporting based on extracted sudoers group & passwd files [duplicate]

Did anyone come up with an answer to this question (permission reporting on sudoers)?
user avatar
0 votes
0 answers
32 views

Dynamic file access control

I have a shared folder that different program use. I would like to be able for "file events" in this folder, like file creation, access for read or write. The idea is to hang the open of the ...
user avatar
  • 159
0 votes
1 answer
212 views

Listing the content of the SFTP working directory

I am trying to create SFTP Account and I have the following configuration in /etc/ssh/sshd_config Match group sftpgroup ChrootDirectory /sftp/ X11Forwarding no AllowTcpForwarding no ForceCommand ...
user avatar
-3 votes
1 answer
243 views

How to get password for Linux [closed]

Good day I think my friend is running li**nux on my home PC and Android Samsung S7 phone. Is it possible? How can I check if its running? Can I get access to the account on the PC or Phone ...
user avatar
1 vote
1 answer
482 views

SSH - restrict access to only one directory

I want to have a user to be able to login with ssh, but only be able to read files from a specific directory. I did some research. Is it true that this is only possible with chroot and home ...
user avatar
1 vote
0 answers
2k views

Samsung SMT-G7401 hack

Samsung SMT-G7401 hack introduction I have an SMT-G7401_PCS01B (Horizon box) from UPC Switzerland and I would like to install debian or multimedia linux distribution on it if is it possible, if is ...
user avatar
  • 11
0 votes
1 answer
138 views

Accessing system utilities from docker

I'm building a docker container that should show information on the system status on a webpage. I have an PHP-fpm and NGINX container running. If I use shell_exec or exec the .sh script I made is ...
user avatar
  • 115
0 votes
2 answers
55 views

Setting up a git server with ssh access

I want to set up a server that hosts git repositories over ssh and https with client certificates. I don't want any snazzy GUI or anything like that (i.e. not Bitbucket, GitLab, etc) I want a bare ...
user avatar
0 votes
0 answers
21 views

Access control at process level

I'm sorry if this was asked but I was unable to find a satisfcatory answer. I know how access control works with respect to objects (files, devices, etc.), but it's not clear to me how this translate ...
user avatar
1 vote
1 answer
76 views

Is it good or bad to use group in sudoers file instead of using user_aliases?

I have used user groups heavily while designing access control policies. I find user groups very convenient as it's very easy to implement with PAM. Another reason I have organized the users with ...
user avatar
  • 1,279
1 vote
1 answer
303 views

In sudoers does (ALL)=All refer to users or privileges? User Privilege Managment

Considering how getting this wrong is extremely dangerous, I feel it deserves an explicit answer. There are many other answers concerning the use of ALL in sudoers, but they do not directly answer ...
user avatar
  • 119
1 vote
0 answers
183 views

Files reappearing instantly after deleting

Initially, I had the issue of Cannot remove fileX Read-only filesystem and referred this thread which removed that problem but raised other, rather peculiar, problem; when I deleted the files from the ...
user avatar
  • 301
1 vote
1 answer
433 views

Opening a file *with partially unknown filename* in executable directory

I have a directory in linux which I can eXecute. Thus, I should be allowed to cd into the directory and open the file(s). I know that the file I am interested in starts with f and has a number ...
user avatar
3 votes
0 answers
309 views

AWS - Stack creation - How to assign an inline policy to adhoc user?

Background: With cross account role someaccountrole, I have access to aws account xyz. Case 1 To create a stack in account xyz, we upload the Cloudformation file through console. Amidst stack ...
user avatar
  • 1,286
3 votes
0 answers
438 views

Uptime requires sudo password

I was wondering if anyone could give me some info on why does uptime keeps requiring sudo password? Indeed uptime runs without any sudo access from my trminal. $ id -u; uptime 1000 17:39:48 up 2:27,...
user avatar
  • 135
1 vote
0 answers
34 views

Logon access control by group - naming conventions?

I want to implement a policy where (ldap) users are only allowed to logon to a host based on their group membership. The pam_listfile module seems to be the most sensible way to achieve this (does ...
user avatar
  • 4,295
1 vote
1 answer
2k views

NT_STATUS_ACCESS_DENIED listing \* when moving home directories to another location

I have a server and just finished building my raids. One of the partitions is supposed to house my home folders which I then want to share with my windows computers through samba. Before I begin ...
user avatar
0 votes
1 answer
6k views

su: cannot open session: Permission denied

I'm getting "access denied" attempting to login as root on the console and via ssh (Yes, I know root ssh access should be disabled - I've just inherited this box). I can login as non-root user who has ...
user avatar
  • 4,295
0 votes
0 answers
175 views

Restricting user access to command with specific flags

Is there a way to restrict a user's access so that they can still execute a command, but only with a particular flag? For example, if I want to allow users to be able to read all files, they should ...
user avatar
15 votes
2 answers
26k views

Restarting systemd service only as a specific user?

I created some systemd services which basically works: location: /etc/systemd/system/multi-user.target.wants/publicapi.service content: [Unit] Description=public api startup script [Service] ...
user avatar
  • 621