Questions tagged [user-permissions]

419 questions
1
vote
5 answers

ssh and username

I dont understand the security in this statement: SSH does no user-name matching only public key to private key matching. This is in reference to a previous post of mine where I can be user "svn" but as long as I have a P/p key match of my own. Am I…
mike628
  • 309
  • 2
  • 5
  • 10
1
vote
1 answer

iptables owner match drops icmp for GIDs but not for UIDs

I have a strange behaviour of iptables that I cannot explain or understand. I have a user test which has its primary group test. I want to block any network access from this user. Now, if I say iptables -A OUTPUT -o eth0 -m owner --uid-owner test -j…
bitmask
  • 123
  • 1
  • 1
  • 8
1
vote
1 answer

Elevated commands within a script

I have a build script which runs within visual studio. As part of the script i need to register a DLL with regsrv32, however this needs to be done with elevated privileges. When we did this under XP, since all users on our domain are local…
BParker
  • 297
  • 3
  • 16
1
vote
1 answer

SQLServer2008 CopyDatabaseWizard Job Fails - Unable to determine if owner of job has server access

Trying to copy a SQL2000 database on server TUNA to destination server MOJITO which runs default instance of SQL2008 (at ServicePack1) via the CD Wizard. Resulting job fails on MOJITO with this in application log: SQL Server Scheduled Job…
1
vote
2 answers

Set up user for running server program (like www-data is for apache)

I am running Ubuntu 9.10 and would like to set up a few custom server programs. I don't think I should be running them as root, and I have no need to. How do I create a user and group that is similar to www-data for apache? Thanks,
user37610
1
vote
1 answer

Linux GID and groups

On Linux systems, /etc/passwd file contains an UID and a GID per user. GID represents the ID of the primary group of the user. But we can also set additional groups to a user with /etc/group file. Is there a difference between primary and additional…
Bob5421
  • 319
  • 3
  • 8
  • 16
1
vote
1 answer

How to add nginx configurator group?

I want o create a user group that has permissions to create/edit/view nginx configs without sudo permissions, but I heve no idea how. Creating a normal user group and setting owner:group to same-owner:configurator-group for the nginx configs…
1
vote
1 answer

docker group gets dropped from 'groups' after some time, and with it, my user's membership

I have a fresh installation of Linux Mint 22 (Vanessa) and installed docker with $ sudo apt install docker-compose $ docker -v Docker version 20.10.12, build 20.10.12-0ubuntu4 $ sudo systemctl start docker $ sudo systemctl enable docker $…
1
vote
1 answer

Connecting a limited user to Windows server 2003 through LogMeIn

LogMeIn support can't help me, maybe someone here can. I have a user on a Windows Server 2003 (non administrator). When I first created him and tried to connect through remote desktop I got the error The local policy of the system does not permit…
Jeff
  • 277
  • 3
  • 14
1
vote
2 answers

How to allow user to run only specific binaries

I'm adding user logviewer with /sbin/nologin/ and to my system. My custom service is running eg. sudo -u logviewer less --follow-name /var/log/messages. But still there are ways to run other command as that user. I would like to only allow user…
1
vote
0 answers

FTP retrieve user home directory from an admin connection

I'm implementing a cleanup of old files on SFTP server. I have a user named admin who has full access rights on the FTP. I would like to know if it's possible to retrieve the home directory for another "classic" user when being connected as an…
Mcsky
  • 111
  • 4
1
vote
0 answers

AWS organization: What is possible as an admin?

I have a question regarding the possibilities as admin of an organization. The plan is to link an external AWS account of a freelancer to our organization. After some research it turns out that the instances remain invisible to colleagues from the…
Seppe N
  • 11
  • 1
1
vote
1 answer

Dynamically sharing file/folder between users on the same machine with subdirectory

I have 3000+ local users on my Linux system. I want to set permissions dynamically for folder or files. I came across ACLs (Access Control Lists) when I researched this topic. All users home location must be hidden from other user. But what if I…
1
vote
2 answers

Is there any possible way to give an all the services (windows and 3rd party) access to the non admin users?

I am planning to give all the services start /stop access to the users(non-admin) I don't want to give the administrator group access to them. I have a couple of windows servers running with a couple of third-party services, So just I want to give…
Naresh A
  • 11
  • 1
1
vote
3 answers

Permission issues in cloudSQL SQL Server (GCP)

I see permission error when i tried to shrink files/db in CloudSQL sql server. I know its a managed service and do not have sa user and super privileges. But is there any similar user like sa (or) alternate ways to carry out such tasks. enter image…