0
votes
0answers
13 views

New user only RWX one directory

So, I read this: Is it possible to create users that can only use one directory? I would like to make it where my newly created user "kevin" (to keep in theme with the referenced post) cannot RWX in ...
0
votes
0answers
29 views

How does security differ between any two standard users?

If we take two standard users, so ignoring admin/sudos, are the security limitations between one user and another down to their respective file permissions? So what Alice can do in the system vs ...
6
votes
1answer
272 views

What are the risks of running Nautilus as root?

Whenever I try to access files outside my home directory I get a permission error. People keep recommending running Nautilus as root by running the following commands in a terminal: sudo -i nautilus ...
1
vote
2answers
191 views

Untrusted Application Launcher

So I'm trying to create a desktop icon for an application, and I dragged it from the top-left menu (I think it's called Dash or something). I clicked on it and it says it is untrusted and refuse to ...
-1
votes
2answers
337 views

How to create a root privilege file for a normal user?

I got a scenario where a customized Ubuntu 12.04 Linux OS has a read only filesystem which doesn't have terminal access. My goal is to create a file with root access using normal users permission. I ...
2
votes
1answer
85 views

Can chmod 777 be a security risk on a personal machine?

Can 777 permissions increase security risk on an average Ubuntu single-user machine? How? What are other downsides of it? Thanks
0
votes
1answer
159 views

Do some files downloaded from the internet have execute permission by default?

I noticed that some files downloaded from the internet have executing permission (e.g. Tor, Bit-torrent, Sync etc.) by default. Therefore the permission information is stored within the files itself, ...
3
votes
1answer
204 views

Why is a group writable directory considered unsafe?

More specifically, why does libslack's daemon consider files that are being executed in a group writable directory to be "unsafe"? If you can give me an explanation of why group writable directories ...
1
vote
0answers
172 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
0
votes
1answer
32 views

How secure is root read-permissions?

How secure is a file whos permissions are set so only root has any privileges with the file? Say I had the file on an unencrypted ext4 partition, would I be able to boot up another live OS, copy the ...
1
vote
2answers
2k views

unable to delete file - rm: cannot remove `zigBqC04': Input/output error

Some file is existing in my NTFS file system. I'm trying to delete it but unable to do so. It is giving: rm: cannot remove `zigBqC04': Input/output error Any other files also could not be copied in ...
-1
votes
2answers
96 views

Where is dconf in ubuntu-12.04 desktop-32 bit [duplicate]

I am not able to find dconf in ubuntu-12.04 desktop-32 bit?
1
vote
2answers
1k views

How do i change the password of root, using webmin in one command line?

I have lost root password of one old server, where i can only have normal user login and via webmin login. Via webmin interface i have one option to execute command, i have been trying the following ...
0
votes
0answers
13 views

What are the recommended directory/file permissions for a web root content? [duplicate]

I'm using Ubuntu for deploying a website and I use same in PC also,recently I've faced error chmode() operation not permitted when trying to upload a file,though folder having 0777 permissions. And ...
0
votes
0answers
195 views

How to add folder creation permission to a user 'www-data'

I want to create folders like /var/www/myproject/image/DYNAMIC_FOLDER using server side scripting language PHP, so I edited /etc/sudoers and added the following line: www-data ALL=(ALL) NOPASSWD : ...
2
votes
1answer
343 views

Should I install non-repository software as root or as my user?

What is the right way of installing programs that are not available in repositories: should my user own the binaries and keep them in ~/bin/, or should root own the binaries and keep them in, say, ...
2
votes
2answers
263 views

Need help for locking down linux desktop

Good morning all. So I work with a disabled guy and he has a computer. This guy asked for assistance, I put windows xp on his computer and I discovered that he loves deleting files (he managed to ...
4
votes
1answer
158 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
1
vote
1answer
361 views

File permissions vulnerability in pure-ftpd using php script

I have created ftp-server using pure-ftpd following this wonderful tutorial. Everything works fine, except file access. Here is the problem. Joe's home folder is /var/www/joe and Steve's home folder ...
2
votes
3answers
270 views

GUI Tool to deny Standard users from Using CD-ROM and USBs?

As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access. I could do it by removing the user from the 'cdrom' and 'plugdev' ...
3
votes
1answer
162 views

Is file permission secured when it transferred from Ubuntu to Windows?

I am having 9GB text file which is encrypted . This file contains some confidential data . Which is on my system(Ubuntu) and my external HDD (ntfs) . This file get daily updated and then encrypted . ...
1
vote
3answers
274 views

Who created files in “/proc” with my username?

I just learned about file security, user & group, etc. And I appreciate a lot about the elegance of the filesystem of linux. My username is lyg, and I found there are some files with owner lyg in ...
1
vote
1answer
84 views

Configuring permissions with Bastille

I was using Bastille to improve the security of my OS. To set this software properly, it ask you several questions related to security rules and you respond it (Y-N). I'm stuck at this question that I ...
0
votes
1answer
53 views

Why are many operations or commands in Ubuntu not allowed normally when you can just do the same thing by typing sudo?

What purpose does this server when bypassing is as easy as typing sudo? Forgive the naivety here but I am a rookie and I'm sure there has to be a good reason for this, and I'd like to know that.
1
vote
1answer
200 views

Deb Installation And Man In The Middle Attack

Is the deb installation process protected against Man In The Middle Attacks that would alter the install script? It seems if not, then it would be possible for a Man In The Middle Attack to place ...
3
votes
1answer
197 views

Can issetuid() be cleared for a child process? [closed]

I have a wrapper script A which is calling program B. A must be invoked as root so some initial setup can happen. After that, A calls setuid() and setgid() to reduce its own privileges, for safety and ...
9
votes
2answers
19k views

Can see samba shares but not access them

For the life of me I cannot figure this one out. I have samba installed and set up on the ubuntu box and on the Win7 box I CAN SEE all the shares I created. I created two users on ubuntu that map ...
2
votes
2answers
323 views

No user name/password required when exploring from live USB?

A few months back when I buggered up my netbook and then booted into it to get information from it using a live USB. (Thinking that was 10.10) When I was copy/pasting this to another USB at no time ...
1
vote
2answers
228 views

Prevent accidental low-level access (formatting) of system disk by root?

Is it possible to prevent accidental mounting and/or reformatting of a disk or partition by the root user during normal operation of a system? For example, this happened to me a while ago: Under ...
1
vote
1answer
588 views

Permission problems with Clamfs

been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these. But I am having permission troubles with a ...
1
vote
1answer
515 views

Setting up fastcgi on an Ubuntu server (socket file permissions issue)

I am trying to set up mod_fcgid on my server. Part of the requirement is that Apache needs to create a socket file for mod_fcgid. I specified the folder for Apache to write the socket data to: ...
11
votes
2answers
1k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...
35
votes
2answers
14k views

Why shouldn't /var/www have chmod 777

When developing a page on a localhost, I sometimes get a "Permission denied" error which I can solve by running chmod -R 777 /var/www. However, people are telling me that this is a bad idea for ...