I have created a ftp user in centos 5,but it got all permissions to delete files in other location,view the entire directory and create any folder in every place. How to deny this permissions to the particular user.And please help me to give permissions only to a specified location given by the root.
View 4 RepliesI am currently trying to replace my Windows Server with a CentOS 5.3 box running nfsd for file serving. I have it all up and running however I cant see anyway of securing user access rights to the shares as all you need to access them is just clone the User ID of a user authorized to access the share of any Linux system which seems a bit insecure to me? I was wondering if there was any advice on securing access to server shares in CentOS.
View 2 Replies View RelatedI am looking to create a user to be able to do WinSCP or SSH into the system and only be able to see /var/www/html/joomla/ and that is it. I don't want them to be able to start or stop service but be able to upload and download files to the specific directory or change privileges of the mentioned directory. Is that possible? what commands should I run.
View 1 Replies View RelatedI have a minor issue with permissions. There are a couple of devices that I need r/w access to in /dev. Whenever I first boot up and log in as end user (not root) and I need to access the devices permission is denied. Logging in as root there's no problem accessing these devices. However as an end user every time I need the devices I have to first su to root to change R/W permissions (chmod 666).
Now, the good thing is that the permissions stick even as I logout and then log back in, but as soon as I reboot my computer (every night) I have to go and chmod manually. I'm trying to find a way to avoid having to su and chmod manually but I'm not having much luck. The devices I am trying to access are /dev/ttyS1 and /dev/windrvr6, when I first boot up and login as end user the permissions look as follows:
crw-rw---- 1 root uucp 4, 65 May 27 04:11 /dev/ttyS1
crw-r--r-- 1 root root 253, 0 May 27 09:12 /dev/windrvr6
I want to host a public FTP on my server, but i cannot get it so that people can read and write but not delete ANYTHING from it.
I have tried:
chown root /home/ftpdir
chmod 1777 /home/ftpdir
but people can still delete the files in it, i have no idea what to do next. that's the only thing i can find on Google about how to do it.
the users are logging in with the same Account, i cannot make a new account for each one.
how to create Samba user using shell script
View 6 Replies View RelatedI have two servers, both running CentOS, but one running Cpanel as the control panel and the other running Webmin.
I would like to sync the web folders using rsync. However, when I sync the files from the Cpanel host the permissions look as follows:
Code:
But that doesn't work on the Webmin server which needs the following:
Code:
It seems the Cpanel install has the group as 'nobody' whilst webmin has it the same as the file owner. I can fix this by running:
Code:
But as the file transfers will be frequent, I don't want the files to be inaccessible until chown is run.
So, what I really want to know is - how can I change things on the 'webmin' server so that files with ownership owner:nobody will run?
I have a Samba server running on a box where I login to admin as user:
FRED
The Samba users are
SUE
JOE - Read only for specified paths (media playback access only user)
SUE can read/write to any directory under the share: Media
So all that is working fine. As long as I do file operations remotely as SUE everything works remotely. How can I make it to where everything SUE does over Samba FRED automatically has permissions to edit when logged in locally (or SSH)? Also, remember, Joe needs to be able to read where specified.
I'm using an older redhat system (2.6.9-22.ELsmp) here which is running an older mysql (server version: 4.1.12). I don't think that's the source of the problems. I believe that have understood things rightly when I say that the mysql root user is unrelated to the linux root user ... in my case I believe the root user to be the unix user mysql. So when I connect to the server (local host from a local terminal) I use:
Code:
-bash-3.00$ mysql -u mysql -p
and enter a blank password
This gets me on, however I seem unable to do anything like create database or alter privilege. I wonder if its related to my finding no database called mysql?
-bash-3.00$ mysql -u mysql -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or g.
Your MySQL connection id is 11 to server version: 4.1.12
Type 'help;' or 'h' for help. Type 'c' to clear the buffer.
mysql> show databases;
+----------+
| Database |
+----------+
| test |
+----------+
1 row in set (0.00 sec)
Although I understand that show databases will not show things I have no priv to see. Does this mean my settings for the users are all screwed? How do I rectify this situation? Some other (perhaps) useful information.
Code:
[root ~]# cat /etc/my.cnf
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
# Default to using old password format for compatibility with mysql 3.x
# clients (those using the mysqlclient10 compatibility package).
old_passwords=1
[mysql.server]
user=mysql
basedir=/var/lib
[mysqld_safe]
err-log=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
So my BASEDIR seems to be nothing like is suggested in the documentation at [URL].
I had installed PHP using yum install php. I am trying to use the pdf_new function to create pdfs from existing text files, but I get this error PHP Fatal error: Call to undefined function pdf_new()I have noticed that when I run the phpinfo() command, I cannot find the PDF phrase at all. My php.ini file does not even have these two linesextension=php_pdf.dll extension=php_cpdf.dll kind of command I should use if I need to build PDFs using PHP on Centos 5?
View 1 Replies View RelatedI am new to linux, running a brand new centos 5.2 server. One application I want to use it for is to serve as a network host for a game my friends and I enjoy. Normally, to run the game in host mode you call the binary and pass it a port number (along with other options). To host a second instance of the game, same thing different port, you get the idea.
After doing that the binary runs in your window and dumps to stdout, so if you want it to run 24/7 you have to come up with your own strategy like nohup. Fair enough, now, I'm trying to coax the game into restarting automatically upon reboot. The most correct way to do this seemed to be to write a script for init.d so that's the road I traveled down. Now, to strain the metaphor, the pavement has ended and I'm stuck in the sand.
Here begin my questions:
I've been following the structure of other init.d scripts and I notice they all seem to call the function daemon() (contained in /etc/init.d/functions) to start their services. Looking at the structure of daemon() I see that you can pass it a user and a pidfile. The user part seems to work fine, but no pidfile is created. Let me be more specific.
Like the other scripts, I explicitly touch /var/lock/subsys/game-port on startup, which works fine. However, all of those other services seem to have a pidfile in /var/run and mine doesn't. They don't create it explicitly in their init.d script therefore I assume that some other process is creating the pidfile. At first I thought it would be the call to daemon(), since you have the option of passing it --pidfile, but that doesn't seem to work.
Are the services themselves creating the pidfile? If that's the case then I have more complications because the game binary apparently doesn't do this. Second question but probably related to the first. None of the other init.d scripts I looked at seem to do anything special to detach their services from a particular terminal session, therefore I didn't think that I would need to either.
Again I thought this was something the call to daemon() might accomplish, but either I'm wrong or I'm doing something wrong. I can probably work around this with nohup or appending '&' or something, but I'm just curious that other services like crond, sshd, named, etc., don't seem to do this. Are they determining this behavior from within the binaries themselves? I hope this is clear, as I said I'm new so I may not be getting all of the terminology correct.
Wondering if the internal network will benefit of connecting to a local DNS server, rather than my ISP dns server. Can I create this local DNS server, without having an external domain, pointing to my server ?
All I want is faster lookup of known hostnames, both internally (hostnames) and externaly (cnn.com etc..)
I'm using ssh2 a PHP extension to create a new folder on my server, however if I try and set the permissions of that
folder above the default of 0755 it creates the folder with that default setting.
It seems like there is some setting preventing me creating a folder with higher permissions e.g 0777.
We have a squid-proxy configured with 1 delay pool to limit the bandwith to 6M. I have to create a kind of exception for a specific
remote host for which we want to reserve 1M which is not included within the 6M. How should I do that? Here is our actual configuration of the delay pools
acl all_network src 0.0.0.0/0.0.0.0
delay_pools 1
delay_class 1 1
[code]....
I've just discovered that crontab is creating a new file in the root directory every time it executes a cronjob, and it doesn't erase over the old file so there are thousands of files in the root directory, they have the same name as the script file (appended with a numeral) but are all blank.here is what one of the cronjob's looks like[URL]
View 10 Replies View Relatedi have rhel 5.2 and i want to create user using useradd command without creating user home directory and not throwing any warning/error about not creating any home directory.i have tried useradd -u "$NEW_UID" -g <gid> -d "/home/$1" -M "$1"where $1 is user name and $NEW_UID is i am calculating.it throws error as useradd: cannot create directory /home/$1which i dont want to come , how to prevent this?
View 1 Replies View RelatedI was working on a shell script to change the permissions of large directories and subdirectories because of an exploit discovered in the programs that run in those said directories that allow a client to upload and download files to the server. Loan behold I accidentally added a space and had something along the lines of "chmod -R 770 ." run on / logged in as root.
Yes, it was an incredibly noob move on my part, but nothing ventured nothing gained. I am surprisingly calm about this. I tried sliding in my CentOS installation disk and "Upgrading" CentOS but that only made it worse, beforehand I made everything owned by root so I could at least log into GNOME. This does not work for obvious reasons, namely having to change the permissions back for every user and every group, which far beyond a possibility.
how can i view/monitor what a user is typing in other terminals in centos?
View 1 Replies View RelatedI try to use rsync for backing up some directories and I have to following problem: some files have permissions that prevent me from running rsync under my own user id. So I run it under root using the option "-a" which according to the man page should preserve the permissions, owner and group information:
However, when I run this under root, the directories created in the backup location get user root and group root while ordinary files keep the original user and group. What am I missing here? How can I get rsync to preserve the user and groups for all files, including directories?
Here is a command to illustrate my problem
Code:
sudo rsync -a /home/youruser /tmp
If you try that and terminate with Ctrl-C after a few seconds, there will be a directory /tmp/youruser where the directories contained within are owned by root group root.
I am using Lubuntu 10.10 and have installed my application that I need. What I need is a link to the desktop that will execute the program from the /usr/share/test directory. When I execute the program I need to use "Sudo" in order to run in. how would I add a symbolic link the desktop with the appropriate permission to run the executable without compromising security. I tried everything but cannot get it to execute under ubuntu:
PHP Code:
[code]....
I've got a small issue that when a Windows user creates a new folder through Windows Explorer (from the menu or by right clicking) the new folder is only accessible to that particular user.Example:user SABKAR (member of the HR group) creates a new folder called MarcTestMenu in a shared Samba directory through Windows Explorer:# ls -l# drwxr-sr-x 2 sabkar hr 48 2010-04-01 10:36 MarcTestMenuAt this point user MORAMY cannot copy a file or open the directory MarcTestMenu. MORAMY gets a 'not accessible' error message in WindowsIf I su to the Samba box and issue this command:# chmod 6770 MarcTestMenu/I now get the follow permissions on the directory:# drwsrws--- 2 sabkar hr 48 2010-04-01 10:38 MarcTestMenuand user MORAMY can access and copy files to the directory.
View 7 Replies View RelatedI have a little problem: I have a share folder on Ubuntu server: - Dump That folder is share with SAMBA and everyone can put files on it
My problem is the following: When someone create a folder, the folder permissions are automatically set with:
(let's take my username: Yann)
Owner: Yann
Group: Yann
Clearly that's wrong.. I want the Group to be auto set has "users" so everyone can access the folders on that share. Anyone know how to change this ? chmod and chown is getting a bit boring
How can i delete a ftp user on linux server centos 5 ?
View 3 Replies View RelatedI have two folders as :
drwxrwxrwx 2 root root 1368064 Mar 10 18:28 monitor
drwxrwxrwx 7 root root 12288 Feb 18 17:07 monitorDONE
I have created one short cut link for this folder with below command :
ln -s monitorDONE recordings lrwxrwxrwx 1 root root 11 Mar 13 14:30 recordings -> monitorDONE This link is under /var/www/html Now, when I do IP/recordings It show me an Error as Forbidden You don't have permission to access /recordings on this server.
Is it possible "reset" all (X, GDM related) permissions/settings of one user? What would cause one specific user not to be able to log into anything via gdm/the login screen? After providing the proper password, the screen goes black and then jumps back to the login screen. No session alternative works, not even xterm or gnome failsafe. I can however log in via the console (Ctrl+Alt+F6, recovery etc). With another user I can log in via GDM just fine, and deleting and re-adding the "broken" user doesn't make any difference.
Some (maybe) relevent logs:
part of syslog:
Quote:
Dec 12 01:20:58 <specific user> pulseaudio[1358]: core-util.c: Home directory /etc/timidity not ours.
Dec 12 01:20:58 <specific user> pulseaudio[1358]: lock-autospawn.c: Cannot access autospawn lock.
[code]....
I installed Centos 5.5 on a home PC to be used remotely.
All server daemons work fine but only start if the user is logged in.
How do I set the SSH server to start whenever the PC is turned on, rather than when the user is logged in? I read the chkconfig man page online but couldn't find anything.
Plus I put a script in my startup services to be run whenever the computer boots (I'm guessing when the users logs in). How do I go about setting that to run too whenever the system boots instead?
I have a user setup to receive email, which I would like automatically to be sent into a program that I'm writing. Should I be looking into procmail, or is there a shorter way in /etc/mail (for sendmail) to route all of a specific user's email into a program? I don't care whether the emails are ever written into /var/mail. CentOS 5.3, kernel 2.6.18-128.1.6.el5, sendmail 8.13.8
View 5 Replies View Relatedi have a server running on centos5, i have run vsftp and samba, and i need create a user through command line and set your default directory, i can do this through graphic interface, but i need do throug line command.
View 12 Replies View RelatedI just installed a MySQL server but for unknown reason im not able to set a root password.
CentOS 5.4 - 2.6.18-164.9.1.el5PAE
MySQL Ver 14.12 Distrib 5.0.77, for redhat-linux-gnu (i686) using readline 5.1
# yum install -y mysql mysql-server php-mysql
# service mysqld start
# mysql -u root
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
I am currently running a apache/postfix email service on my server. I am using aliases for two addresses for example:
trscookie@serverone.com
trscookie@secondserver.com
so the emails no matter which domain receives the email trscookie always will receive the email.
However I am unable to work out how to 'reverse' this process, for example.
If i was to go to secondserver.com/webmail I would like the emails to get sent from trscookie@secondserver.com however they are currently all coming from serverone.com. Is it possible to configure this so that it is sent from the correct domain?
Here is my main.cf:
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
mail_owner = postfix
[Code].....