Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [permissions]

Permissions are the Unix way of controlling access to resources such as files, directories and devices and may be specified for an owner, group, or all users.

5
votes
0answers
589 views

Setting umask of libvirt/virt-manager for proper permissions in a directory shared by host and guest

I'm attempting to create a directory that is fully available to both the host and guest systems of a virt-manager/libvirt/QEMU/KVM virtual machine, with read, write and execute permissions for non-...
4
votes
0answers
53 views

Deleting non-empty directory without w permission while having w permission in parent directory

Here's the situation: dir1/dir2/file.txt permissions: drwxrwxrwx 4 me group 4.0K Jan 11 17:53 dir1 drwxr-xr-x 4 other_guy group 4.0K Jan 11 17:48 dir2 -rw-r--r-- 1 other_guy group 158 Jan 11 17:...
4
votes
0answers
2k views

GPG - “pacman-key --refresh-keys” fails with “gpg: keyserver refresh failed: Permission denied”

I'm currently having issues with installing a package due to a missing key. My first plan was to updating my keyring however "pacman-key --refresh-keys" fails: [user@hostname ~]$ sudo pacman-key --...
4
votes
0answers
2k views

How to set sftp-server permissions and ownership in a shared sftp-folder? (ACL's ?)

I need a specialized configuration for our companys sftp server to be able to exchange files with our customers in a secure way (The server runs Debian Linux 8.7). We need a "customers" folder where ...
4
votes
0answers
834 views

Alternative to adding 'user_allow_other' to /etc/fuse.conf for security?

It looks like for mounting my Android phone I need to add user_allow_other to /etc/fuse.conf. I researched what this does: According to the manpage: user_allow_other Allow non-root users to ...
4
votes
0answers
253 views

Permission denied, but why?

I am trying to back up the contents of my network hard drive called WD mybook live. It Internally, it is running Debian Squeezy on PPC. There are several users on this network hard drive: tony, user2, ...
4
votes
0answers
6k views

NFS exports all_squash,anonuid,anongid mapping all client users to owner on server (working) still needs world readable permissions on the server?

My /etc/exports on the NFS server: /home/username/Documents/some/folders/deep 192.168.1.10(rw,sync,all_squash,anonuid=1000,anongid=1000) This seems to be working as intended for the most part. ...
4
votes
0answers
675 views

git push/pull with ssh key

I have a 'git --bare' repo on a linux machine. I wish to allow another user from a different machine to push/pull to it. I have their ssh key. Is there some way I can allow them to execute the ...
4
votes
0answers
1k views

How to change to a different user after SFTP login

The goal: Use local IDE (IntelliJ PHPStorm 9) to browse & edit remote files via SSH The obstacle: My user on the remote machine does not have permissions to read files, which are owned by ...
4
votes
0answers
139 views

File permissions when removing user from git

I have a shared git repository set up, which users pull from with the ssh protocol. I would like to set up the permissions in a way that only users in a specific user group (e.g. git_group) may ...
4
votes
0answers
360 views

tor works when its in /usr/bin but not in /usr/sbin/

I have this very strange behaviour, I have two servers both running Ubuntu 14.04. I've installed tor on both. on machine A tor was installed (by default) in /usr/bin/ and works without any issues. on ...
4
votes
0answers
979 views

Give domain users permissions on cifs shares?

I am using CentOS 6.5 - users authenticate using winbind, all are domain users except for root. /home is mapped to a cifs share on a windows server in /etc/fstab with this line: \\server\home$ /home ...
4
votes
0answers
6k views

Samba's “inherit permissions” does not inherit modes for other

I have a share with "inherit permissions = yes". I have a directory in the share with mode rwxrwsr-x. If I create a subdirectory, the modes are rwxrws---. The same happens with a parent directory with ...
3
votes
0answers
29 views

How to mount files as specific user when using docker namespace remapping?

Problem description: I have a webservice using docker to run nginx and haproxy (among other containers). I want to provide these docker images via a private docker hub registry, and thus don't want ...
3
votes
0answers
52 views

restrict access to the webcam to certain user/software on Ubuntu 16

I would like to restrict the access to the webcam only to certain programs/users. I use Ubuntu 16.04. If I am right my webcam is linked with /dev/video0 (just as an example), which is owned by root ...
3
votes
0answers
55 views

Can I create a linux server user without creating a complete new account?

I've setup a Webserver with a GIT branching model. Now I want to create something like a technical user on my server. This user should not have an own account (I just need the user to to execute git *,...
3
votes
0answers
73 views

Why can the permissions of /sys directories vary across systems?

I have a fresh install of Alpine Linux on my laptop, and I'm trying to read the battery information from /sys/class/power_supply/BAT0/uevent as a regular user (non root). The permissions on the ...
3
votes
0answers
452 views

SSHFS mount option default_permissions does not support ACL's - please explain

In regard to the FUSE GitHub page, I have some questions: Does the quote below mean SSHFS does support ACL's if default_permissions is not used? Does it mean that if one needs ACL support and proper ...
3
votes
0answers
271 views

Copying files and folders to /var/www/html - inherit permissions of ./html

I want to enforce web server security and maintain 750 for folders and 640 for files - even when copying, at all times, under all circumstances. So far, I've got this working quite well. This is what ...
3
votes
0answers
663 views

Change GID of system groups (GID 100 - 105 to 200 - 205)

I have an Ubuntu server connected to a Microsoft Active Directory for Authentication with NIS/Unix extentions enabled. Every AD user therefore has an primary group ID (GID), which is 100 for IT staff ...
3
votes
0answers
221 views

GPIO in unprivileged LXC container

I currently try to get GPIO-access into an unprivileged LXC application container. In future this container shall execute an application. But for now (while development) I just start a normal bash in ...
3
votes
0answers
81 views

Make read-only directory accessible to other users

I have mounted a read-only share via gvfs-mount to /run/user/60373/gvfs/smb-share. I would like to make other users read this share. The problem is that I can't set the permissions recursively as I ...
3
votes
0answers
80 views

Automatically set file group and permissions not by inheriting from a directory

I have set up a webserver daemon on a VPS. This daemon is run by its own service user, named "node". I have already assigned node's home directory a "siteadmin" owning group that I am in, set chmod g+...
3
votes
0answers
86 views

How to approach planning a BSD file server's outward-facing file hierarchy

I'm migrating data on an informal home server to a new FreeNAS (FreeBSD 10) based file server running samba, and I'm stuck in trying to plan how to lay the data out, to give correct access to ...
3
votes
0answers
62 views

Unix permissions: remove/add file but do not change content

I would like to have the following set up: A folder in which group users can remove/add files, but cannot change their content. I was thinking: drwxrwxr--- (on folder) -rwxr-xr-- (on file) ...
3
votes
0answers
1k views

MSYS2: ulimit: max user processes: cannot modify limit: Invalid arguments

I was a victim of a fork bomb of my own construction, and I couldn't figure out how to stop it short of logging off. (Tools like ProcMon were too slow to get ahead of the newly started processes). ...
3
votes
0answers
511 views

Filesystem-ACLs (setfacl) Equivalent to “mkdir -p” for recursive handling of ACLs

Following directory-structure is given drwx------ root root /path/to/must_be_accessible drwx------ root root /path/to/not_allowed1 drwx------ root root /path/to/not_allowed2 drwx------ root ...
3
votes
0answers
324 views

Cannot write to home directory/files when logging in via SSH with public key

I have been sshed into a remote host on and off all day, but suddenly can no longer write anything to my home directory despite having appropriate permissions. Read operations work fine, but ...
3
votes
0answers
493 views

Pipe audio to another user on the same computer (pulseaudio)

I am running two users at the same time because some games don't like compositing window managers, and you can't turn off compositing in Unity, my favored desktop. I don't want to run two TTYs of the ...
3
votes
0answers
4k views

rsync's “Read-only file system (30)” error

NB: This is a 2-part question: why does an error happen, and how to work around the error. (The two parts are related, inasmuch as the answer to the "why"-question may shed light on the "how"-...
3
votes
0answers
486 views

Read but not write access to a socket on Linux, what can one do with that?

On a server installation, I found sockets writable by group, but only readable by others. I assume that the latter has no effect, as my understanding was that write access is needed to be able to work ...
3
votes
0answers
735 views

Unable to log into Cockpit server - could not set limit for 'nofile'

I have Cockpit installed on a Fedora 22 VPS that I use for educational purposes. I tried logging into Cockpit from my browser, but I was given a "Permission denied" message, despite using the correct ...
3
votes
0answers
1k views

Unable to delete files even with root, lsattr is also not responding

I have two somehow corrupt files in my second hard disk of my laptop, which has dual boot Ubuntu 15.04 and Windows 7. I keep it mounted as a ntfs formatted partition in media. I share this drive ...
3
votes
0answers
84 views

File permissions for kernel have changed in OSX Yosmite, why?

I am working my way through the book Learning Unix for OSX Mountain Lion (I don't have access to the updated version for OSX), in which it demonstrates that using $ ls -l /mach_kernel should produce ...
3
votes
0answers
1k views

Run git pull from a shell start-up script

I have Raspberry Pi that loads a shell script on start up. This script runs a python script, boot_camera.py, which is found in a repository. I Have a server which sends the Raspberry Pi a command ...
3
votes
0answers
140 views

LXC: Have rootfs mounted without nosuid

I have the container's rootfs in a volume mounted with the nosuid option. When I start the container, its / mounted is then also mounted nosuid, which breaks programs such as sudo. How can I avoid ...
3
votes
0answers
4k views

Permission denied when Ubuntu is attempting to mount to a remote Windows share folder

Fellow guys, I encountered the error when I's mounting my Ubuntu server to a remote Windows share folder, the following is the error on terminal after I typed command line 'mount -a': mount error(13)...
3
votes
0answers
695 views

Samba: system group mapping

I have w2008R2 PDC and Linux server with samba and winbind. Now I'd like to add some domain users to Unix adm group in AD. Let's say I have adm group defined in AD, and every user from this group ...
2
votes
0answers
29 views

ACL permissions mysteriously giving execute on group

I did the following and I don't understand the end result: $ mkdir mydir $ setfacl -d -m u::rwX,g::rwX,o::rX,m::rwx mydir $ touch mydir/test.txt $ getfacl mydir/test.txt # file: mydir/test.txt # ...
2
votes
0answers
33 views

Other has permissions with umask 007 on VM with mounted folder

One thing that's odd to me right now is I am playing around with permissions. The way umask works to my knowledge is it basically tells what permissions u g o don't have using octal representation (...
2
votes
0answers
41 views

Apache startup error with symlinked configuration file with 777 permissions

Ubuntu virtual machine with Apache 2.4.7 I'm getting these errors: apache2: Syntax error on line 216 of /etc/apache2/apache2.conf: Could not open configuration file /etc/apache2/conf-enabled/...
2
votes
0answers
10 views

Limiting sFTP access

A Raspberry pi is configured with OSMC behind a firewall. The router forwards WAN port 21 traffic to port 22 of the rPi. A guest user has been configured. Assume the username is guest and though ...
2
votes
0answers
386 views

/dev/tty* serial devices are in group “root” for a second before they are switchted to group “dialout”. How to make them start out in “dialout”?

When I plug in a usb-to-serial device, it takes some time for the device to be switched to the "dialout" group (it starts out in the "root") group. This wreaks havoc with some client software that ...
2
votes
0answers
330 views

How could I grant www-data write permissions to a Docker volume with SUBUIDs/SUBGIDs?

I am using SUBUIDs and SUBGIDs when running docker, so the file permissions in the docker volume are the following: $> ls -la /var/lib/docker/231072.231072/volumes/docroot/_data/some.php -rw-r--r--...
2
votes
0answers
51 views

Why can I not see this “readable” directory?

Today, one of my coworkers ran into trouble setting up a new intern to work. An account was set up by our IT group for the intern, but we were not able to access it. When I investigated, I found: $ ...
2
votes
0answers
29 views

Permission errors when running program using supervisor, but not in the shell

I have a program which is supposed to always be running. This program listens for commands in a message broker, does a file system operation upon request, and publishes the result through the same ...
2
votes
0answers
68 views

Why isn't the Linux Kernel Image read-only by default?

I installed FUSE last week, and ran into issues running guest mount. The application tries to read the kernel image from user space. OK, fine. A chmod 755, and I'm in business. Still..I'd like to ...
2
votes
0answers
294 views

How to get a user's effective permissions (traditional+acl) for a file/dir?

I've looked at other answers but can't find an answer for this. I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
2
votes
0answers
86 views

Permission denied on dnf search since update to fedora 26

I've just updated a VM to Fedora 26 from 25, and since then I'm getting the following error when running dnf search without sudo: [Errno 13] Permission denied: '/var/cache/dnf/expired_repos.json' ...
2
votes
0answers
794 views

How to use ACL with SSHFS

I want to allow users in the same group ("team") to edit the same files on the server. The directory containing these files is mounted via SSHFS. So far, I was not able to accomplish my goal using ...