Questions tagged [access-control]
The access-control tag has no summary, but it has a tag wiki.
189 questions
1
vote
0
answers
34
views
How to add user to group in docker bind?
I have a docker container with a bind to a the local fs.
../htdocs:/var/www/html
The docker container creates folders and files in /var/www/html with apparent userid 33 and groupid 33. Both do not ...
- 261
0
votes
1
answer
267
views
use setfacl to remove a users access to a directory?
So here is something I could not find any reference to, I have this user, user_A, I want to remove its access to this directory entirely /log/dirA
As far as I understand, chmod is used to modify the ...
0
votes
2
answers
119
views
Restrict a users access to all directories but one
So there is a user that was created by root, and it pretty much has access to most/all directories on the system, we want to use this user only for ftp via lftp to read a certain file on the server ...
1
vote
0
answers
19
views
Solaris 10 rbac: works fine but not for fdisk
I edit prof_attr
Altro-prof:RO::\
Altro prof:
I assign some commands for "altro-prof"
vim exec_attr
Altro-prof:solaris:cmd:RO::/usr/sbin/prtvtoc:uid=0
Altro-prof:solaris:cmd:RO::/usr/sbin/...
- 14.5k
0
votes
0
answers
114
views
Bitmask permissions
It's a tutorial problem in a Linux course:
The command ls -la / gives this result:
total 72
drwxr-xr-x 19 root root 4096 Apr 15 23:39 .
drwxr-xr-x 19 root root 4096 Apr 15 23:39 ..
lrwxrwxrwx 1 ...
7
votes
1
answer
1k
views
Cannot open an HTML file stored on RAM-disk with a browser
I wrote a script that generates a PDF and an HTML file on RAM-disk:
The PDF file can be opened as expected.
The HTML file can be opened with an editor, but not with a browser.
This is the error ...
- 663
0
votes
0
answers
108
views
You don't have write permission to backup destination
Debian 12, using whatever the built-in backup system is.
I have it set to back up to an external drive that's dedicated to this purpose.
When I hit the button to do a backup, it says I don't have ...
- 101
0
votes
0
answers
56
views
Prevent a program from writing the HOME directory using SMACK
I have a binary program that creates an empty folder in the HOME directory everytime it starts up. I don't like that and want to use the SMACK mechanism to stop it from doing that. My idea is to label ...
0
votes
1
answer
1k
views
Apache 2.4: Restrict access to reverse proxy by IP range, and redirect requests from all other hosts
We have a front-end proxy server that serves pages from a back-end website (both running Apache 2.4):
# Apache config snippet from frontend server
SSLProxyEngine on
ProxyPass "/blah" "...
- 451
1
vote
1
answer
94
views
Restrict login to the active user
How can I restrict login so that only I can log into my linux machine, and only directly into the console (active user) I do not want anyone, including me, to be able to log in remotely. Are there ...
- 13
1
vote
1
answer
70
views
ssh-jailed access restrict all groups, but allow one group
Requirement
ssh-jailed access restrict all groups, but allow one group.
login to VM-GP324911 for users in GP324911, deny others.
login to VM-GP9e68e for users in GP9e68ea, deny others.
login to VM-...
- 27
1
vote
3
answers
2k
views
How to restrict user login for specific IP-address (private address)?
I have two users on my ssh-server machine, user_A and user_B. user_B is permitted to log in with private key only for security reasons, because he needs to log in from remote. All this works.
My ...
- 113
1
vote
1
answer
355
views
Restrict access to SocketCAN to a certain user group
I have a PC to which a robot is connected via CAN (using SocketCAN). I'd like to control who can send commands to the robot, ideally through a group (i.e. only users who are in the "use_robot&...
- 312
0
votes
0
answers
144
views
Accessing OneDrive Folder on ElementaryOS
I have a computer with Windows 11 and Elementary OS 7. I can't access my OneDrive folder. I tried fsutil reparsepoint delete "C:\Path\To\OneDrive\Folder" but it output an access permission ...
3
votes
1
answer
948
views
What effect has "+:ALL:cron crond" in /etc/security/access.conf?
I am refining our rules in /etc/securiy/access.conf. I found the following rule and I am not sure what it is used for:
+:ALL:cron crond
According to the man page of access.conf it means something ...
- 39