Ubuntu Security :: Tight Guest Permissions Setting

Feb 23, 2010

one thing i can't seem to be able to do is give the guest account just these permissions: using firefox (or other browser) and using one file directory and using a text editor. means the guest can browse the net and sefe some infos form that - nothing more. the previous version had something like that, it was really easy for me, a noob, to do it with two or three clicks. if this possibiility exists, what to do. if it's not implemented... maybe it should be. 'cause many people let others use the computer but don't want any complications...

View 6 Replies


ADVERTISEMENT

Ubuntu Security :: Setting Permissions For Www User Only?

Mar 19, 2010

I wanna make a small web server for local use , I've installed apache, every thing works fine I'm the root

I wanna protect the folder that contain the htdocs files (www), i don't want any users that not in root group to access (not even read)

I changed the permission of the htdocs folder as next

Owner: www (apache user)
per: creat , delete
group: root
per: creat , delete
other: none

it only works on the main folder that i changed its permissions ! not all sub folders and files ! were my steps right ? and are their anyway to change all folders and files at once ?

View 4 Replies View Related

Security :: Setting Permissions On Different Groups?

Nov 26, 2010

We are a school and we share a samba folder with students and teacher groups. What we are trying to do is:

- Give students group users the permissions to rwx own files in folder

- Students must not be able to do anything with others files. I mean nothing so, at most, they could see the files in folder but not read it.

- Teachers can do anything with files in folder

As you can imagine, the idea is that students deliver their exams in that folder without the ability to read/copy the other students files. With sticky bit we can restrict students permissions to their own files, that is ok, but how to restrict all the permissions on other students files without restricting student access to that folder?

View 1 Replies View Related

Security :: Setting File Permissions For File /var/log/Xorg.0.log?

Jul 7, 2009

i am trying to set the file permissions for the log files "/var/log/Xorg.0.log" and "/var/log/gdm/:0.log". These files seem to be created when a user logs into a whokstation (my guess so far). I am trying to comply with a security mandate that all log files in the directory /var/log are set to 0640. The two mentioned files always seem to have the permissions 0644, does anyone know where and when these filea are created and how I might set the permissions when the files are created

View 1 Replies View Related

Ubuntu :: Permissions On Downloaded Files And Virtualbox Guest Additions?

May 12, 2010

file permissions and also about an error I'm getting in Virtualbox. I think the two issues are related. Recently, I replaced the hard drive in my computer and when I did, I decided to upgrade from 9.10 to 10.04 and I'm loving the new version. However, I have one minor problem. Whenever I download files via firefox (or chrome, etc.), they're not initially executable. I have to chmod them before I can run them. This isn't a problem for most things and is, in fact, more secure, I suppose. However, it causes problems for some programs that automatically download files and then need to run them.

Namely, I tried installing Virtualbox guest additions on my XP guest and Virtualbox couldn't mount the iso after it had downloaded it. To clarify, I can use wget, download a file, and execute it just fine. If I download the same file via firefox, I have to chmod the file before I can execute it. Virtualbox also can't mount the guest additions iso after it downloads it, and I assume that it's again running into a permissions problem.

View 3 Replies View Related

OpenSUSE :: 11.2 - Black Screen With Tight VNC

Dec 19, 2009

A recent OpenSuse 11.2 update is causing one to view a black screen with an X in the Tight VNC window of the remote machine when connecting with VNC Viewer (i.e. vncviewer IPAddress:1 ) in a console. I have two OpenSuse11.2 machines (one with no updates since 11/2009) and one I updated this week (12/16/2009). I am able to successfully use Tight VNC to connect to the OpenSuse11.2 machine without recent updates but get a black screen when attemmpting to connect to a recently updated OpenSuse 11.2 machine. My source machine is also a OpenSuse11.2 desktop with current updates.

View 8 Replies View Related

Ubuntu :: Tight VNC Server - Mlocate Doesn't Show Any Vnc Files In Any Bin Directory

Aug 23, 2010

64-bit lucid lynx server (gnome) According to Ubuntu Software Center, Tight VNC Server is installed. However,mlocate doesn't show any vnc files in any *bin directory

ps -A doesn't show a vnc service running none of the menus have an item for vnc server

I can connect to the ubuntu computer from Windows tightvnc clients on two different windows boxes. I can use the keyboard to type in the password. After that, remote control, i.e., the mouse, doesn't work.

The problem is that the mouse cursor (controlled from the windows client) moves but otherwise has no effect. I can move the cursor, but it acts as if the client (or server) is set to view-only. The effect of that is that I can't launch any programs (not even a terminal).

I've tried various combinations of settings on the client and on the server, but I can't get it to work correctly.

On the ubuntu machine, remote desktop sharing enabled.

on some earlier versions of ubuntu this worked correctly when connecting from the same windows client using tightvnc.

I tried connecting from another windows client and got the same results.

View 3 Replies View Related

Ubuntu :: Setting Up FTP With Permissions?

Dec 29, 2010

I recently got an old computer to use as a server and I have a whole list of things I want to do on it, but I'm having difficulties.When I installed the server, I installed AMP, FTP, Samba, CUPS, and some other items. I made a user account called 'nessdan' which (currently!) is in these groups:

www-data adm dialout cdrom plugdev lpadmin sambashare admin

The www-data group was added because I wanted to FTP my site files into '/var/www/' . Okay, that ended up working out for me. This is where things got sticky. I installed PHPMyAdmin and the files went to '/usr/share/phpmyadmin/' . I wanted to install a new theme so I downloaded it onto my Laptop, then logged in via FTP but couldn't transfer files into there! It turns out the folder was owned by 'root' and was in the group 'root'. The only thing I could come up with was to change that folders permissions so the owner was 'nessdan' and the group 'admin'. I was going to do that to the entire /usr/share/ folder but I didn't know whether or not I should be changing the permissions in the first place.

But the the trend continues! I have my print server setup and working but I wanted the server to hold the Windows drivers, so I went to '/var/lib/samba/' to do some work but noticed that a lot of the files' permissions were locked down to read only and the owner and group were 'root' . I ended up doing a 'chmod 775' and changing the owner and group to 'nessdan' and 'admin', respectively. Well I transfered over the files but now the service nmbd isn't working. The good news is, I expected to mess something up along the way and had already planned on reinstalling Ubuntu Server 10.10. I've only had the server for 4 days now and I knew from the beginning I'd be wiping it clean. I want to know how to set this thing up proper and the biggest problem is getting access into folders so I can FTP into them.When I do wipe my PC clean and start anew, how should I go about the changes that I did before (PHPMyAdmin, Samba Driver Folder)?

View 2 Replies View Related

Ubuntu Security :: Www-data Security Permissions?

Mar 17, 2010

I'm running Apache2 under uBuntu 9.10. My problem is that I use my own user "wavesailor" to work on my websites. I kept all my sites under /var/www and I set up the security of the directory after following the guidelines.

Code:
sudo chown -R root:root /var/www
sudo chown -R www-data:www-data /var/www/*

[code]...

View 4 Replies View Related

Ubuntu :: Setting Permissions On A Partition

Nov 29, 2010

I have just formatted a partition that had contained a windows OS, it is now formatted to ext4 and is dev/sda1 dev/sda2 contains my Ubuntu OS and all files although the empty partition shows up in Nautilus I cannot write to it as it is owned by root.I have done some research on changing the permissions on this, but am none the wiser!!

Enabling the root account is rarely necessary. Almost everything you need to do as administrator of an Ubuntu system can be done via sudo or gksudo. If you really need a persistent root login, the best alternative is to simulate a root login shell using the following command.I cannot find gksudo and do not know what commands to use in the terminal to achieve my goal. I am in totally unfamiliar territory here, and need some fairly simple explanation and guidance to be able to claim my empty partition so I can read from and write to it.

View 7 Replies View Related

Ubuntu Security :: Guest Account Able To Authenticate As Root

Jun 25, 2011

I am trying to use a guest account in Ubuntu 10.10 however I am unable to stop the guest account from authenticating as a superuser and gaining root permissions dispite removing all permissions from the user-group control panel. The new guest account I created is not part of the admin group. However, with my new guest account I am unable to start a guest session from the panel, AND if I use the guest session from the panel I dont have the problem with the guest session being able to authenticate. How do I prevent super user authentication from an account in this situation? It seems that any account can authenticate and my /etc/sudoers file looks like this:

# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

Defaults env_reset
# Host alias specification
# User alias specification
# Cmnd alias specification
# User privilege specification
root ALL=(ALL) ALL

# Allow members of group sudo to execute any command
# (Note that later entries override this, so you might need to move
# it further down)
%sudo ALL=(ALL) ALL
#
#includedir /etc/sudoers.d
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

View 9 Replies View Related

Ubuntu :: Setting Default File Permissions

Jun 26, 2011

I have a file server running a cronjob to reset file permissions on a regular basis. I was thinking, I wonder if there is a way to do the chmod and chown command in a single command, as I always have to do both on the same folder, the way that you can do "chown root:users Uploads" instead of having to do two separate commands for chown and chgrp.

Then I got to thinking, are these commands even necessary? Every file copied or moved into these folders by any user needs to be something like "chmod 750" and "chgrp root:users", so rather than running a cronjob to do these modifications at regular intervals, there ought to be a way to set the folder permissions so that any files contained within will have these permissions.

The problem arises because users create documents, then a supervisor with elevated privileges can move those documents into a shared folder, however the permissions are wrong, they are user1:user1 for the owner and group and the other users can't read the file until a cronjob changes the group to be users. This has actually been acceptable, but certainly there is a better way to do this.

View 7 Replies View Related

Ubuntu :: Setting Permissions In File Sharing?

Sep 1, 2011

2 computers, Ubuntu 10.04 and Ubuntu 8.04. I have 2 folders named In and Out. Out I have set up on 10.04 for guest use. I am able to transfer files to 8.04 from that folder. Trying to set up In for a specific user to modify files. This requires a login. Both computers have the same user name and both have the same password. I set the file permissions automatically from 10.04 when electing to share In for allowed modiying. When trying to access In using 8.04, a password request window is generated with the user name already showing, and the domain name filled in as "Workgroup". The user name that shows is my login name, by the way.

View 2 Replies View Related

Server :: Setting Up Samba On Ubuntu - Permissions?

May 20, 2010

I'm attempting to set up a Samba share on my lab's small server (Ubuntu Server Edition, 10.04). It looked easy enough, but the share that I set up didn't allow anyone to actually put anything on it: no uploading stuff, etc. (You can still upload files via the command line, so I implemented the unix extensions = no fix). The share is writeable and visible, and anyone can access it (according to the Samba GUI). According to the smb.conf:

[Share]
path = /home/something/Share
writeable = yes
;browseable = yes
guest ok = yes

The other Windows machines in the lab see the new server and its share automatically, although they can't make changes to it, like create a new folder in the share. Most of my lab uses Snow Leopard (OS X 10.6), and a few others use Windows. I can connect to the server using my MacBook either through the terminal or Finder -> Go -> Connect to server -> smb://blah.someplace.edu without problems.

I can do pretty much anything via the command line, but not through the Finder! If I want to create a new folder, it gives me an old-school error message (stupid blue face): "The operation can't be competed because you don't have the necessary permission." If I want to drag-and-drop a file from my desktop to the Share folder, I get a pop-up window (lock + blue face): "Type your password to allow Finder to make changes." If I do, then I get another pop-up: "One or more items can't be copied to "Share" because you don't have permission to read them. Do you want to copy the items you are allowed to read?"

View 3 Replies View Related

Fedora Security :: Guest Accounts And Encryption ?

Mar 22, 2009

I have an encrypted /home partition but would like to set up a guest account for my brother. Obviously, encryption doesn't work so well when you give out the key so what I'd like to do is specify a different, unencrypted location as a home directory for the guest account so he doesn't need access to that partition. Is there a way of doing this?

I've got fedora 10, dual boot with windows, 2 hard drives, 1st is NTFS windows. 2nd is split into a swap, ext3 for the OS, and an encrypted partition for /home.

View 2 Replies View Related

Fedora Security :: How To Make A Guest User

Jul 1, 2009

so, sometimes happen that while I'm on my pc comes my mom and say "can I look a things 10 minutes?", this means that I have to leave my computer in her hands for ten minutes... enough to make something wrong! In ubuntu there is a usefull button "start guest session"..but here in fedora I can't find it...So, I create a new user and I called it "Guest" and I eliminated the password, so they can access also without me... but I have some problem:a) I set the home directory of this guest in /tmp/guest thinking that in this way everytime the home directory will be clean... but this doesn't work...b) is there a way to prevent in all cases this account to autenticate as root? So, if they try to install something it hasn't to show the box "autenticate as root", it has to say only "you can't"

View 14 Replies View Related

Ubuntu :: Changing Icon And Setting User Permissions?

Oct 29, 2010

I tried to place a mono icon in usr/icons/etc but I didn't have the permission to do so. I tried to change my user profile to Admin, thinking I could go back to custom, but that hasn't and it isn't allowing me to go back to my previous setting.

Within minutes of being an Admin user I noticed I couldn't even unmount something. I really need to figure out how to change my profile back to default.

After that has been dealt with, I would like some guidance on how to gain root access to put my icon where it needs to be.

View 1 Replies View Related

Ubuntu Networking :: Samba Configuration And Setting Permissions

Nov 16, 2010

First let me say that Lubuntu is a lightweight version of Ubuntu, so there is not much point in loading it up with unnecessary packages. If you just want to share printers on a Linux network, you don't need Samba. And if you just want a way that users can "push" files to others on a network, use Giver (+ Avahi) as this is a better option. Especially as it sorts out file permissions for you.

To enable file sharing on a Lubuntu 10.10 machine, go to Preferences > Synaptic Package Manager and add the following:-
* samba
* system-config-samba
* gvfs-bin
* gvfs-backends
...accepting any dependancies, 11 packages in total.

I suggest you re-boot now. As an initial test, go to file manager (pcmanfm) and enter:-
smb://localhost
You should see the local print$ folder listed.

To access folder shares remotely
* open file manager (pcmanfm)
* enter the IP address or computer name of the machine you wish to access
e.g. smb://192.168.0.99 or smb://print-server

To share a folder:-
Go to: Preferences > Samba (enter password when requested)
In the Samba Configuration screen:-
* File > Add Share
* use Browse... to select folder to be shared
* Tick "Visible" and (if required} "Writable"
* In the "Access" select "Allow access to everyone"
Set the Linux permissions:-
* locate the folder to share in file manager
* right click on the folder and select Properties > Permissions
* set the required permissions, e.g. Other: Read & Write (to allow anyone full access)

View 7 Replies View Related

Ubuntu Networking :: Samba Setting Permissions Not Correct

Jun 28, 2011

I am experiencing strange difficulties with Samba. The permissions aren't set correctly, when creating a file or a folder on the mounted samba share.

My smb.conf looks as follows:
Code:
[shareOffice]
path = /home/shareOffice
writable = yes
browseable = yes
create mode = 0777
directory mask = 0777
force create mode = 0777
force directory mode = 0777

Now if I create a regular file on the folder:
Code:
touch testFile; ls -l
The permissions turn out to be:
Code:
-rwxr-xrwx 1 simon share 0 2011-06-28 21:42 testFile

Why the w bit on the group is missing? If I play around with the create mode / force create mode, I get every other possible permission output --- except the write access for group members.

View 3 Replies View Related

General :: Setting Permissions On Unzip?

Apr 2, 2010

I wanted to assign ownership of my choice to my zip file while unzipping so I am using the command:

unzip yourfile.zip|awk -F": " '{print $2}' | xargs chown user.group

I also want to give 705 permissions to all directories and 777 to all files on unzipping?

View 3 Replies View Related

Red Hat / Fedora :: Setting Group Permissions?

Feb 27, 2010

i am trying to finish up a lab in that i have i have some accounts created under groups called "mgmt" and "pl". I am trying to figure out how i can get the guys in "mgmt" to be able to modify files in a directory called "mgmt-final" but the guys in the group "pl" will only be allowed to read those files.

View 5 Replies View Related

General :: Freenas Setting Up Permissions

May 29, 2010

I have set up freenas with 3 1tb hard drives. I have set up the SMB shares for the drives and can view each shared drive from each of the machines on my network. I can copy files from the hard drives, on the freenas but when I try to copy a file to the Freenas hard drives I get a message that I need permission to do this. I have all my shares set as anonymous how do I change the permissions so that I can save files to the drives.

View 1 Replies View Related

General :: Setting Permissions For UGO In One Command?

May 20, 2011

'the command I would use to change the group permission to write and the user and other to read and execute for the file "generate-report"' Sounds simple enough but I cant get it to work at all, tried doing a search in google and on the forums here to no avail. Is it possible to do in one command or will I need two?

Ive tried:

chmod g+w, uo+rx generate-report

And numerous other variants all with no luck.

View 3 Replies View Related

Red Hat :: Setting Permissions On Usb Ports In CentOS 5.4?

Feb 24, 2010

I am running VirtualBox on CentOS 5.4 & am not able to connect the usb ports to the guest operating systems. When I click on the device menu & usb, the devices I have plugged in show up, but are greyed out. I had this problem on Mandriva when I first started using VirtualBox & had to put my user account in the USB group. My account is in the vboxusers group but there is no USB group on CentOS & I can't figure out how to give myself permission to the USB ports.

View 6 Replies View Related

Ubuntu Security :: Enabling A Guest Session Under 9.04 Does Not Lock The Source User?

Jan 14, 2010

I noticed (the hard way) that enabling a guest session under 9.04 does not lock the source user. I enabled a guest session for someone and came back to find them rooting through my files. By quitting the guest session, it goes back to the source user's desktop without requiring a password. Shouldnt it go to gnome-screensaver automatically? Can this be changed? Is it a bug?

to replicate: log into source user's account use the menu to start a guest session quit the guest session root through files un-opposed.

View 6 Replies View Related

Security :: How To Configure Guest Account (for Computer Repair)

Jan 26, 2011

I spill my soda on my keyboard and ended up in a 4 day war with my pc.Now my tab, capslock, left shift, and down vol no longer works. I'm going to take it into the shop in the next couple of days to probably replace the keyboard. (If only lenovo kept the easy access keyboards like ibm had on the thinkpads). Something tells me that they will want to log in and test out the keyboard. So I created a guest account with a simple password. I changed my normal user home dir to 770 permissions and changed guest's shell to /bin/rbash. (both found in other posts.) Is there anything else I should do to secure the computer while it is in the shop?[I use su, sudo isn't configured to work (its a dependency so I can't uninstall)]. I have a pretty decent root password.

View 10 Replies View Related

Ubuntu :: When Setting Up NFS What Type Of File And Directory Permissions - Familiar With?

Jul 23, 2010

When setting up NFS what type of Linux file and directory permissions should you be familiar with?

View 1 Replies View Related

OpenSUSE :: 10.3 - Setting Permissions On Folder / Subfolders

Mar 18, 2010

I'm running OpenSuse 10.3 and I've tried to set permissions on my folder and subfolders from root:root to wwwrun:www. In the shell it shows all folders and files with the correct permissions, but in the GUI it still says root:root and so my web application can't write to it, until I manually set the subfolders permission in the GUI.

View 9 Replies View Related

OpenSUSE :: Setting Permissions On NTFS Partition?

May 3, 2010

I've recently installed an OpenSuse 11.2 in what I'd like to be a definitive jump from windows environment.I'm not very confident yet with my linux skills, so at this moment I've yet have both systems installed with a data NTFS partition to store music, movies, documents, and general data that I'd like to use in any of the two systems. The NTFS partition has no writting permissions for anybody except root user, so I can't work anything from my personal user without starting an app like su or login as root. I want to change this by making a group (windowsWriters) where my usual user is included wich I pretend to make the group owner of NTFS partition.

I've created the group and inserted my user into it, but I'm unable to change the owner group nor any permission on NTFS partition or any of it's subdirectories. I've tried to made it through opening dolphin as su (Alt+F2 kdesu dolphin) and through chmod in consolemode logged as root, in both cases the action seems to work correctly and no error is spotted, however when I look again at the partition/folder/file permissions/ownership no changes have been made.

View 9 Replies View Related

OpenSUSE :: Setting Permissions For All Subfolders In Nautilus?

May 13, 2010

trying to set permissions on all subfolders by right clicking the top folder, permissions, setting the desired values, and then clicking the "Apply permissions to the enclosed files. It takes on the top Folder but not on any of the subfolders or their files.How can I set the permissions for all files and subfolders under a top level folder?

View 9 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved