I had to reinstall Ubuntu (Natty) on a brand new computer and while installing I setup the datas partition to be mounted in /usr but now I can't have access to files I put in there even if I setup the group/user permission! I can accezz /usr/Music but all files are locked
View 5 RepliesI am trying to setup my webserver and I am trying to make a website to run under suexec but somehow I cannot start my apache it directly fails and SELinux is giving me errors and don't really know what to do with it, it is giving me some command to type but not sure if this will make my server less secure. The SELinux error is as follow:
Code:
Summary:
SELinux prevented httpd reading and writing access to http files.
Detailed Description:
SELinux prevented httpd reading and writing access to http files. Ordinarily httpd is allowed full access to all files labeled with http file context. This machine has a tightened security policy with the httpd_unified turned off, this requires explicit labeling of all files. If a file is a cgi script it needs to be labeled with httpd_TYPE_script_exec_t in order to be executed. If it is read-only content, it needs to be labeled httpd_TYPE_content_t, it is writable content. it needs to be labeled httpd_TYPE_script_rw_t or httpd_TYPE_script_ra_t. You can use the chcon command to change these contexts. Please refer to the man page "man httpd_selinux" or FAQ [URL] "TYPE" refers to one of "sys", "user" or "staff" or potentially other script types.
Allowing Access:
Changing the "httpd_unified" boolean to true will allow this access: "setsebool
-P httpd_unified=1"
Fix Command:
setsebool -P httpd_unified=1
I will write down how I did setup my server so maybe you can see a mistake I did. First I changed my Apache httpd.conf I added the following to it:
Code:
NameVirtualHost 192.168.1.2:80
<VirtualHost 192.168.1.2:80>
ServerName localhost
DocumentRoot /var/www/html
DirectoryIndex index.html index.html index.shtml index.php
</VirtualHost>
<VirtualHost 192.168.1.2:80>
SuexecUserGroup ulyaoth ulyaoth
ServerAdmin webmaster@ulyaoth.org
ServerName test.ulyaoth.org
DocumentRoot /var/www/ulyaoth/www/html
ErrorLog /var/www/ulyaoth/logs/error_log
CustomLog /var/www/ulyaoth/logs/access_log common
DirectoryIndex index.html index.htm index.shtml index.php
ScriptAlias /cgi-bin/ /var/www/ulyaoth/www/cgi-bin/
<Directory /var/www/ulyaoth/www/cgi-bin/>
AllowOverride none
Order allow,deny
Allow from all
Options +execCGI
AddHandler cgi-script .cgi .pl
</Directory>
</VirtualHost>
Then I created the username "ulyaoth" with the group "ulyaoth" as I specified with my suexec, then I created all the directories as specified in my httpd.conf and "chown ulyaoth:ulyaoth (dirname)" them to the right group and username.
I was running a 2-partition hard drive, Windows Vista (lamentably) on one partition, and the other running Ubuntu. I began having trouble with the Vista partition, so I attempted to move as many of the files that I really wanted to keep as possible over to the Ubuntu partition, and then reformat and reinstall the Vista partition. As a result, I could no longer boot to Ubuntu, and I consistently got errors back from everything that I tried on the Vista partition.
The only way that I can now access anything on the hard drive is to insert the Ubuntu install disk, go into trial mode, then mount the partition. At long last, here is the problem: Is there anyway to possibly make the partition bootable again so that I could burn the files to a disk? From trial mode I can get to a number of the files on the mounted partition, HOWEVER, they are secured with the username and password of my user account on that partition. Is there any way that I can access the files from the trial mode by entering my username/password?
I have several directories, each owned by root and a group of the same name,By setting the sgid bit, I made sure that newly created files and directories are owned by the correct group, and that directories have the sgid bit set too.On each newly created directory or file, the permissions are set to 755. This is because this is the default umask, and I cannot change a users umask. I actually only want files created below a particular directory to have group write access, inheriting this behaviour to newly created directories properly.I'm not on samba or NFS, I have to do this for SSH users.The filesystem is ext3.I started to fool around with ACLs, but couldn't find what I was looking for.
View 3 Replies View RelatedAfter 10 minutes of trying to mount my zune, I finally got it, only to open rhythem box to find that I can't view the music on it, or write new music to it. (It does have music on it, nearly 30 gigs of music, its also assigned to my windows computer that I dont use anymore). Sorry for the file being a jpe, but the fedora forums seem to hate high resolution, full desktop, PNG screenshots, so I edited it down and made it a jpe.
View 5 Replies View RelatedI am trying to configure mpd (music player daemon) to access my music files that are stored on a windows server (NAS).
In the mpd configuration file I have to point to the directory in which the music is.
How do I do that? Is it something to do with mount?
What are the possible problem when Windows access the file from Ubuntu got Read Only even though have a full permission to read, write and execute the file? Ubuntu to Ubuntu accessing the file there is no problem only Windows got a problem.
View 1 Replies View RelatedI recently installed Ubuntu 10.04 using Wubi on an ACER Aspire 5000 XP laptop. Everything runs ok and I can access my Windows folders from Ubuntu through the host directory but only as Read Only. I have checked to make sure that the Windows folder I want to access (My Documents) is not designated as Read Only in Windows.
View 1 Replies View RelatedOn opening nautilus,it shows the XP ad Fedora partitions.Clicking on them mounts the partition.However,XP partitions are mounted in Read/write mode,whereas Fedora partition is mounted only in Read mode.What changes should i need to make in /etc/fstab to enable Read/Write access to Fedora partition as well?
View 9 Replies View RelatedSo I have just set up my cryptsetup.I can open/mount it by either "crypsetup luksOpen" or just clicking on the partition from the "Places" tab and it will ask me for a password and all.
The only problem is that I can't read or write to it at all. Everything is probably root, which isn't useful to me.
So how can I change it so that when I do either of those 2 methods for opening it, I can just fully use it, read and write and everything? As my user.
Long time reader, first time poster. I've got, what has become to me, a brain bender. It seems ACL's are the best way to go, but I am not 100% sure. Each user should be able to create files and modify each others'files, but should not be able to delete any one elses files in a directory.chmod -1777?setfacl?
View 2 Replies View RelatedI'm using Arch right now and i'm having problems syncing my ipod with Amarok (KDE). Everytime I would want to sync a song, it would give me access denied. it is currently mounted at /tmp/ipodbxQtrU and i have tried using chmod with no luck. I was in root when i used "chmod -R user ipodbxQtrU" and it said operation not permitted.
View 1 Replies View RelatedI have apache2 running on my computer. I want to change the permissions for /var/www/ so that I can edit the files without a problem. Right now I can use the gksudo command, but I'd like to be able to have all the files available when using an IDE like eclipse.
I've read in several places that
Code:
chmod 755 /var/www
will do, but if I'm not mistaken that would give read/write access to anyone. I'm not in a production environment, so I'm not too worried about security, but I'd like to give anyone else as less permissions as possible. Would this be possible?
I have installed Ubuntu 11.04 64 bit desktop version on ext4 partition without swap. I have maximus iv extreme motherboard with 8 Gbytes RAM. Using 3 internal ntfs formatted hard drives and 3 external ntfs usb 2.0 hard drives.When I am trying to copy or move files FROM or TO any ntfs partiton it is 90 percent chance it is going to freeze.For copy/moving files I am using krusader run as ROOT or as user without root privilege or Nautilus as user without root privilege. It wasn't possible to switch to another terminal - it simply does not react on keyboard or mouse input and only hard reset is possible (scares me because of ntfs disks)From this point of view I have suspicious on ntfs driver but:I am completely beginner in linux and I am looking for help to navigate me how to investigate to find what is causing the problem eventually to solve it?
According to my experience it seems to does not matter if hard disk is internal or external connected through SATA II or SATA III or USB 2.0. I have tried to manipulate with ntfspartitions through the vmware or virualbox or truecrypt software or just do a simplecopy/move files - it have has always the same results - freeze. There is not possible to say how long it is going to work properly and when it is going to freeze - sometimes it's working hour, sometimes it's working couple of seconds - no matter if it is read or write operation/s within ntfs partition.
I was running '# ls -l' in '/' directory and I noticed all directories in '/' have the following permeation 'drwxr-xr-x' [except root's home which is 'drwx------' (after I change it from 'drwxr-xr-x' )]
I don't want all the user (except root) to be able to read and execute (in) any directory, I just want every user to be abel to read/write/execute only in his/her home directory.
my question is, is it ok to change file and directory permeation of the following directories in '/' from 'drwxr-xr-x' to 'drwxr-x---' or 'drwx------' recursively?
/bin
/boot
/dev
/etc
[Code]....
-I and the other users use the pc for internet, open office and email mainly.
-It does not run server(s) like smb/cif or NFS.
-There are 5 usernames (created by me, non of them are superusers) in th pc, only one user is required to login at any one time.
I own a particular file on a Linux system. I would like to give 2 groups (accounting, shipping) read access and only read access, and 3 users(Mike, Raj and Wally) write access and only write access. How can I accomplish this?
View 3 Replies View RelatedI'm having this problem wherein the ppp program is altering the /etc/resolv.conf file when connecting.This, despite me having set file permissions to read-only. What could be the problem here?
View 9 Replies View Relatedi know that chmod +x makes a certain file executable but how do i make a file read and write.
View 3 Replies View RelatedAnybody know how to make an ext3 or 4 partition start up at boot with only the owner and its group having read and write access permissions.I don't want 'others' to have folder access. This is what i have done. / etc/fstab:/dev/sdb5/media/Data ext4 owner 1 2 The folder starts on the boot since it has been allocated a folder as u can see. Next i changed the the ownership and the group ownership of the folder:chown johnny:johnny /media/DataThe problem is that other users can few my partition since 'others' have read access. How do i change that to zero access?
View 1 Replies View RelatedI've extracted a few files through the archive manager through Ark (as well as through the command line) and some folders/files that were originally in Japanese are not properly displayed in the terminal or file browser. I can't delete them nor open them; I am informed that this file does not exist.I am running Kubuntu 11.04. I had a similar problem in Ubuntu 10.04 in that the text was not displayed properly, but the files were readable and writable.
View 2 Replies View RelatedSuch as the title
View 2 Replies View RelatedI'm setting up Ubuntu Karmic on my sister's old computer for my nephew, he's quite young so my sister asked to install some content filtering. I'll first setup an OpenDNS account and I've installed and managed to get dansguardian and squid working on a virtual machine to try it out. so far it's working pretty well, but I need to secure it form the inside out.
I was thinking of blocking specific outbound ports so he could not bypass the proxy. because by default the firefox configuration can be easily changed. so I have a couple of questions.
1. is it possible to block outgoing ports on Ubuntu?
2. is that the best method?
3. is there anything else I should be aware of to prevent subversion?
lastly, this question is probably unrelated to this board but I've set up a cron job to update a dynamic ip with OpenDNS, the problem is that the password is in clear text in the user's crontab, can I play with permissions? is it possible to run the job under a root account and deny read/write access to a normal user?
I have a file server running 10.04. I have a user that belongs to 2 groups (users is the primary and IT is the secondary). I have permissions set up so that this user and other users that belong to the IT groups can read/write files and others have no permissions whatsoever. I have also set the umask to 0007 so that any files created have the effective permissions. My concern is this: since my primary group is users, is it possible for me to create files with the owner group IT for only this specific folder?
View 2 Replies View RelatedRecently i formatted my HDD into 5 partition namely :-
1) Win Vista
2) Ubuntu /
3) Home
4) Swp
5) EXT4 (Purpose is to share files between ubuntu and vista)
I'm wondering if its possible to install Virtual Box on both OS but pointing only to 1 virtual machine.
Also if its possible to permanently mount the shared partition on both OS.
I'm looking to set up a server with attached mass storage device and tape autoloader to run linux. It's set up under Windows at the moment. Goal is to have users, connecting from individual workstations and laptops, backup their data to the linux server. On their personal machine, some users run linux, some MacOS, some Windows. I plan to set up the 5 500 GB drives as RAID5. I understand that if setting up as software raid the format is "physical volume for RAID". Under this setup, will Windows users be able to read/write and function as expected? I can't assume only linux user access.
View 3 Replies View RelatedOn an Apache2 server someone else setup, I have a folder with drwx--x--x permission and the php file can still write in the folder. But on my own setup, I need to set the same folder to drwx--x-wx. Inside the folder, I have a index.php that runs just by setting rwx--x--x but on my own setup, I need to allow read permission for others/group before it can run: rwxr-xr-x (or else I get a blank page). I tried changing the folder and files to root but it's the same.
View 5 Replies View Relatedon the following link [URL] section 2 says
Quote:
The following directories need to be readable, writeable and executable for everyone:
* dokeos/main/inc/conf/
* dokeos/main/upload/users/
* dokeos/main/default_course_document/
* dokeos/archive/
[Code].....
I am not at all convinced by the idea of giving permissions to read,write and execute as these Learning Management Systems say. Let me know what you people have to say? What is the best practise in such situations? I have to get all these LMS run on same web server.
I have an ADSL modem and router, its OS is linux. It runs ftp service, and I can read files in its file system, but I have no permission to list files and to write files. It has TR069 protocol connections and can upgrade remotely.It has ssh, but not started.
View 1 Replies View RelatedIve managed to install samba, I've shared a folder. I can access from a Windows 7 machine via \ubuntupublic. I can put files in the folder form the ubuntu machine and edit them on the windows box. I can put files in the folder/share from the Windows box but then I cannot edit them on the Ubuntu machine (they are read only and have a "Lock" over them). I can fix this by going to the properties of the file/folder in Windows and manually assigning "Everybody" full control (then the lock disappears and all is well.) I want read/write access to all the folders contents from both machines all the time (security is NOT a concern I WANT the permissions wide open) what am I doing wrong?
View 7 Replies View RelatedI need to connect to upstairs windows-7 machine that is connected to router. I have laptop downstairs running F12 (gnome) with wireless connection.
I need to access my music files on upstairs computer. Do I need samba?, without it so far I am getting an error can not mount the windows machine...