Security :: Samba Permissions (Can Read But Can't Copy)
Jan 10, 2011
I have a question regarding Samba Permissions. As the subject described, is it possible to let users read the file but can not copy the file physically? It's fine if they open and copy paste the contents but no physical copy paste and also I need to log the activity of the users. If samba will not be able to comply my needs, could you suggest some programs to meet my requirements?
i have setup a samba server and created samba shares on it, i have configured the samba server to authenticates users from a windows server 2003 DC,
i have 2 shares call IT and MYSHARE, I want to give read and write permissions to sevaral users to those two shares and read only permisson to all the other users.
i tried editing the smb.conf file with the following settings , but no one can write or modify the files in the shares including the users specified in the write list = cweerasinghe,njayarathna.
[IT] writeable = Yes browseable = yes public = no comment = IT share
[Code]....
how can i give access to the write list = cweerasinghe,njayarathna users to read, write and modify the files in the shares ??
I have 4 machines; all multiboot. I want each machine to have full rw access to file shares on each other machine, AND, full rw access to the other partitions on the same machine home folder for UNbooted OS's. I imagine Samba will NOT handle all these configurations? What else do I have to do, so that, for example, if I have 2 machines on, and I boot up a third machine in another room, it will auto mount the other 2 machines' shares, and it export it's own shares to the other 2 machines? I want also each machine to have full rw access to shares on the UNbooted partitions of each machine.
I have a folder in a Samba shared drive which I've done the following with (in Unix):
1. Changed owner to Administrator. 2. Changed group owner to Domain Users. 3. Granted 700 (drwx------) permissions 4. Connected to Windows server via remote desktop 5. Mapped the Samba network drive as administrator 6. Right clicked on the folder > properties > security tab > advanced, and added one person (let's call him Joe) who has rwx access on that folder and everything in it. (along with administrator) 7. Went back to check Unix permissions on the folder and found that they had changed from drwx to drwxrwx+. Same goes for everything inside it. 8. Checked the ACL.
I have a problem with my external hdd, I mounted it manually and in the mount table it says ive got rw permissions. But when i try to change permissions it says:
chmod: changing permissions of `whatever': read-only filesystem.
This is my mount table:
[root@localhost ExtHDD]# mount /dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw) none on /proc type proc (rw) none on /sys type sysfs (rw)
How to copy a Read-Only file in Linux and make the copy writable with a single cp command in Linux (Ubuntu 10.04)? The --no-preserve and --preserve seemed to be good candidates, except that they should "and" the mode flags, while what I am looking for is something that will "or" them (add +w mode).
More details: I have to import a repository from GIT to Perforce. I want that all Perforce depot files are Read-Only (that is how Perforce was designed), while all other files that were derived/copied from depot files are writable. Currently if a Makefile tries to copy a Read-Only file then the derived file will also be Read-only. This leads to build-errors when cp tries to overwrite Read-Only file second time. Of course the --force is a workaround here but then the derived file is also Read-Only. Also I do not want to mess with "chmod" after each "cp" command - I will do that only as the last resort.
I want my samba to keep my windows attributes exactly what the user setted in windows I mean if it has read only file in win box and copy it to samba share ,samba keep it read only and same for other attributes but it does not do it now with my configuration:Quote:
[global] workgroup = DOMAIN server string = File Server
I have a very large and deep directory. I would like to make all of it read only. The problem is I guess I have to distinguish between files (which will get a=r) and directories (which will get a=rx).How can I do that?
Yesterday, I bought a 1TB WD Passport, for backup and storage. It uses NTFS, and I've had no problems manually mounting and moving files to and from it from root. However, I don't like having to be root to in any way modify the data on the drive. In order to avoid this I decided to create a line in fstab that would allow permissions to the user, so I added this to my fstab:
This allows me to mount, unmount, and peruse the external HDD - however, if this is active, neither the user NOR root have permission to make any changes. The HDD acts as read only, even though there is no "ro" option on my fstab.
I'm running Apache2 under uBuntu 9.10. My problem is that I use my own user "wavesailor" to work on my websites. I kept all my sites under /var/www and I set up the security of the directory after following the guidelines.
I have a system where the permissions of many files are messed up. I have another system that has the same files, if I put that hard drive in, without simply overwriting the files, is there a way where I can recursively set the permissions of each file to that of this other directory?
I am using Joomla and a script within it. That Script is suppose to copy tables from one DB to another.
Code: Error(1) [1142] query [CREATE OR REPLACE VIEW test_users AS SELECT * FROM `localiz_master`.`jos_users`]. DB Error: CREATE VIEW command denied to user 'localiz_master'@'localhost' for table 'test_users' SQL=CREATE OR REPLACE VIEW test_users AS SELECT * FROM `localiz_master`.`jos_users` Error [1142] retrying query [CREATE OR REPLACE VIEW test_users AS SELECT * FROM `localiz_master`.`jos_users`]. DB Error: CREATE VIEW command denied to user 'localiz_master'@'localhost' for table 'test_users' SQL=CREATE OR REPLACE VIEW test_users AS SELECT * FROM `localiz_master`.`jos_users` localiz_master: name of the DB from which data is suppose to be copied. jos_users: name of the table form the main DB. localiz_master: user for the DB. localhost: host test_users: name of the table to be created.
We do have phpmyadmin but the user's table is hidden. What SSH command we might run to make localiz_master user have access to all the databases.
how to automount USB devices read-only for security in RHEL5? I'm looking for the generic solution for any USB device, so I'm not looking to hardcode something into /etc/fstab.I've hunted around and I can't find a clear answer and my various attempts have failed. I've looked at /etc/auto.misc, UDEV, and HAL. Here's where I'm at which isn't working.I have RHEL5 and from what I can tell HALD manages the automounting. HAL seems to have 2 primary directories:
/etc/hal/fdi -and- /usr/share/hal/fdi
The difference between the two is unclear to me.Based on some examples, I created the following file:
No matter what I call this file or where I put it, any USB device still mounts RW. How do I fix this? Am I correct that HAL is the right place? Looking through dmesg, it sure looks like HAL controls this, but maybe I'm wrong? I've also made various attempts to solve this with UDEV and /etc/auto.misc, so if it is one of those, I clearly don't know the correct thing to do there.
I've already formatted it 3 times, it works for 1 try then it turns read Only again. I'm looking for a fix that doesn't make me delete everything before I want to use it, because this is getting ridiculous.
Going into further detail: Randomly when sticking the USB into the PSP the console/computer chooses that it's READ ONLY and you can't change anything in permissions.
Generally, I LOVE Ubuntu 10.04...best Ubuntu yet, IMO. But there's this one thing about it that really bugs me, and that is that all executable files on CD/DVD are set with very restricted permissions, including the 'Allow executing file as program' checkbox being left blank. Since CD/DVD's are read-only, I can't change these permissions the normal way or even just execute the files as root!
So far I've been able to get by with just copying the disk's contents to the hard drive and then running the program with altered permissions from there, but right now I want to install Unreal Tournament 2004 (the DVD version, if that makes any difference) and its Linux installer will not function properly from a local directory, so I'm stuck on this one.
Surely there's some way to alter the permissions for a read-only filesystem! Can't I just set system-wide permissions that would even apply to CD's and DVD's?
Can only read files on USB stick, and USB Drive. Can't copy, move or delete them due to restrictions/file permissions...."You are not the Owner...." etc. Can I remove all such permissions. I am the only user of this machine?
Recently updated the kernel in Ubuntu 9.10 and for some reason now, a folder which was not read-only now is. I can't delete anything from it. Have tried using the GUI for changing permissions, however, it has a mind of it's own and won't unlock the folder.
Anyone had this happen where a folder locked when you didn't want it to be?
So I have bought these DVD's of the Alias TV show on the internet (Seasons 1 to 3) and I cant read them or do anything else with them. They seem original commercial DVD's (not copies) and they are not damaged in any way. At first, I tried to rip them to my server as a backup with Handbrake and it failed. Handbrake scans the DVD and never terminates. In the Handbrake Console, I see
I tried to open the .VOB files directly with VLC, and got Code: File reading failed: VLC could not read the file.
And Mplayer said: Code: Seek Failed"
Finally I tried with GXine and it will read the DVD up to the main menu (I see the FBI warning message) and then it say: Code: Read error from: Error reading from DVD.
So whats going on with these discs? Some sort of anti Linux encryption or protection? I have not tried on a windows machine and I did not try on a commercial DVD player since I dont have these for now.
I backed up my "/home" and "/usr" folders from a previous installation.How can I copy them on to my new installation without losing my permissions?I tried using nautilus, but everything had "Root-only" permissions after I pasted the files.
My laptop has Ubuntu as a dual boot. Many times I want to copy files from one folder to another. But I run into permissions problems.
For example, I downloaded a program that required me to put a rules file in /etc/udev/rules.d But when I tried to do that, I got an error: "permission denied"
Is there any way to change permissions on folders so that I can freely copy them from one folder to another? That would make life a lot easier.
I have two HDDs in computer, one with ntfs and windows on it and second with btrfs. I want to get data on that btrfs disk. I boot with bootable USB stick with ubuntu on it but I found out that I cannot copy anzthing. I dont have permissions. How to change that. I am logged in as nobody here in USB stick, and files are probably locked as mz previous username when I create them.
I can not manage file/folder permissions for created shares. I need get access from Win system to Linux shares. Actually I have access to its, but only to read folders and files. I tried to change permissions in create mask = 0765 and set it to 0777, but no success.
1.Added user # adduser samba # smbpasswd -a samba #set his password # smbpasswd -e samba #activating it 2. Installing SAMBA service
[Code].....
Folder /media/DATA/VIDEO not browseable and cant't enter it on Win system. It located on USB External HARD Drive, and attached to Linux system.
I have a CMS that has a brilliant backup option with one flaw, it can only create a full backup in a directory inside the web root. In this case /var/www/site/backups. This is not practical for security as the resulting tar.gz file contains a full mysql backup as well as other items that the general public shouldn't be downloading.What permissions do I need to set so that the directory /var/www/site/backups cannot be browsed to in a browser but can be read / written by the CMS when a PHP script calls it?
I have created directories in root. I am looking for the chmod command to allow all users read and write permissions to a specific directory. I have done chmod 775 for a file but I need this for a directory. This includes permissions on all files and sub directories.
I am running Karmic x64 on a HP laptop that has a cd/dvd burner. I have a r/w cd with files on it and I wish to add/remove files to it. After it mounts automatically on insertion, I unmount it and remount with: sudo mount /dev/sr0 -t iso9660 -w /media/cdrom (I tried assorted other hare-brained things also) but it always says that the filesystem is read only. Do I need to use a different device than sr0? Is it even possible under Ubuntu?
I am trying to get my Multimedia player to work with Ubuntu I can't have access to it because it said that it is read only. I have got to gksudo and tried to change the permission on it but can't. The player works fine on a windows computer. All my other usb devices work fine I was able to change permission in the folders but not the drive.
I'd like to add essentially an anonymous user, which does not require a password. Second I think it's probably a good idea to only give this user very limited permissions, is there a way I can restrict the commands that they can run to a list (i.e. they should be able to run scp, ls, cd, maybe a few more, but not much)?
What I want to be able to do, is have create a group, for example called "group1" and set its default permissions to read & write, instead of the usual just read.
So when I add a user into "group1" they automatically have read & write access to all files & directories which is in "group1".
Oh & I use crunchbang 10 (statler) for my desktops & Ubuntu 11.04 for my NFS/print/SSH/etc/etc server