General :: File Permission And Groups
Jul 17, 2011I have been trying to to make the folder "/home/files" Read/write/Execute for the group "admin" and only Read for Group "Friends"
View 4 RepliesI have been trying to to make the folder "/home/files" Read/write/Execute for the group "admin" and only Read for Group "Friends"
View 4 RepliesSo i am at the stage of about to install the basic system and am using a derivation of the package management provided by Matthias S. Benkmann. To this end I am using his useradd and groupadd scripts to update the files:
/etc/passwd
/etc/group
My issue is that when I run the commands(created as part of temporary system when installing coreutils):
Code:
/tools/bin/su linux
#then as user
/tools/bin/groups
(here linux is the name of the user) This only returns the user being in the group named after user but not the additional group of 'install' Also, prior to logging in as user, if I use this command as root:
Code:
/tools/bin/groups linux
linux install This then returns that the user is in the correct groups. Lines from relevant files look like:
Code:
#/etc/passwd
linux:x:10000:10000::/usr/src/build:/bin/bash
#/etc/group
[code].....
What is the best command for adding groups to a file?
View 2 Replies View RelatedI am having problems with groups and file permissions. I have a file owned by myself
Code:
-rw-rw-r-- 1 diblemar users 2.1K Jun 3 06:02 /cluster/shared/Injects/1404_1405_1000033606_79964.return.xml
I want to modify the file using a cgi script running on an apache server (on the same machine). Both diblemar and apache are in the same group.
Code:
apache:x:48:diblemar
However, I receive a file permissions error when I try to modify the file. I assumed that with the permission settings above apache would be able to modify a file owned by someone else in the apache group.
I have a folder at /home/www/, and the owner is www, which is part of the www-group. I have another user, john, part of the john group. How can I chown /home/www/ to make it writable by both www and john?
View 2 Replies View RelatedI'm using my Linux (SLES 10) server as a File Server at this point. I need to set File Permissions to nested folders differently to different groups. For example:
homesharedengineering* should be read only for groupA
homesharedengineeringadmin should be read & write for groupB Plus read only for groupA
homesharedengineeringautocad should be read & write for groupC Plus read only for groupA
I've been using Webmin and Putty to set permissions but Putty only allows me the Default Group, it won't allow me to set several groups on the same directory. Webmin seems to allow me to add multiple groups (Webmin --> Others --> File Manager --> Info & ACL tab will provide extended abilities) but when I add multiple groups, they don't seem to take effect? I'm wondering if my setup at the 'Share' level or at the hierarchy of my folder structure (unix based) needs to be set specifically?
I'm trying to learn about permissions on linux webserver with apache.Some clues to the system: The server I have to play around with is Fedora based. Apache runs as apache:apache. To allow for e.g. php to write to a file the file needs to be chmod 777. 755 is not sufficiant.What I'm wondering is basically how set up permissions like they should be on e.g. a "shared web host".My main problem is that if I set a permission so that one user cannot access anothers home folder, then apache can't read from the public_html folder either.
To keep the users out I need to set chmod 700. But to let apache to read I need to have at least execute on world,so a 701 basically works, but won't let some users in.So I'm really stuck on what to do. Have been concidering adding the apache user to the frous grours
below to avoid having to add the world execute flag, but is that a bad thing? Should it be the other way around, the users in the groups below should also be in the apache group?I was aiming at having 4 groups:
1. webapp: same as dev_int, but is the only one that can go inside the webapp/live folder to e.g. do an update from the repo.
2. dev_int: can read,write and execute everything in the "web root", including the two below, but nothing outside of the web root
3. dev_ext: can read write and execute in all client folders, but cannot access anything outside of the webapp root
4. clientsBasic ftp accounts. Has a home folder with a public_html, but cannot access any other home folders
I have a C-function that create a file and then make a copy in the same directory, but somethin is wrong with permission or owners.The program starts as root user.The file creates by the program:
-rwxrwxrwx 1 root staff 199680 Oct 18 10:58 test
Ok, but after copying the permission is not the same.The file after copying (with new name) by the program:
-rw-r--r-- 1 root root 199680 Oct 18 10:58 test_copy
I want to have full permission of the copy, how to do??
I'm using ubuntu 11.04, I'm having some problem of ownership while sharing folder/files. to share i change the folder share option:1. Share this folder, then followed by 2.allow others to create and delete files in this folder3. guest access.Now if someone in my local network edit any file and save it, it gets locked. if some one copy their file in this folder the permission is marked as "no group" "no owner". and they get unaccessible to me. i tried doing chown <user> <folder> but it says Operation not permitted. Now how i can possibly share my folder on local network so that they can be edited by others without getting locked down , if they copy files i can able to modify them.
View 2 Replies View RelatedI already know of a work around to fix this problem, but I guess my question is why is this not working as expected? I am using a Windows Server 2008 R2 Active Directory for authentication.
I have run auth-client-config for the ldap profile and pam-auth-update. When running getent passwd, I get a list of both the local users and the users in the active directory (with populated information in the Unix schema extension). When running getent group I get a list of both the local groups and the groups in the active directory (with populated information in the Unix schema extension).
Interestingly enough, though, when I run su DOMAINUSER, after the prompt for the password I get an authentication error. In /var/log/auth.log I can see an entry with pam_ldap: missing "host" in file "/etc/ldap.conf". The SRV records in the DNS servers resolve correctly. I've checked this with nslookup and I have seen the records within my zone file. Obviously if the ldap.conf file is working with getent and the ldap server is resolving from the SRV records, it is working fine.
The interesting part is that the Windows Server 2008 R2 AD machine shows in the event viewer that there was a successful authentication, yet the Ubuntu box says no. When I add the host within the ldap.conf file, everything works...getent and the actual authentication, either initial login or su.
[Code]...
i have two different systems having centos and slackware OS's.when i mount files on centos system from server, i get all permission on files means(rwx),but when i execute same command on my slackware system, i get only read permission on file.
i use mount -t cifs //serverip/sheetshare /root/Desktop/sheet/ -o username=abc,password=abc.
I am currently trying to set up a Samba domain server. In the Samba-HOWTO-Collection I found an
example file.(Point 3.3.3.1) In the explanations of the example below, the author says I need to map UNIX Groups to NT Groups. He writes a shell-script of how one could do it, but when I copy it and then execute it, I get the error:
Bad option: rid=512
Bad option: rid=513
Bad option: rid=514
The other groups do get mapped, just the Domain Admins, Domain Users and Domain Guests dont. This is the shell from the HOWTO:
#!/bin/bash
#### Shell-Skript f ̈r sp ̈tere Verwendung aufbewahren
net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmins rid=512
net groupmap modify ntgroup="Domain Users" unixgroup=users rid=513
net groupmap modify ntgroup="Domain Guests" unixgroup=nobody rid=514
[Code]...
how is the file permission is defined?
for example when i use the command list -l testp01.txt i get the result of testp01.txt file permission -rw- r-- r-- root root etc however i wonder where are those information written?
is there any special file which contains all of these information?
I am creating a DVD iso of the mentioned six .iso file using 'mkisofs' in CentOS. During the process, at about 12%, an error occurred. The error was that: "Cannot read from '/sys/firmware/acpi/namespace/ACPI/_SB/PCI0/P2P0/S4F0/eject'" I remembered setting all the permissions to "read and write" but I kept receiving the same error next time.
View 1 Replies View RelatedWhat are the possible problem when Windows access the file from Ubuntu got Read Only even though have a full permission to read, write and execute the file? Ubuntu to Ubuntu accessing the file there is no problem only Windows got a problem.
View 1 Replies View RelatedIs there any use if a file has only write and execute permission and not read permission?
View 2 Replies View RelatedIf I am not the file' owner or root, can I use chmod to change the file permission?
Assume I have group/write access to the file, e.g. 775
My shell script runs from the command line, but fails in cronjob. /bin/sh: asper.sh: Permission denied
-rw-r--r-- asper.sh I guess the permission should look like '-rwxr-xr--' How can I change the permission to be like that?
My cd /boot/grub/ shows (required only file shown): -r--r--r-- grub.cfg
I tried to change the permission of this via, chmod u+w grub.cfg but the file permission did not change why??
How can I change the file permission of grub.cfg?
i have created a file (by root user) called test.txt. Then i created a user bob. Now i want only bob to read/write/execute this file and no other user shall have any permission on it.
View 3 Replies View RelatedI have a c file, and I want to open it but not in the terminal. After changing the permission, I tried: vi, pico, ed and vim. But, all open it in the terminal. How can I change the permission of that file to be opened and edited not in the terminal? When I change the permission from the terminal, it only let me edit it through the terminal, and when I check the permission of the file I see it as was it (no change). I need a permanent permission. Although, I command as a root.
View 7 Replies View RelatedI am trying to put a file from one linux machine to my other linux machine. There is absolutely no problem in downloading the file i.e. performing the "get" operation but when I try to upload or "put file" from my host1 to host2 it throws error "Error 0 Permission denied". I am able to put files from host2 to host1 without any problem but not from host1 to host. Infact if I try to tftp even localhost on host2 it throws the same error. Here is my
/etc/xinetd.d/tftp file for host2
service tftp {
socket_type = dgram
protocol = udp
wait = yes
user = root
server = /usr/sbin/in.tftpd
server_args = -c -s /tftpboot
#disable = yes
disable = no
per_source = 11
cps = 100 2
flags = IPv4
}
And permissions on /tftpboot are 777
[root@LinuxServer /]# ls -ld /tftpboot/
drwxrwxrwx 2 root root 4096 Jan 6 05:21 /tftpboot/
[root@LinuxServer /]# ls -l /tftpboot/
total 16
-rwxrwxrwx 1 root root 11 Jan 6 06:16 new_test
-rwxrwxrwx 1 root root 12 Jan 5 06:02 test2
And the command which I am using is :
[root@LinuxServer /]# tftp localhost -c put new_test
Error code 0: Permission denied
And ya here is /etc/sysconfig/selinux file is as under :
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=permissive
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted
that works to disallow non-owners from renaming the file, but what I wouldlike to do is disallow EVERYONE ( including the owner of the file ) fromediting, moving, or changing the filename once it is created. the only personwho should be able to make those changes is a special user.
View 13 Replies View RelatedI tried following the example from here (http:url]......)Open up publicity.html for reading and writing by anyone.
Before: -rw-r--r-- publicity.html
Command: chmod og=rw publicity.html
After: -rw-rw-rw- publicity.html
Here's my terminal session:
username@ubuntu:/etc$ -rw-r--r-- bash.bashrc
-rw-r--r--: command not found
username@ubuntu:/etc$ chmod og=rw bash.bashrc[code]....
I've combed the prior posts for an answer but cannot seem to find one that fits.I have a half dozen imation super disks, 120 mb. I would really like to use them occasionally.I can't seem to format them to ext because of a permission issue. But I somehow think it is not a user permission problem but a disk issue.I have already done:
Code:
chown root:floppy /dev/fd0 && chmod 660 /dev/fd0 && adduser <username> floppy
checked to see that I was properly added as an user but when I tried:
[code]....
I am attempting to make a backup copy of a file, but every time I try to copy the file, I get a "permission denied error -- even when running as root. The file is on a volume mounted as /media/Data . No problems reading/writing other files on the volume.
Here is the info on the file:
-rw-------. 1 root MailServer.img
I've tried chown but get the permission denied as well. This is a virtual machine image that runs fine, but even with the VM completely shut down, I get the same error.
If I try the sudo mv command on the file listed below I get the error listed. I am confused. It is my file & I have permissions. Somehow a slew of files on my system are now showing this way. This seems to correspond when I ran rsync from my netbook to sync it up with my desktop where I am having a problem.
Potential Source ->
sudo rsync -av --delete --rsh=ssh joe@192.168.1.4:/media/Abyss/Memories/ /home/joe/Pictures/
Type of issue ->
mv: cannot remove `100_2259.jpg': Permission denied
joe@Tux-Box:/media/Abyss/Memories/2009/3-09$ stat 100_2259.jpg
File: `100_2259.jpg'
Size: 243012 Blocks: 480 IO Block: 4096 regular file
Device: 811h/2065dInode: 1312030 Links: 1
Access: (0777/-rwxrwxrwx) Uid: (1000/joe) Gid: (1000/joe)
Access: 2010-07-17 11:41:26.708020712 -0400
Modify: 2009-12-13 21:49:59.501938000 -0500
Change: 2009-12-24 05:54:02.854309200 -0500
i want to set permission type "write" on a file to a particular user in a group of users ( not all users in that group). chown is changing a user to root , but i want to set say permission of "write" only to a user 1 in group staff which contains 10 users 1 , user 2 ...user 10.
View 3 Replies View RelatedI have virtualbox installed, and arch set up as the guest OS now i have made my home folder shared folder with the guest OS but at first my arch couldnt read my home folder.i realized the permission setting for the home folder is set as rwx to myself, and nothing to everyone else.so i chmod -R 755 to everything and that seemed to have solved the problem now i want to make my home folder readonly to my guest OS. do i just do chmod -R 744 to my home folder? i already messed up something when i set 644 to everything in my home folder, as my dropbox stopped working so im afraid of something like that happening to me again, otherwise i d love to experiment
another question is, are .so files supposed to be executable? I googled it, and it seems they dont have to be.But my dropbox stopped working after the .so files in /home/myhomefolder/.dropbox got assigned 644 D:
I have a directory called data. Then I am running a script under the user id 'robot'. robot writes to the data directory and update files inside. The idea is data is open for both me and robot to update.
So I setup the permission and owner group like this
drwxrwxr-x 2 me robot-grp 4096 Jun 11 20:50 data
where both me and robot belongs to the 'robot-grp'. I change the permission and the owner group recursively like the parent directory.
I regularly upload new files into the data directory using rsync. Unfortunately, new files uploaded does not inherit the parent directory's permission as I hope. Instead it looks like this
-rw-r--r-- 1 me users 6 Jun 11 20:50 new-file.txt
When robot tries to update new-file.txt, it fails due to lack of file permission.
I'm not sure if setting umask helps. In anycase the new files does not really follow it.
$ umask -S
u=rwx,g=rx,o=rx
I'm often confounded by Unix file permission. Do I even have a right plan? I'm using Debian lenny.