Questions tagged [permissions]

Permissions are the Unix way of controlling access to resources such as files, directories and devices and may be specified for an owner, group, or all users.

855 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
8
votes
0answers
5k views

GPG - “pacman-key --refresh-keys” fails with “gpg: keyserver refresh failed: Permission denied”

I'm currently having issues with installing a package due to a missing key. My first plan was to updating my keyring however "pacman-key --refresh-keys" fails: [user@hostname ~]$ sudo pacman-key --...
7
votes
0answers
2k views

Alternative to adding 'user_allow_other' to /etc/fuse.conf for security?

It looks like for mounting my Android phone I need to add user_allow_other to /etc/fuse.conf. I researched what this does: According to the manpage: user_allow_other Allow non-root users to ...
7
votes
1answer
230 views

group member unable to write to a group-writable file with reiserfs and extended ACLs

Users vi and rust share group rust and want to use some file in shared manner. rust$ ls -l myfile -rw-rw-r-- 1 vi rust 0 May 30 03:48 myfile rust$ stat myfile | grep Gid Access: (0664/-rw-rw-r--) ...
7
votes
1answer
2k views

suexec with chrooted environment

I'm trying to get a chrooted Apache environment working running mod_fcgid with suexec. Looking at suexec log inside jail, the wrapper scripts are being executed with no problems, however, when I look ...
6
votes
0answers
1k views

How to change to a different user after SFTP login

The goal: Use local IDE (IntelliJ PHPStorm 9) to browse & edit remote files via SSH The obstacle: My user on the remote machine does not have permissions to read files, which are owned by ...
6
votes
1answer
1k views

Why is sed changing permissions of a file on a cifs mounted share?

I have an Arch linux machine that uses the following fstab entry to mount a share: //192.168.3.1/Documents /mnt/ cifs credentials=/home/tal/.smbcredentials,rw,x-systemd.automount,iocharset=...
5
votes
0answers
837 views

SSHFS mount option default_permissions does not support ACLs - please explain

In regard to the FUSE GitHub page, I have some questions: Does the quote below mean SSHFS does support ACLs if default_permissions is not used? Does it mean that if one needs ACL support and proper ...
5
votes
0answers
1k views

How to use ACL with SSHFS

I want to allow users in the same group ("team") to edit the same files on the server. The directory containing these files is mounted via SSHFS. So far, I was not able to accomplish my goal using ...
5
votes
0answers
3k views

How to set sftp-server permissions and ownership in a shared sftp-folder? (ACL's ?)

I need a specialized configuration for our companys sftp server to be able to exchange files with our customers in a secure way (The server runs Debian Linux 8.7). We need a "customers" folder where ...
5
votes
0answers
834 views

Pipe audio to another user on the same computer (pulseaudio)

I am running two users at the same time because some games don't like compositing window managers, and you can't turn off compositing in Unity, my favored desktop. I don't want to run two TTYs of the ...
5
votes
0answers
7k views

NFS exports all_squash,anonuid,anongid mapping all client users to owner on server (working) still needs world readable permissions on the server?

My /etc/exports on the NFS server: /home/username/Documents/some/folders/deep 192.168.1.10(rw,sync,all_squash,anonuid=1000,anongid=1000) This seems to be working as intended for the most part. ...
5
votes
1answer
150 views

File permissions when removing user from git

I have a shared git repository set up, which users pull from with the ssh protocol. I would like to set up the permissions in a way that only users in a specific user group (e.g. git_group) may ...
4
votes
0answers
56 views

Deleting non-empty directory without w permission while having w permission in parent directory

Here's the situation: dir1/dir2/file.txt permissions: drwxrwxrwx 4 me group 4.0K Jan 11 17:53 dir1 drwxr-xr-x 4 other_guy group 4.0K Jan 11 17:48 dir2 -rw-r--r-- 1 other_guy group 158 Jan 11 17:...
4
votes
2answers
2k views

Permission denied even though I own it and permissions are 777

I'm on Android using Termux and copied a file from my sdcard to my Termux home folder. (I use a file explorer app with root permissions for that..) Now having the file in my home dir I checked what my ...
4
votes
1answer
476 views

Permission denied, but why?

I am trying to back up the contents of my network hard drive called WD mybook live. It Internally, it is running Debian Squeezy on PPC. There are several users on this network hard drive: tony, user2, ...
4
votes
1answer
2k views

SSH with chroot and only working “sftp”, “rsync” (both)?

I have two users and one shared folder in my Ubuntu server: User writer, which has write access to /var/shared. It's an application regularly making file changes in this folder from remote, with an ...
4
votes
1answer
2k views

Linux: Changing Permissions – No space left on device

I have an external drive. When I just plug the drive into the PC, with a default /etc/fstab file, the OS just detects it and it's there in the Dolphin browser. I can select it, I can navigate to it on ...
4
votes
1answer
190 views

Multi-user permissions setup

I've been trying to figure out a good permissions scheme for my multi-user file server. I currently have about 5 users, each storing files in their home directory. These files are also being ...
4
votes
0answers
779 views

git push/pull with ssh key

I have a 'git --bare' repo on a linux machine. I wish to allow another user from a different machine to push/pull to it. I have their ssh key. Is there some way I can allow them to execute the ...
4
votes
1answer
2k views

Run git pull from a shell start-up script

I have Raspberry Pi that loads a shell script on start up. This script runs a python script, boot_camera.py, which is found in a repository. I Have a server which sends the Raspberry Pi a command ...
4
votes
0answers
520 views

tor works when its in /usr/bin but not in /usr/sbin/

I have this very strange behaviour, I have two servers both running Ubuntu 14.04. I've installed tor on both. on machine A tor was installed (by default) in /usr/bin/ and works without any issues. on ...
4
votes
1answer
134 views

Protecting process's envvars from exposure

From I've read about current best practices for developing web applications (such as the Twelve Factor guide), the recommended approach for storing configuration data is within environment variables. ...
4
votes
2answers
81 views

Protecting my server from its own users

Are there any tools to check my server's file system for permission vulnerabilities? My server is a low-security web and email server running our local email and website. Anyone in my organization ...
4
votes
0answers
1k views

Give domain users permissions on cifs shares?

I am using CentOS 6.5 - users authenticate using winbind, all are domain users except for root. /home is mapped to a cifs share on a windows server in /etc/fstab with this line: \\server\home$ /home ...
4
votes
3answers
1k views

How do I change owner/permissions of auto mount on an embedded linaro based linux

I have an ARM based embedded system that when it auto mounts a USB drive it mounts it: drwx------ 6 linaro linaro 2048 Jan 1 1970 PENDRIVE I need to change the permissions and possibly thew owner of ...
4
votes
0answers
6k views

Samba's “inherit permissions” does not inherit modes for other

I have a share with "inherit permissions = yes". I have a directory in the share with mode rwxrwsr-x. If I create a subdirectory, the modes are rwxrws---. The same happens with a parent directory with ...
4
votes
1answer
3k views

How can ubuntu/truecrypt be configured so users can mount volumes if-and-only-if they have proper permissions on the mount-point?

If I add the line: ALL= /usr/bin/truecrypt to the sudoers file this lets all users mount volumes at arbitrary mount-points. The problem is a user could create a truecrypt volume and then mount it at /...
4
votes
2answers
263 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
3
votes
1answer
51 views

Directory that lets anyone do anythning to everyrthing regardless of creator

This is for FreeBSD UFS, but I would expect that it's applicable to any type of POSIX style filesystem. Here's the context: An external volume formatted as UFS. There are multiple FreeBSD ...
3
votes
1answer
95 views

updatedb can not create temporary file for a custom database file

I am trying to create a custom mlocate db for my home directory. When running the updatedb it complains about inability to open a temporary file. 55;~/>uname -a Linux yoga 4.12.14-lp151.28.59-...
3
votes
0answers
80 views

failure to stat /proc/self/map_files symlink - permission denied?

I am writing some code that checksums executable mappings. Through /proc/$PID/map_files, Linux provides symlinks to the files that back memory mappings. My code is calling "stat()" on one of these ...
3
votes
0answers
789 views

Why are the permissions of /run/user/1000 wrong

My /run/user/1000 directory is owned by root - as far as I understand it, it should be owned by my user - I'm unable to start any snap programs (e.g., slack) as I get this error: mkdir: cannot create ...
3
votes
0answers
125 views

AppArmor blocking firefox on Linux Mint 18.3

Using aa-genprof, I've attempted to generate a profile for Firefox, but AppArmor keeps blocking access to a connect capability when Firefox attempts to start, which throws an error : Failed to ...
3
votes
1answer
200 views

screen inside systemd wants 777 permissions on /run/screen but 775 outside

I am trying to run an application as a systemd service inside a screen container. When trying to start the service it fails with the error message: screen[11648]: Directory '/run/screen' must have ...
3
votes
0answers
70 views

What is causing this 3s delay in gvim startup?

The gvim program is stuck for 3 seconds before opening any file. This issue is isolated to gvim, vim opens just fine. Therefore, the cause must be somewhere in X or some related service and not vim. ...
3
votes
0answers
87 views

Why the user root doesn't have “w” permission of its home directory?

I'm on Oracle Linux 7.6. The user root apparently has write permission for its own home directory /root. But why the mode bits of /root shows dr-xr-x---. instead of drwxr-x---.? root:[~]# cat /etc/*...
3
votes
0answers
248 views

How to mount files as specific user when using docker namespace remapping?

Problem description: I have a webservice using docker to run nginx and haproxy (among other containers). I want to provide these docker images via a private docker hub registry, and thus don't want ...
3
votes
0answers
420 views

restrict access to the webcam to certain user/software on Ubuntu 16

I would like to restrict the access to the webcam only to certain programs/users. I use Ubuntu 16.04. If I am right my webcam is linked with /dev/video0 (just as an example), which is owned by root ...
3
votes
0answers
67 views

Can I create a restricted user on a linux server?

I've setup a Webserver with a GIT branching model. Now I want to create something like a technical user on my server. This user should not have an own account (I just need the user to to execute git *,...
3
votes
2answers
2k views

Mount cifs with group permissions

I want to mount windows network share with different permissions based on group owners should have read/write permissions, others, only read permissions I am adding the following line in /etc/fstab ...
3
votes
1answer
2k views

Apache: how to run PHP files via CGI as normal user and without them being executable

Background Config of server I want to mimic I have access to a CentOS 7 server with cPanel/WHM installed, running EasyApache4 with the following configuration: # /usr/local/cpanel/bin/...
3
votes
0answers
80 views

Why can the permissions of /sys directories vary across systems?

I have a fresh install of Alpine Linux on my laptop, and I'm trying to read the battery information from /sys/class/power_supply/BAT0/uevent as a regular user (non root). The permissions on the ...
3
votes
0answers
476 views

How to get a user's effective permissions (traditional+acl) for a file/dir?

I've looked at other answers but can't find an answer for this. I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
3
votes
0answers
720 views

Copying files and folders to /var/www/html - inherit permissions of ./html

I want to enforce web server security and maintain 750 for folders and 640 for files - even when copying, at all times, under all circumstances. So far, I've got this working quite well. This is what ...
3
votes
0answers
1k views

Change GID of system groups (GID 100 - 105 to 200 - 205)

I have an Ubuntu server connected to a Microsoft Active Directory for Authentication with NIS/Unix extentions enabled. Every AD user therefore has an primary group ID (GID), which is 100 for IT staff ...
3
votes
0answers
280 views

GPIO in unprivileged LXC container

I currently try to get GPIO-access into an unprivileged LXC application container. In future this container shall execute an application. But for now (while development) I just start a normal bash in ...
3
votes
0answers
91 views

Make read-only directory accessible to other users

I have mounted a read-only share via gvfs-mount to /run/user/60373/gvfs/smb-share. I would like to make other users read this share. The problem is that I can't set the permissions recursively as I ...
3
votes
0answers
93 views

Automatically set file group and permissions not by inheriting from a directory

I have set up a webserver daemon on a VPS. This daemon is run by its own service user, named "node". I have already assigned node's home directory a "siteadmin" owning group that I am in, set chmod g+...
3
votes
1answer
805 views

Allow user to run command as another user with their environment in sudoers

So, I have an entry that looks like this in my sudoers file: user1 ALL=(user2) NOPASSWD: /scripts/dir/ This allows user1 to run all executables under /scripts/dir/ as user2 without entering their ...
3
votes
0answers
63 views

Unix permissions: remove/add file but do not change content

I would like to have the following set up: A folder in which group users can remove/add files, but cannot change their content. I was thinking: drwxrwxr--- (on folder) -rwxr-xr-- (on file) Would ...

1
2 3 4 5
18