Questions tagged [permissions]

Permissions are the Unix way of controlling access to resources such as files, directories and devices and may be specified for an owner, group, or all users.

692 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
1answer
200 views

group member unable to write to a group-writable file with reiserfs and extended ACLs

Users vi and rust share group rust and want to use some file in shared manner. rust$ ls -l myfile -rw-rw-r-- 1 vi rust 0 May 30 03:48 myfile rust$ stat myfile | grep Gid Access: (0664/-rw-rw-r--) ...
7
votes
1answer
1k views

suexec with chrooted environment

I'm trying to get a chrooted Apache environment working running mod_fcgid with suexec. Looking at suexec log inside jail, the wrapper scripts are being executed with no problems, however, when I look ...
6
votes
1answer
836 views

Why is sed changing permissions of a file on a cifs mounted share?

I have an Arch linux machine that uses the following fstab entry to mount a share: //192.168.3.1/Documents /mnt/ cifs credentials=/home/tal/.smbcredentials,rw,x-systemd.automount,iocharset=...
5
votes
0answers
680 views

Setting umask of libvirt/virt-manager for proper permissions in a directory shared by host and guest

I'm attempting to create a directory that is fully available to both the host and guest systems of a virt-manager/libvirt/QEMU/KVM virtual machine, with read, write and execute permissions for non-...
5
votes
1answer
608 views

No elevated permissions when using GUI applications on i3 wm

I'm running Lubuntu 13.10 with the i3 window manager. Tasks that need elevated permissions, like installing applications from the lubuntu software center or using the gnome-disks, complain about not ...
4
votes
0answers
55 views

Deleting non-empty directory without w permission while having w permission in parent directory

Here's the situation: dir1/dir2/file.txt permissions: drwxrwxrwx 4 me group 4.0K Jan 11 17:53 dir1 drwxr-xr-x 4 other_guy group 4.0K Jan 11 17:48 dir2 -rw-r--r-- 1 other_guy group 158 Jan 11 17:...
4
votes
0answers
546 views

SSHFS mount option default_permissions does not support ACLs - please explain

In regard to the FUSE GitHub page, I have some questions: Does the quote below mean SSHFS does support ACLs if default_permissions is not used? Does it mean that if one needs ACL support and proper ...
4
votes
0answers
3k views

GPG - “pacman-key --refresh-keys” fails with “gpg: keyserver refresh failed: Permission denied”

I'm currently having issues with installing a package due to a missing key. My first plan was to updating my keyring however "pacman-key --refresh-keys" fails: [user@hostname ~]$ sudo pacman-key --...
4
votes
0answers
963 views

How to use ACL with SSHFS

I want to allow users in the same group ("team") to edit the same files on the server. The directory containing these files is mounted via SSHFS. So far, I was not able to accomplish my goal using ...
4
votes
0answers
2k views

How to set sftp-server permissions and ownership in a shared sftp-folder? (ACL's ?)

I need a specialized configuration for our companys sftp server to be able to exchange files with our customers in a secure way (The server runs Debian Linux 8.7). We need a "customers" folder where ...
4
votes
0answers
1k views

Alternative to adding 'user_allow_other' to /etc/fuse.conf for security?

It looks like for mounting my Android phone I need to add user_allow_other to /etc/fuse.conf. I researched what this does: According to the manpage: user_allow_other Allow non-root users to ...
4
votes
1answer
564 views

ACL not honored by mv and tar

I'm trying to setup an area on my ext4 filesystem (on Debian Jessie), where all "staff" group members can read and write existing and newly created files. The filesystem is mounted with acl option: ...
4
votes
0answers
286 views

Permission denied, but why?

I am trying to back up the contents of my network hard drive called WD mybook live. It Internally, it is running Debian Squeezy on PPC. There are several users on this network hard drive: tony, user2, ...
4
votes
0answers
6k views

NFS exports all_squash,anonuid,anongid mapping all client users to owner on server (working) still needs world readable permissions on the server?

My /etc/exports on the NFS server: /home/username/Documents/some/folders/deep 192.168.1.10(rw,sync,all_squash,anonuid=1000,anongid=1000) This seems to be working as intended for the most part. ...
4
votes
0answers
719 views

git push/pull with ssh key

I have a 'git --bare' repo on a linux machine. I wish to allow another user from a different machine to push/pull to it. I have their ssh key. Is there some way I can allow them to execute the ...
4
votes
0answers
1k views

How to change to a different user after SFTP login

The goal: Use local IDE (IntelliJ PHPStorm 9) to browse & edit remote files via SSH The obstacle: My user on the remote machine does not have permissions to read files, which are owned by ...
4
votes
0answers
141 views

File permissions when removing user from git

I have a shared git repository set up, which users pull from with the ssh protocol. I would like to set up the permissions in a way that only users in a specific user group (e.g. git_group) may ...
4
votes
0answers
377 views

tor works when its in /usr/bin but not in /usr/sbin/

I have this very strange behaviour, I have two servers both running Ubuntu 14.04. I've installed tor on both. on machine A tor was installed (by default) in /usr/bin/ and works without any issues. on ...
4
votes
1answer
124 views

Protecting process's envvars from exposure

From I've read about current best practices for developing web applications (such as the Twelve Factor guide), the recommended approach for storing configuration data is within environment variables. ...
4
votes
2answers
80 views

Protecting my server from its own users

Are there any tools to check my server's file system for permission vulnerabilities? My server is a low-security web and email server running our local email and website. Anyone in my organization ...
4
votes
0answers
993 views

Give domain users permissions on cifs shares?

I am using CentOS 6.5 - users authenticate using winbind, all are domain users except for root. /home is mapped to a cifs share on a windows server in /etc/fstab with this line: \\server\home$ /home ...
4
votes
0answers
6k views

Samba's “inherit permissions” does not inherit modes for other

I have a share with "inherit permissions = yes". I have a directory in the share with mode rwxrwsr-x. If I create a subdirectory, the modes are rwxrws---. The same happens with a parent directory with ...
4
votes
1answer
3k views

How can ubuntu/truecrypt be configured so users can mount volumes if-and-only-if they have proper permissions on the mount-point?

If I add the line: ALL= /usr/bin/truecrypt to the sudoers file this lets all users mount volumes at arbitrary mount-points. The problem is a user could create a truecrypt volume and then mount it at /...
4
votes
2answers
261 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
3
votes
0answers
32 views

What is causing this 3s delay in gvim startup?

The gvim program is stuck for 3 seconds before opening any file. This issue is isolated to gvim, vim opens just fine. Therefore, the cause must be somewhere in X or some related service and not vim. ...
3
votes
0answers
63 views

Why the user root doesn't have “w” permission of its home directory?

I'm on Oracle Linux 7.6. The user root apparently has write permission for its own home directory /root. But why the mode bits of /root shows dr-xr-x---. instead of drwxr-x---.? root:[~]# cat /etc/*...
3
votes
0answers
116 views

How to mount files as specific user when using docker namespace remapping?

Problem description: I have a webservice using docker to run nginx and haproxy (among other containers). I want to provide these docker images via a private docker hub registry, and thus don't want ...
3
votes
0answers
132 views

restrict access to the webcam to certain user/software on Ubuntu 16

I would like to restrict the access to the webcam only to certain programs/users. I use Ubuntu 16.04. If I am right my webcam is linked with /dev/video0 (just as an example), which is owned by root ...
3
votes
0answers
58 views

Can I create a linux server user without creating a complete new account?

I've setup a Webserver with a GIT branching model. Now I want to create something like a technical user on my server. This user should not have an own account (I just need the user to to execute git *,...
3
votes
2answers
1k views

Mount cifs with group permissions

I want to mount windows network share with different permissions based on group owners should have read/write permissions, others, only read permissions I am adding the following line in /etc/fstab ...
3
votes
0answers
77 views

Why can the permissions of /sys directories vary across systems?

I have a fresh install of Alpine Linux on my laptop, and I'm trying to read the battery information from /sys/class/power_supply/BAT0/uevent as a regular user (non root). The permissions on the ...
3
votes
0answers
358 views

How to get a user's effective permissions (traditional+acl) for a file/dir?

I've looked at other answers but can't find an answer for this. I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
3
votes
0answers
393 views

Copying files and folders to /var/www/html - inherit permissions of ./html

I want to enforce web server security and maintain 750 for folders and 640 for files - even when copying, at all times, under all circumstances. So far, I've got this working quite well. This is what ...
3
votes
0answers
811 views

Change GID of system groups (GID 100 - 105 to 200 - 205)

I have an Ubuntu server connected to a Microsoft Active Directory for Authentication with NIS/Unix extentions enabled. Every AD user therefore has an primary group ID (GID), which is 100 for IT staff ...
3
votes
0answers
243 views

GPIO in unprivileged LXC container

I currently try to get GPIO-access into an unprivileged LXC application container. In future this container shall execute an application. But for now (while development) I just start a normal bash in ...
3
votes
0answers
84 views

Make read-only directory accessible to other users

I have mounted a read-only share via gvfs-mount to /run/user/60373/gvfs/smb-share. I would like to make other users read this share. The problem is that I can't set the permissions recursively as I ...
3
votes
0answers
84 views

Automatically set file group and permissions not by inheriting from a directory

I have set up a webserver daemon on a VPS. This daemon is run by its own service user, named "node". I have already assigned node's home directory a "siteadmin" owning group that I am in, set chmod g+...
3
votes
0answers
93 views

How to approach planning a BSD file server's outward-facing file hierarchy

I'm migrating data on an informal home server to a new FreeNAS (FreeBSD 10) based file server running samba, and I'm stuck in trying to plan how to lay the data out, to give correct access to ...
3
votes
0answers
62 views

Unix permissions: remove/add file but do not change content

I would like to have the following set up: A folder in which group users can remove/add files, but cannot change their content. I was thinking: drwxrwxr--- (on folder) -rwxr-xr-- (on file) ...
3
votes
0answers
1k views

MSYS2: ulimit: max user processes: cannot modify limit: Invalid arguments

I was a victim of a fork bomb of my own construction, and I couldn't figure out how to stop it short of logging off. (Tools like ProcMon were too slow to get ahead of the newly started processes). ...
3
votes
0answers
551 views

Filesystem-ACLs (setfacl) Equivalent to “mkdir -p” for recursive handling of ACLs

Following directory-structure is given drwx------ root root /path/to/must_be_accessible drwx------ root root /path/to/not_allowed1 drwx------ root root /path/to/not_allowed2 drwx------ root ...
3
votes
0answers
404 views

Cannot write to home directory/files when logging in via SSH with public key

I have been sshed into a remote host on and off all day, but suddenly can no longer write anything to my home directory despite having appropriate permissions. Read operations work fine, but ...
3
votes
0answers
607 views

Pipe audio to another user on the same computer (pulseaudio)

I am running two users at the same time because some games don't like compositing window managers, and you can't turn off compositing in Unity, my favored desktop. I don't want to run two TTYs of the ...
3
votes
1answer
1k views

Linux: Changing Permissions – No space left on device

I have an external drive. When I just plug the drive into the PC, with a default /etc/fstab file, the OS just detects it and it's there in the Dolphin browser. I can select it, I can navigate to it on ...
3
votes
1answer
176 views

Multi-user permissions setup

I've been trying to figure out a good permissions scheme for my multi-user file server. I currently have about 5 users, each storing files in their home directory. These files are also being ...
3
votes
2answers
795 views

make ACL to work perfectly

I know there are plenty of questions and answers about ACL and permissions, but to be honest they are so weak to make any coherent understanding! it's just like a mix of unorganized information. Hope ...
3
votes
0answers
4k views

rsync's “Read-only file system (30)” error

NB: This is a 2-part question: why does an error happen, and how to work around the error. (The two parts are related, inasmuch as the answer to the "why"-question may shed light on the "how"-...
3
votes
0answers
551 views

Read but not write access to a socket on Linux, what can one do with that?

On a server installation, I found sockets writable by group, but only readable by others. I assume that the latter has no effect, as my understanding was that write access is needed to be able to work ...
3
votes
0answers
826 views

Unable to log into Cockpit server - could not set limit for 'nofile'

I have Cockpit installed on a Fedora 22 VPS that I use for educational purposes. I tried logging into Cockpit from my browser, but I was given a "Permission denied" message, despite using the correct ...
3
votes
0answers
2k views

Unable to delete files even with root, lsattr is also not responding

I have two somehow corrupt files in my second hard disk of my laptop, which has dual boot Ubuntu 15.04 and Windows 7. I keep it mounted as a ntfs formatted partition in media. I share this drive ...