Ubuntu Security :: Set Permissions For NEW Files And Folders
Mar 14, 2011
I have a shared partition on Ubuntu, 'dm-6', if I create a new folder in it, it has 'teocomi' as owner.If I create the folder from another (windows) PC the owner is 'nobody' and from Ubuntu I have to chmod/chown it in oredr to edit its content...Is there a way to set automatically permission and owner for newly created folders and directories?
I tryed with:
Code:
sudo chmod u+s -R /media/dm-6
View 5 Replies
ADVERTISEMENT
Feb 8, 2010
I have a Ubuntu file server with a mix of 30+ users ( mix of windows and linux ).All are members of the same group. All need read write create access. I want to prevent deletion of certain key folders. How can I achieve this ? sudo chmod -R nnnn ??
View 8 Replies
View Related
Apr 26, 2010
I have a Samba share set up on a SUSE server that about 30 Windows XP clients are connecting to on a daily basis. They connect using Winbind and their Active Directory usernames and passwords which are stored on a Windows small business server (Server 2003). The share is called "company" and it's right off the root of the partition. Within "company" there are about 75-100 folders, most of which need to be publicly available and publicly writeable. There are a few that need to be locked down to a certain group of people so I've used group membership and access control lists for those.
The permissions on new files/folders still aren't right though, so I'll just try to explain what I WANT rather than trying to resolve what is HAPPENING since I think that'll be easier. Currently the entire company directory and all subdirectories and files are user-owned by "administrator" (an active directory domain admin). I'd like new folders and files created anywhere in that directory or any subdirectory to maintain that ownership by administrator, regardless of who creates them.
Likewise, the entire directory and all subdirectories/files are group-owned by "domain users" (a builtin active directory group which is pulled in via winbind) which gives everyone write access to everything. I'd like that ownership to be maintained as well on any new files or folders created in /company or any subdirectory therein. I think this is working for the most part as I've set the setgid bit on company. I'd like any files or folders created in /company or any subdirectory therein to have 770 permissions (rwxrwx---).
So, what I want is regardless of who creates a file or folder anywhere in "company" - it should be owned by user "administrator" and group "domain users" and have 770 permissions. I'd like to make a little tweak to this post. Above I said I wanted anything created under Company to be created with group owner "domain users" - that actually only goes for anything that will be public. On the folders I have locked down via group membership and ACLs the new files/folders created within should maintain ownership of whatever group owns that directory. I should be able to do this by setting rwxrws--- permissions on secured directories.
View 2 Replies
View Related
Jan 19, 2010
I want to add my daughter as a user and give her full permissions to all the same folders and files that I use. I have given her permission to folders and their sub folders however she doesn't have rwx on the individual files within the folders. What is the command line to set this up?
Also with the command;
Code:
chown -R root:root files
what is the -R for and when do I need or not need it?
View 4 Replies
View Related
Jun 14, 2010
I need to change the config in a folder and can not due to it being owned by root. How do I change the permissions.
Folder = /etc/stunnel/
file = /etc/stunnel/stunnel.conf
View 4 Replies
View Related
Nov 17, 2010
I've just read that I can't change the file permissions of files and folders if they are sitting in what was my old Windows D: drive. Is this correct? If so what is the work-around?
I don't want to have to cut and paste that entire D: drive's contents over to a recognised Ubuntu folder. I had in my mind that this D drive would continue to be my data dumping ground, to which I need read/write access to.
View 8 Replies
View Related
Jul 1, 2010
I am using RHEL 5 on my server. The client machines are windows XP.File sharing is through samba server which is working okay. On this file server there is a shared directory for users. This directory contains files which are used by various users through oracle APP. and DB server.
At present the folders under the "shared" folder are having all permissions i.e. 777. To restrict certain things, I want that users may read and modify the files but may not be in a position to move or delete the files. How to set the permissions on the folders/files in this scenario?
View 1 Replies
View Related
May 21, 2010
First off I want to apologize for the fact that the first several paragraphs go into something seemingly unrelated to the subject of this thread. However I want to be sure that those who choose to lend me a hand understand where I'm coming from and why I'm asking that question.I just recently switched from Windows Vista to Ubuntu 10.04. So far I've been loving it mostly. But their is one oddball thing I haven't been able to get working. That is a pair of shared folders located on my NTFS external drive connected via USB2.
The drive was automatically mounted on first boot and has full read/write access for owner (which is my username) right out of the gate. For this reason I assumed I would be good to do this.I've been unable to get it working in Ubuntu. As it stands now I've manually added them to smb.conf, added them to the Samba Server Configuration and finally by right clicking the folder in nautilus and choosing Sharing Options. All with varying resultsAt best it will show the shares under the computer but not allow access. I've also cleared out all of these for those folders to try them individually or in different orders. What I found was that using Sharing Options first gives this error and sets nothing up. But either of the other two will at least show the share albeit with no access.
Quote:'net usershare' returned error 255: net usershare add: cannot convert name "Everyone" to a SID. Invalid parameter.What I've discovered is that if I use just the Sharing Options from Nautilus on any folder located on my ext4 partition or the internal NTFS partition then it will ask if applicable to adjust the permissions and though nothing appears in smb.conf that it works more or less just fine.Having played with "ls -l" I discovered that by default that ownership of the folders on the external NTFS is set to myself and that permissions are 700. On the ext4 partition ownership is set to myself and permissions on folders 711. The folders on the internal NTFS partition has an ownership of "root" and permissions set to 777
From here I tried to use "sudo chmod" via a terminal to manually change permissions for folders on all 3 partitions and I can do so for the ext4 and the internal NTFS owned by root. But no matter what I cannot for the external NTFS.The main thing is I want to know why I can't adjust those permissions on the external. I'm convinced that something to do with the way USB drives work by default must be impacting this but I could not find a single thing anywhere to confirm this much less to offer a solution.The second thing is that I installed and used mountmanager to automatically mount the internal NTFS and according to that softwares options the setup for both it and the external NTFS are the same. But if that is true then why is the external owned by me and the internal by root and the resulting permissions are completely different?
View 4 Replies
View Related
May 16, 2010
Way to test permissions on all files/folders into a folder recursive, then if those are not user:user then do :
Code:
chown user:user thatconcernedfile
The problem with that
Code:
chown user:user -R /folder
is that it is doing changes on file permissions whihch are already ok. If you wanna maintain a specific permission on a folder this is really not good this :
Code:
while [ 1 ] ; do
chown user:user -R /folder
# /folder contains 6.0 Tb
sleep 2s
done
View 1 Replies
View Related
Feb 12, 2011
Being new to Linux, i've just about got used to the Debian setup procedure now, but had a quick question on the default ownership of files and folders. On my default Debian installation, almost all the folders and files are owned by root:root. Is this the correct advised configuration or should the folders and files be owned by a user without root permissions - eg user:user?
View 12 Replies
View Related
Jul 19, 2010
I would like to set both user and group permissions permanently to be 'rwx' (read-write-execute). I would like these rwx settings for all the future files and folders.
I tried umask 002, chmod etc, but they don't set it for future files.
View 3 Replies
View Related
Sep 6, 2010
I've recently upgraded to 10.04 and have noticed that all the files or folders I've been creating recently are read only. I can manipulate the folders on my ubuntu system itself and create new entries, folderes, subfolders, and save files. IE a payment receipt in pdf format. However if I then try to move or copy any of these to my DROBO (data storage device) the file gets the LOCK Icon on it and becomes read only. If it is a subfolder I can no longer copy to it and if it's a regular file, say a pdf or flv I can't modify it. Attempting to change the file permissions on either my ubuntu desktop or any other folder works but once it goes to the drobo I lose the ability to change it off of ---. Again, this was all working fine before doing the upgrade to 10.04. Yes I did do a clean install to 10.04.
View 6 Replies
View Related
Apr 1, 2010
I have been running rkhunter but how do i view the /var/log/rkhunter.log? I have tried using: sudo /var/log/rkhunter.log but all i got was "Command not found?
View 6 Replies
View Related
Apr 4, 2011
I've been using Ubuntu for a few years and I am having issues trying to load .jar files and .exe files in Wine. I keep getting an error message that says my computer doesn't have permission to load these files. I've done some research and found people saying to enable the file as executable in the files properties, to enable executable in the permissions folder, and to allow source code on the Ubuntu Software screen, but whenever I try to check these boxes, they immediately revert to having a line through them instead. I remember when I was running Ubuntu a few years ago I was able to completely disable this restriction in terminal, but I can't remember what I did.
View 5 Replies
View Related
Feb 9, 2010
Still working on the mask of files for shared folder. I now have a shared folder with the exact behavior I expect :
Code:
sudo addgroup share_group
sudo mkdir /media/volume/shared_dir
sudo chgrp share_group /media/volume/shared_dir
sudo chmod g+s /media/volume/shared_dir
sudo chmod 770 /media/volume/shared_dir
sudo setfacl -d -m group::rwx /media/volume/shared_dir
sudo setfacl -d -m other::--- /media/volume/shared_dir
emma@box:/media/volume/shared_dir$ ls -al
total 8
drwxrws---+ 2 root share_group 4096 2010-02-09 12:53 .
drwxr-xr-x 8 root root 4096 2010-02-09 11:58 ..
-rw-rw----+ 1 emma share_group 0 2010-02-09 12:53 test
By default, user from the group can modify this file. That's perfect.
I have define the share in Samba this way :
Code:
[share]
comment = Shared Folder
path = /media/volume/shared_dir
browseable = yes
guest ok = no
read only = no
hide dot file = yes
# force group = share_group
# create mask = 0660
# directory mask = 0770
# force create mask = 0660
# force directory mask = 0770
When drag & dropping a file in this share, here is the default mask:
Code:
emma@box:/media/volume/shared_dir$ ls -al
total 192
drwxrws---+ 2 root share_group 4096 2010-02-09 12:54 .
drwxr-xr-x 8 root root 4096 2010-02-09 11:58 ..
-rw-rwx---+ 1 emma share_group 6148 2010-02-09 12:54 .DS_Store
-rw-rwxr--+ 1 emma share_group 176684 2009-12-21 23:33 IMG_7487.jpg
So the dropped file have execution rights for the group, and read access for other. I expected it to have the same rights than the file created directly using the touch command. I tried to play with the mask options, without success. The file has been dropped from my mac, which is a Unix like OS. I guess that some authorization access are inherited from the original file, for the user and other parts. But where does the group authorization come from ? Moreover, is is possible to define in samba a default mask, whatever the authorization of the original file?
View 1 Replies
View Related
May 14, 2010
After trying Truecrypt, LUKS, and Ecryptfs I decided to try NTFS encryption. Now, on a dual boot computer from Ubuntu I can browse the encrypted folders but can not open the encrypted files. All attempts produce access denials yet the Unix file permissions appear to be "0777" (owner, group, and world readable-writable).
Is there someway to get Ubuntu's NTFS software to recognize and decrypt the encrypted files? Would a different NTFS package work such as NTFS-3g?
View 2 Replies
View Related
May 23, 2010
restrict a user from seeing hidden files and folders?
View 8 Replies
View Related
Jan 18, 2010
I m going to create a backup script for my files/folders...
This script creates tar.gz of the folders/files you want.
This i want is to encrypt these .tar.gz files and when i need them to decrypt them. Does anyone have an idea on how to encrypt these files ?
my script looks like this :
Code:
BACKUPDATE=$(date +%d%m%Y)
cd /home/n3t
echo "taking Backup of your home/n3t/Downloads dir"
tar -czvf /media/disk/BACKUP/home/Downloads/$BACKUPDATE.tar.gz ./Downloads
View 2 Replies
View Related
Mar 30, 2011
Recently I've been finding two strange-looking files on my Windows shared folders! Their names are 'khy' and 'qffhtx.exe', they appear as hidden, and they're hard to delete!! especially the first one because it has no extension. I use Ubuntu 10.10, but I am worried because I also dual-boot Windows XP. Today I tried to open the .exe file in nautilus to see what is inside and I received the message "Unable to open archive", 'khy' is apparently an empty text file. Then I unmounted my /home partition so my files are out of the way, and I ran the .exe file using WINE,
Now I have a strange-looking applet on my top panel!! and it says "Script paused", also it says "Exit', and also Wine command prompt says something strange about "LockWindowUpdate", don't imagine it I'll post the screenshots so you can see it for yourselves. Also --and this is weird-- the virus apparently is trying to call a Windows process named csrcs.exe!! Again, I'll post the screenshots.
If this is a virus, then it's like a fish out of the water on my Ubuntu, it's probably trying to do something but it can't find its way around, it's kinda funny, but Im worried because I also dual-boot Windows XP, I'm having a hard time trying to remember the name KHY, it's a very weird acronym, it's the acronym of a disease, according to what I googled, i'm sure it's a virus!!! Anyway it's HARD to remember!!!
what can I do about this? How can I see the "script"? can Ubuntu kick its ***?how can I clean my Windows?
View 9 Replies
View Related
Jan 4, 2011
I have a shared folder set up that allows all users on the computer to have access to all the music on the computer. In the folder with all the music the group 'music' has permission to add and delete files and all users are members of 'music'. This should allow all users to have complete access to these files, however, when I add files to the folder they retain their original permissions and do not take on the permissions of the folder. I could change the permissions of the files to reflect the folder every time I add a cd. But that is annoying. What I am wondering is if there is any way to make files automatically reflect the permissions on the folder they are moved into.
View 3 Replies
View Related
Jul 16, 2011
look at this : Uploaded with ImageShack.us how can set permissions in linux like this? I want one user can delete files but can't modify them and ... in linux i have 3 group to assign read write and execute them. is ntfs flexible than linux file system?
View 4 Replies
View Related
Feb 5, 2010
I am setting up a samba server to operate in a windows AD domain. I want to set permissions for multiple groups to have different levels of access to one group of files, and it looks to me like unix permissions will not do that? I always hear about how robust linux is, and it seems to me that their file permissions model is WEAK compared to microsoft's?
View 2 Replies
View Related
Jan 15, 2010
I've just installed Ubuntu 9.10 and Samba 3.4. I've shared a folder and have accessed the share from a Windows 7 client. However, I've struggled to configure the share and folder so that the Win7 client can create files and/or folders in the share. Kept getting Permission Denied errors. Finally, (using Webmin) I set the permissions on the file folder so that "Other" had write access. I don't understand why this was necessary (and how unsecure this is). I already had the write access checkbox ticked for "User" but it wasn't enough.
View 1 Replies
View Related
Jun 6, 2010
How to copy and overwrite original bookmarks.adr file to /usr/share/opera/default folder. I can't change permission. Or if is a way to copy it as root ...
View 3 Replies
View Related
Dec 11, 2010
Ok here is the deal, I am allowing my neighbor access to some networked folders on my ubuntu file server in exchange for access to their washer & dryer. I have already created mapped drives on their xp machines but now I want to only allow them "read only" access so they don't accidentally delete anything?
View 6 Replies
View Related
Jan 3, 2011
We have a development server not accessible to the public used for testing which was setup for us. When attempting to have my PHP scripts upload an image to a folder, I have to CHMOD the folder to 777. Ideally, when a folder is created it has permissions set to 755 - I want to be able to upload to them. Is there a way to change permissions to allow the PHP scripts that run to be able to write to a folder? I know it has something to do with owner or group, but I don't know where to start.
View 2 Replies
View Related
Jan 7, 2010
I've a problem on one of my servers with file permissions. Quite simply , when I run chmod 777 -R against a folder , it seems to be inconsistent on making that particular folders permissions trickle down to the folders beneath. Some folders inherit its permissions , some don't. For example...
/projects
Contains
/Jan /Feb /Mar /April
They all in turn contain folders marked /1 , /2 , /3 , up to /10, these folders all contain more folders , running to a depth of 6.
However , depending on what folder our users save their files into , some are saved with rwxrwxr-- , some get saved with rwxrwxrx. Forgive my lack of understanding but if I run the above command against the top level folder will this not make every folder and file below it inherit its permissions of 777 ?? Or is there something else that I need to do?
View 10 Replies
View Related
May 5, 2010
I had a major raid event recently which caused my Ubuntu 9.04 server to recover part of its file journal on the system partition. This caused some of the file permissions to go all funny and I now need to change them manually.
What the file permissions should for the following folders:
/etc/
/home/
/lost+found/
/mnt/
/root/
/sbin/
/srv/
/tmp/
The server is running and I fixed the some of the ownership issues already. I use a basic LAMP setup with samba, and proftp.
View 2 Replies
View Related
Oct 30, 2010
I'm on Ubuntu 10.10. I installed Samba and went Administration > Samba. Added a folder [Videos] to share (this folder is on an ext partition). I then went to the folder [Videos] Right+Click > Sharing Options. I selected 'Share this folder', I put in a name and comment, checked Allow others to create and delete files in this folder and checked Guest Access.
When I view this shared folder [Videos] from my Windows PC I can access it with no problems but when I try drill down into sub folders I get a permissions error. [Attached a screenshot of the error]. If I share each folder separately then I can access them but obviously I'd like to share a folder and all it's contents.
View 9 Replies
View Related
May 28, 2011
I have problem with virtual users in vsftpd. When they create folder they cant make another in than folder, or for example they cant see files they upload in that directory...That write permision i try to change in their config file, with every combination of local_umask and file_open mode values. How can I handle that. I want that virtual user who creates directory (in their root directory) have all privilages to that folder and all content in that folder.
View 4 Replies
View Related