Questions tagged [permissions]
Permissions are the Unix way of controlling access to resources such as files, directories and devices and may be specified for an owner, group, or all users.
4,391
questions
0
votes
0
answers
6
views
How to modify/extend USB device access permissions in Debian?
I have a PC with Debian 10. I need the USB drives to have broader permissions than those given by default by the system.
I will give an example: with the user "john" being authenticated, ...
- 11
1
vote
0
answers
23
views
Can't access file even though I am the user, I have permissions, I have chowned/chmod'd the entire directory structure, selinux off
Sorry for the copy/paste, doing this over a remote screen share:
I am on Rocky Linux and I am at a total loss as to what is going on here. I can't cat/vim this file but as you can see, I am the owner,...
- 517
0
votes
0
answers
25
views
User suddenly changed to nobody, and is restored when changing permission to a file
I was learning about git internals, doing basic commands, when suddenly I encountered this error: fatal: detected dubious ownership in repository at... I then noticed that the user is nobody. I have ...
- 1
0
votes
1
answer
27
views
How do I mount attached drive /home or something similar on VPS
I obtained a vps and they attached a 16TB HDD...
They gave me a guide to mount the HDD to folder /hdd.
My issue is that the program I am installing on a sudo user has a lot of small apps that get ...
- 1
1
vote
0
answers
26
views
Why does setreuid have this limitation on setting ruid to current value of suid?
According to the docs for setreuid:
Unprivileged processes may only set the effective user ID to the real user ID, the effective user ID, or the saved set-user-ID.
Unprivileged users may only set ...
- 195
0
votes
0
answers
8
views
How to turn on developer mode on chromeOS
I'm trying to enable developer mode on chromeOS. I know the esc+refresh+power then do crtl+d but when I do that my Chromebook says "Chromebook last booted in developer mode etc." then logs ...
0
votes
0
answers
40
views
SSH Keys Not Recognized?
I have two Debian (11 and 12) systems. I'm trying to verify ssh access from server A to server B via keys, following this video https://www.youtube.com/watch?v=vINn1MIrf7o. I try to use the keys, ...
- 1
-1
votes
1
answer
58
views
creating hard links Linux question [duplicate]
From the book The Linux Command Line by William Shotts, page 33:
So now we have four instances of the file fun. Let's take a look at
our playground directory.
[me@linuxbox playground]$ ls -1
total 16
...
0
votes
1
answer
19
views
Restricting client-side SSH configurations
We allow a small group of student users to connect to our servers using ssh with local forwarding in order to access data science / programming resources such as Jupyter, rstudio, etc.
Recently I have ...
- 101
0
votes
0
answers
33
views
SETUID not executing the script as owner when executed via PHP script
I have a sh file (with setuid) that I want specific web users to be able to execute from an endpoint:
-rwsr-xr-x 1 root root 59 Sep 11 09:47 restart-workers.sh
The content of this file is ...
- 101
0
votes
0
answers
19
views
I created new group and added users into the group but the users are not able to create any file or directory
[![those are the users][1]][1]
the error was showing like permission denied
[1]: https://i.stack.imgur.com/UgVBS.png
- 1
0
votes
0
answers
54
views
vsftpd FTP server on Linux
I just installed this FTP server and it works fine. I noticed that the FTP user can read an write their own directory but they can read and download other files also (owned by other users or by system)...
- 121
1
vote
1
answer
28
views
Is there a standard way of making a copy of file/folder permissions to apply/compare later?
I'm copying a bunch of files to a filesystem that doesn't support permissions. however, I will need to copy them to another filesystem which does support permissions a few years from now. at that ...
- 2,278
0
votes
0
answers
9
views
Use wildcards in makedev devite table
I'm reading the documentation about makedev syntax in order to set the permissions of some files in my Buildroot environment. For example I need to set the Network Manager connection files to 600, etc....
- 713
2
votes
3
answers
148
views
specify different --mode values using GNU tar
I am trying to use GNU tar to create a tarball from a directory stored on a network drive. This network drive defaults the mode of everything stored on it to 0700 (-rwx------) and cannot be changed ...
- 301
0
votes
0
answers
39
views
Is there an equivalent to /etc/permissions with support for ACL?
I need to define a list of rights with standard UNIX and some with ACL rights.
Is there a way to do check that with a config file like /etc/permissions does for UNIX rights?
It is a file that is ...
0
votes
0
answers
37
views
Same binary & different permissions, How can it be?
I was doing a pwn ctf and found a weird situation.
The ctf includes binary file and a server.
There is a given elf 64 bit.
checksec output (same local & server).
Arch: amd64-64-little
RELRO: ...
- 1
1
vote
2
answers
62
views
Proper way to give permissions to a program
At work there is a "system" (python) agent that needs to perform actions with higher level privileges (adding ip route, setup wifi profile, reading from serial devices), but also be able to ...
- 11
2
votes
1
answer
284
views
When you alter permissions of files in /etc/cron.d in Ubuntu, do they persist across updates?
It seems like an no brainer question, but i did not manage to any real information. In my Ubuntu server i have created a custom /etc/cron.d config file, e.g. /etc/cron.d/MyCronTab, the reason I put ...
- 23
4
votes
1
answer
189
views
ln will not create symlinks to nonexistent targets / target without permission
First of all please note that I'm on a shared server and I don't have root access, so anything involving su or sudo would not be possible.
AFAIK ln and Linux should not even bother checking whether ...
- 141
0
votes
0
answers
27
views
AutoFs with specific user´s permissions
I have autofs working properly. I can mount a Windows share on Linux server without problems.
But there is one issue: I don't want that mounted share to be public to all Linux users, just for a small ...
0
votes
1
answer
24
views
Unable to connect to remote VM after: sudo chown [duplicate]
I'm using a VM hosted on G Cloud and a few weeks ago I executed a sudo chown command
like: sudo chown -R Username / (not sure on how exactly the command was) to get full access on my VS Studio IDE.
...
- 9
0
votes
1
answer
56
views
How to make xrandr work without sudo?
I toggle my resolution with:
sudo xrandr --output eDP-1-1 --mode "3840x2400"
How do I make xrandr not require sudo? So e.g. I can do:
xrandr --output eDP-1-1 --mode "3840x2400"
I ...
- 219
0
votes
0
answers
58
views
Misunderstanding about linux permisions, groups
Recently i have desided to create autobackups from my host to a little backup server by using ssh + rsync.
I have created separate user for this task "backuppc", have created "shared ...
- 13
0
votes
0
answers
21
views
Unable to open a file for writing which has write permisions [duplicate]
There is a regular file file in the /tmp directory with write permissions -rw--w--w- 1 user1 user1 /tmp/file
When I try to open this file as a user (I run the code after su user2) who is not the owner ...
- 247
0
votes
1
answer
44
views
Do ACLs always override default chmod permissions? [duplicate]
What if I have a file on a Linux machine with user permissions of rw but assigned that user rwx permissions via ACL?
Will the ACL override that default user permissions and allow execute access?
nick@...
1
vote
0
answers
16
views
Effects of dropping "AUDIT_WRITE", "KILL", "SETFCAP" and "SETPCAP" capabilities while running docker
I'm exploring Docker container capabilities and permissions and I'm curious about the implications of dropping the "AUDIT_WRITE", "KILL", "SETFCAP" and "SETPCAP"...
4
votes
0
answers
70
views
Cygwin inheritance of Windows's security for cross-account file creation/modificaton?
On a Windows 10 laptop, I have an administrator account Admin, a
non-administrator account User.Name, and the default Public
account.
From either Admin or User.Name accounts, files created in the ~/
...
- 379
0
votes
0
answers
92
views
Permission denied (publickey,gssapi-keyex,gssapi-with-mic) - Hetzner VPS (macOS)
(macOS) I set up a VPS at Hetzner (ubuntu 20.04), generated a ssh keys using ssh-keygen -t rsa. I added the public key to the ssh section. I then tried to connect ssh -i ~/.ssh/id_rsa x.x.x.x, but i ...
- 1
0
votes
3
answers
84
views
Gain access to selective subdirectories inside main directory
I am looking for a way to gain access to only certain subdirectories inside the main directory in z/OS UNIX. Is there any way to accomplish this? Currently the main directory permissions are set to ...
0
votes
1
answer
43
views
File Permission problems with a Linux VM - unable to read file
I have built a Rocky Linux (9.1) Virtual machine, and I am having permission problems with some of the files. Note also (after looking at the linked 'similar questions'), this is a local mount, not ...
- 101
0
votes
0
answers
29
views
Can't access files in ZFS rpool /root directory in live recovery environment, but can access others outside /root
my Ubuntu installation fails to boot. Things hang after entering the encryption key with message WARNING: Pool 'rpool' has encountered an uncorrectable I/O failure and has been suspended. When I boot ...
- 1
0
votes
0
answers
133
views
`chown` not working, even using sudo
I am getting this error from git:
fatal: detected dubious ownership in repository at '/run/media/marcel/Хранилище/Dev/Desktop/SimpleAccent'
To add an exception for this directory, call:
git ...
- 11
3
votes
1
answer
103
views
`sudo --preserve-env=MY_VAR` vs `sudo env MY_VAR=$MY_VAR`
I read in man sudo the following:
--preserve-env
Indicates to the security policy that the user wishes to preserve their existing environment variables. The security policy may return an error if the ...
- 673
0
votes
0
answers
86
views
How to create a Samba share that is writable from Windows
Every time I create a shares I can only read but not write from windows but I can from android
I am using webmin to create the samba shares
#
# Sample configuration file for the Samba suite for Debian ...
0
votes
0
answers
33
views
nfs4 ACL won't allow group names with spaces
I configure red hat 8.7 to work with active directory and NFS4.1 ACL.
When I am trying to add permissions to folder/file with command:
nfs4_setfacl -R -a A:g:domain [email protected]:rx imex_home/
Do I ...
- 1
1
vote
2
answers
141
views
find command - list all directories with a set sticky bit
This doesn't work
find / -type d -perm 1000
The problem is, that it matches only the exact permission (1000), but I only want to find out if the sticky bit is set or not. I don't care about the other ...
- 540
0
votes
1
answer
35
views
Making file metadata on a filesystem not supporting it
I have here a storage without supporting the most important metadatas (permissions, owners, etc).
I think, it would help a lot if I could somehow solve that I inject some type of metadata in the ...
- 9,541
0
votes
0
answers
45
views
weston user with super user permission on Wayland
TL;DR;
weston initializes as weston user, without super user permissions.
However the application needs some su permissions and share some files with the root user.
What is the correct way to ...
- 101
0
votes
0
answers
68
views
Linux Ubuntu 20.04 - ownership changed to root for entire drive - permission changed to 777 for all files, cannot revert
I am running Linux Ubuntu 20.04 and for some reason unknown to me, one of my storage drives suddenly has changed ownership to root and all file permisions are read/write/execute for all users. A ...
0
votes
0
answers
184
views
Ntfsfix "Volume is corrupt. You should run chkdsk." even after chkdsk
Recently on my NTFS drive I encountered that I can't do any write: remove or create things. I ran ntfsfix /dev/sda3.
Not mounted
Mounting volume... Error opening read-only '/dev/sda3': Permission ...
- 11
0
votes
1
answer
95
views
file permission for ls and lsattr
The file permission for ls and lsattr are same:
debian@debian:~$ ls -al /usr/bin/ls
-rwxr-xr-x 1 root root 147176 Sep 24 2020 /usr/bin/ls
debian@debian:~$ ls -al /usr/bin/lsattr
-rwxr-xr-x 1 root ...
- 99
-2
votes
3
answers
123
views
What is the value for rwSrwSrwT?
The value 1777 is the permission of rwxrwxrwt:
touch target.txt
chmod 1777 target.txt
ls -al target.txt
-rwxrwxrwt 1 debian debian 0 Jul 14 20:24 target.txt
I have to get a permission string of ...
- 99
0
votes
1
answer
16
views
How can I give another user read/write access to a specific sub folder and the ability to ls the tree but only for the folder they have access to?
I have a user user1 that has a bunch of folders in their home directory, including /home/user1/data/special/files.
I have another user user2.
I want:
user2 to be able to read/write files/folders in /...
- 357
-2
votes
2
answers
42
views
What does a c preceding permissions indicate? [duplicate]
I'm trying to figure out what kind of files I'm dealing with on a partition of a device as part of a security investigation. This partition has a filesystem type of 'none' according to df. There are a ...
- 304
0
votes
1
answer
44
views
Why is chmod working inconsistently between files?
I am making 3 sites in Drupal and need to frequently change the settings.php file in each website folder. This file is read-only for security reasons by default, so before I can edit it, I use:
chmod ...
1
vote
1
answer
56
views
Restrict access to SocketCAN to a certain user group
I have a PC to which a robot is connected via CAN (using SocketCAN). I'd like to control who can send commands to the robot, ideally through a group (i.e. only users who are in the "use_robot&...
- 181
0
votes
0
answers
34
views
How can I allow users to read/write, but not delete inside a directory; except one user who has full permissions (non-root)
How can I allow multiple users to write new files and read other users' files in a specific directory (workdir) without the ability to delete or modify other users' files? One user, referred to as the ...
- 1
0
votes
0
answers
117
views
Polkit rule not working
My pkaction version is 0.112
I have a service that exists in the root directory and I want to give user group admin permissions to run the service.
The service exists in /root/home/custom_service/...
- 3
0
votes
1
answer
163
views
How can I grant a user group permission to start/stop a custom service?
I have a service that exists in the root directory and I want to give user group admin permissions to run the service.
The service exists in /root/home/custom_service/service.service
I tried chgrp ...
- 3