NSA's Guide to the Secure Configuration of Red Hat Enterprise Linux 5 recommands restricting device ownership to root only.
So my question is why should we restrict device ownership to root? And what does device ownership mean anyway in Linux?
Why would I need to be root to change the ownership of a file? Example: I'm logged in as dwadmin and I've created a file:
-rw-rw---- 1 dwadmin dgw 0 Jun 17 07:46 testing.txt
I want to change the ownership to another user, but am getting the following error: chown 511 testing.txt chown: changing ownership of `testing.txt': Operation not permitted
I created a folder structure as root and now need to transfer ownership to an ordinary user.
This question is linked to this one - [URL]
I have a folder /srv/app-share that needs to be visible/writeable to user1
I tried (as root):
root@server [/]# chown -R user1:user1 /srv/
But that did not work.
i have inherited a mixed bag of sorts: several xp users updating an access mdb with the BE on a lamp stack shared via samba. i have a backup device which gets mounted at: /media/disk... each client record (has) a folder by the companyname on the samba share, and all relative documents are placed there. when the backup script runs, it just copies newer or missing files.
someone has been renaming folders, and not matching the folder name to the related companyname from the mdb. so...the backup script captures and duplicates the data in the renamed folders. some client records also have periods in the name (not required from a data pov), such as 'Company Ltd.' instead of 'Company Ltd'. i can produce a list of company names as the folders should be found easily enough, but get a little stuck with the linux scripting.
i can easily remove and further prevent any unwanted punctuation in the company name on the client record, and create the correct folder name on the samba share with vba, but would also like to:
-for each 'client activity' folder on the backup device
-rename the folder by removing punctuation marks
or
-delete the folder if is a dupe
i tried: ls -al | grep '&' - it properly returns only those lines with an ampersand in the folder name, but returns all folders when i try that with a '.'.
what would be the easiest method to do the renaming? i thought if there was a way to change ownership of the mounted device, then the vba code (easy to write) would be simple.
OK - i just ran chown -R on the external device, changing ownership to (me) instead of root. didn't want to because it took too long, but can now use the MoveFolder method of the filesystemobject from my app to do the renaming instead of some sort of bash script (which i was dreading).
Is there way we can restrict root to su to normal user. Or at least a way to prompt for the password when root tries to su <username>.
View 3 Replies View RelatedIf there is a general NFS share in the LAN and for example this share has three files - a, b, c is there any way to restrict file access to the root user of one particular host(falcon) in the same LAN environment while the normal users from the same host(falcon) should be able to access the NFS share & files a, b, c.
View 1 Replies View Relatedis there any way so that we can restrict root to delete a file/directories and What is extended file attributes.
View 12 Replies View RelatedAn old machine in our office, running Ubuntu 6.06 all of a sudden will not boot up. I get the following info during boot:
Uncompressing Linux... Ok Booting the kernel
mount: Mounting /root/sda1 /root failed: No such device
mount: Mounting /root/dev on /dev/.static/dev failed: No such file or directory
[code]....
I haven't changed anything on the system as far as I'm aware, and I ran some HD diagnostics and everything seems fine. however when I try to mount the drive with the following command:
sudo mount -t ext3 -o rw /dev/hda1 /mnt
I get the following error:
mount: wrong fs type, bad option, bad
superblock on /dev/sda1, missing code
page or helper program, or other error
In some cases useful info is found in
syslog - try dmesg | tail or so
I ran fdisk -l and it says the partition type is Linux. The output after running dmesg | tail :
[12207.483801] init_special_inode: bogus i_mode (101)
[12207.483809] EXT2-fs: corrupt root inode, run e2fsck
[12260.427078] init_special_inode: bogus i_mode (101)
[code]...
Update: After running e2fsck -p /dev/sda1, I get the following info:
/dev/sda1: clean, 142449 / 9584640 files, 5402711 / 19161520 blocks
I have an external usb hard drive, vfat, mounted as /media/USB STORAGE. It has on it's own(?) changed it's ownership to root. I need to change it back. I have tried 'sudo chown -R pbhill : pbhill /media/USB STORAGE' and get the message that no such file or directory exists. I can access it read only, so I know it exists. Am I using the correct command?
View 9 Replies View RelatedI just got a 1.5 terrabyte Western Digital My Book 1110 external usb 2 drive. I used Gparted to reformat the drive to ext3. The problem I have is I can't change the file permissions for the drive because it says the drive is owned by root. I can't back up my files into the drive because it won't allow me to. I am using Jaunty Jackalope and got this drive to back up my files so I can feel comfortable in upgrading to Karmic Koala in case there are major problems with the upgrade.
I know someone out there in the community can tell me the commands to use in the terminal to let me gain ownership of this external drive from root so I can copy my files into it. the entire drive itself is seen as /dev/sdb One meg of the drive is unallocated and the part of the drive that I reformated is seen as /dev/sdb1 my personal files are owned by the name of dave
I have been VERY lucky and managed to restore from a formatted ext3 /home/ partition. I used testdisk to reset the original partition which had had nothing done to it since formatting(!). However some of the file permissions are a altered and I cannot change them. I have tried "su chmod" and even temporarily enabled the root account itself and tried to alter the ownership/permissions from root 'proper' without it helping.
Here is an example of the output of ls -l
drwxr-xr-x 2 martyn martyn 4096 (date) (time) sponsors
?-----S--T 63231 92820383 44090688 4286824785 (date) (time) order.xls
The first line looks like a normally formed output and indeed is readable. The second line looks corrupted and I don't have a clue how I can reclaim this - or even if it is possible. Should I count my blessings most of my files are intact and leave those be?
I have Slackware 12.2 installed on my computer, as well as a Windows Xp. I have a hard drive named '/fat-d', which is formatted to be 'fat' and is normally used under XP. This drive can also be accessed under Slackware, both as root and the normal user.I can not write to the directory '/fat-d' when I am not root, it is normal since 'ls -l' shows that its owner is root and other users have no permission to write. The problem is that, when I tried (as root) to change the owner to the normal user:# chown [normal_user_name] /fat-dI got an error: chown: changing ownership of '/fat-d/':Operation not permittedBut how can the root have no permission to change the owner?
View 6 Replies View RelatedI just compiled my first own kernel (I'm using Arch Linux), following the tutorial on the german site. Now I tried to boot it, I ended up failing with this message: Code: Waiting 10 seconds for device /dev/sda1 ... Root device '/dev/sda1' doesn't exist, Attempting to create it. ERROR: Unable to determine major/minor number of root device '/dev/sda1' Here is the important part of my menu.lst:
[Code]....
I simply copy&pasted the Arch-entry, i.e. I also had the disk by uuid there. The failure message was the same, just the root device name was the different name Also, at first I did not have the initrd line in my menu.lst (as written in my tutorial that I may not need it). In this case I had this error message:
[Code]....
Being new to Linux, i've just about got used to the Debian setup procedure now, but had a quick question on the default ownership of files and folders. On my default Debian installation, almost all the folders and files are owned by root:root. Is this the correct advised configuration or should the folders and files be owned by a user without root permissions - eg user:user?
View 12 Replies View Relatedhow I managed this, but somehow during a reinstall I changed the ownership of all my home stuff to root, instead of my normal username. So now nothing loads, unless I sudo it. I had to use sudo just to open firefox.
View 3 Replies View RelatedIf there is a general NFS share in the LAN and for example this share has three files - a, b, c is there any way to restrict file access to the root user of e particular host(falcon) in the same LAN environment while the normal users from the same host(falcon) should be able to access the NFS share & files a, b,
View 3 Replies View RelatedEventhough users know the root credentials how to restrict them from direct login as root user. They can login as non root user first and then as root userthe material or provide some url for learning the perl script.
View 4 Replies View RelatedIs it possible to restrict root logons to the SSH server to just a single ip address (or maybe a range?) I have other users connecting to the server daily so restricting ALL access to a single ip i cannot do. I need root enabled (for my own reasons) but want to lock it down a bit more.
View 9 Replies View RelatedI want to be able to change the root device, say from sda to sdb, so that I am able to remove sda. I don't believe this is possible with chroot, as I am changing the root folder to a mount point that exists on sda (sdb is not on fstab), so removing it would lock up the system.
Any thoughts how I can do this?
i using policy kit to restrict removable mounting to prompt for root password, but on 11.2, I am unable to do so.i read out, ver 11.2 not longer using hal and policykit, rather sth like freedesktop.org policy.
View 9 Replies View RelatedI need to change a filename but when I boot up I get the message root device is read-only. Is there a way of changing this so that I can change the filename. I have a Mac Pro running Leopard OSX. The graphics card an NVIDIA 7500GT or driver has failed. It was suggested elsewhere that I change the relevant kext files to filename.kext.old, which I did, now when I try to boot start in OSX I get a message in various languages telling me to restart. I have tried booting in safe mode and from original Installation CD. In Safe Mode I get the same multi language splash screen, from CD I still have the graphic card problem, screen freezes and artifacts appear. So I boot up straight into CLI by holding down CMD-S hoping to be able to change filenames back but it says device read-only.
View 2 Replies View RelatedI've installed Ubuntu 9.10 server on old hardware. The boot seems to have a problem. See the screenshot attached. When I see that and type "exit" the normal login is displayed. There was nothing special about the install. Anyone has an idea how to fix it?
View 1 Replies View RelatedI've taken the kernel 2.6.33.3 and edited the .config file to take out most of the compatibility etc. that I will not be using. I'm run the makes and updated grub. I go to boot it runs through most of the way until I get the following:Quote:/bin/plymouthd: symbol lookup error: /bin/plymouthd: undefined symbol:ply_chara could not read byte from child: SuccessNo root device foundBoot has failed, sleeping forever.'m fairly new to Linux and still more of a dabbler. (Though this seemed more difficult than "Who is root" so I didn't put this in the newbie thread.)Any ideas for what might be wrong?I've tried looking in the config file from something that relates, but they have all been included (Y) in the module.
View 2 Replies View RelatedInstalled Maverick last night... the system has been working fine all day... then on a reboot tonight got the following.
RAMDISK: gzip image found at block 0
usb 1-2: new high speed usb device using ehci_hcd and address 2
uncompression error
VFS: Cannot open root device "mapper/mylaptop-root" or unknown-block(0,0)
[code]....
Then it gives the Kernel Panic
Kernel Panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
Pid: 1, comm: swapper not tainted 2.6.35-22-generic #35-Ubuntu
Then a call trace...This is a brand new install of Maverick I copied my files onto a USB and did a fresh install on the whole drive using the alternate CD (the desktop and netbook editions both failed to read on my system) was previously using Karmic with no issues. I tried to e2fsck the dev/sda1 from the CD in "repair broken system" mode but the return was "clean" I read that as the file system being intact but this is an area that I have no real knowledge in.
Is there any working commandline alternative to # find /some/dir -group xxx -user yyy | chown xxxxx:yyyyyThe main purpose is to replace ownership and goup of certain files in subdirectories. Or nevertheless I need to write shell script for that simple operation ?
View 5 Replies View RelatedCan I assign ownership of a particular file to everybody of a group?If the file had rwxrw-r-- permissions, will every member of the local-group have owner access privileges (rwx) to this flie now?
View 8 Replies View RelatedI got a problem with my kernel. The initramfs source is busybox, python and gcc from ubuntu. The busybox have i compiled it self. Python and gcc is from /usr/bin. I gonna install my kernel on a i586 machine. Old yes. On the xTerm (termial) it stand "root device 8,1).
Quote:
VFS: Cannot open root device "sda1" or unknow-block(0,0) append a correct "root=" boot option; here are the available partions: Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)Pid: 1, comm: swapper Not tainted 2.6.38.3 #1
Call trace: This is my syslinux.cfg
default menu.c32
prompt 0
menu title BOOTLOADER
[code]....
I got a HP LH 3000.Current OS release is RH9 2.4.20,and I wanna update it to RH9 2.6.5 While updating,I met the problem followed:
VFS:Cannot open root device "hdxy" or unknow-block(0,0)
Followed are packages I used:
device-mapper-1.00.19-2.i386.rpm
linux-2.6.5.tar.bz2
mkinitrd-4.1.18-2.i386.rpm
lvm2-2.00.25-1.01.i386.rpm
module-init-tools-3.2.tar.bz2
First I installed the mkinitrd-4.1.18-2.i386.rpm, then compiled the kernel and installed it.
I needed to use CIFS for accessing a NTFS network share. I decided to include CIFS in the kernel and tried compiling and installing it. Now when I (try to) boot in my new kernel with CIFS support, I get the message: gave up looking for root device.
View 5 Replies View RelatedI have been working with a project pc. I have a new HD loaded with Linspire. After loading the o/s I replaced the motherboard and cpu. I now have a Biostar A780L (Didn't see it listed on the HCL) and an AMD Athalon II Multi-Core Processor. Now when the pc boots I get an error:VFS: Cannot open root device "343" or 03:43 append a correct "root" boot option Kernel panic: VFS: Unable to mount the root fs on 03:43 I tried reloading the o/s but the disk won't read from the DVD ROM. Checked my BIOS and it appears to me that it should read from the DVD ROM first but it goes to the HD and tries to load the o/s there.
View 6 Replies View Related