Questions tagged [access-control]
The access-control tag has no summary, but it has a tag wiki.
189 questions
1 vote
0 answers
47 views
How to add user to group in docker bind?
I have a docker container with a bind to a the local fs. ../htdocs:/var/www/html The docker container creates folders and files in /var/www/html with apparent userid 33 and groupid 33. Both do not ...
- 261
0 votes
1 answer
313 views
use setfacl to remove a users access to a directory?
So here is something I could not find any reference to, I have this user, user_A, I want to remove its access to this directory entirely /log/dirA As far as I understand, chmod is used to modify the ...
0 votes
2 answers
148 views
Restrict a users access to all directories but one
So there is a user that was created by root, and it pretty much has access to most/all directories on the system, we want to use this user only for ftp via lftp to read a certain file on the server ...
1 vote
0 answers
26 views
Solaris 10 rbac: works fine but not for fdisk
I edit prof_attr Altro-prof:RO::\ Altro prof: I assign some commands for "altro-prof" vim exec_attr Altro-prof:solaris:cmd:RO::/usr/sbin/prtvtoc:uid=0 Altro-prof:solaris:cmd:RO::/usr/sbin/...
- 14.5k
0 votes
0 answers
119 views
Bitmask permissions
It's a tutorial problem in a Linux course: The command ls -la / gives this result: total 72 drwxr-xr-x 19 root root 4096 Apr 15 23:39 . drwxr-xr-x 19 root root 4096 Apr 15 23:39 .. lrwxrwxrwx 1 ...
7 votes
1 answer
1k views
Cannot open an HTML file stored on RAM-disk with a browser
I wrote a script that generates a PDF and an HTML file on RAM-disk: The PDF file can be opened as expected. The HTML file can be opened with an editor, but not with a browser. This is the error ...
- 663
0 votes
0 answers
113 views
You don't have write permission to backup destination
Debian 12, using whatever the built-in backup system is. I have it set to back up to an external drive that's dedicated to this purpose. When I hit the button to do a backup, it says I don't have ...
- 101
0 votes
0 answers
61 views
Prevent a program from writing the HOME directory using SMACK
I have a binary program that creates an empty folder in the HOME directory everytime it starts up. I don't like that and want to use the SMACK mechanism to stop it from doing that. My idea is to label ...
0 votes
1 answer
1k views
Apache 2.4: Restrict access to reverse proxy by IP range, and redirect requests from all other hosts
We have a front-end proxy server that serves pages from a back-end website (both running Apache 2.4): # Apache config snippet from frontend server SSLProxyEngine on ProxyPass "/blah" "...
- 451
1 vote
1 answer
95 views
Restrict login to the active user
How can I restrict login so that only I can log into my linux machine, and only directly into the console (active user) I do not want anyone, including me, to be able to log in remotely. Are there ...
- 13
1 vote
1 answer
76 views
ssh-jailed access restrict all groups, but allow one group
Requirement ssh-jailed access restrict all groups, but allow one group. login to VM-GP324911 for users in GP324911, deny others. login to VM-GP9e68e for users in GP9e68ea, deny others. login to VM-...
- 27
1 vote
3 answers
2k views
How to restrict user login for specific IP-address (private address)?
I have two users on my ssh-server machine, user_A and user_B. user_B is permitted to log in with private key only for security reasons, because he needs to log in from remote. All this works. My ...
- 113
1 vote
1 answer
375 views
Restrict access to SocketCAN to a certain user group
I have a PC to which a robot is connected via CAN (using SocketCAN). I'd like to control who can send commands to the robot, ideally through a group (i.e. only users who are in the "use_robot&...
- 312
0 votes
0 answers
150 views
Accessing OneDrive Folder on ElementaryOS
I have a computer with Windows 11 and Elementary OS 7. I can't access my OneDrive folder. I tried fsutil reparsepoint delete "C:\Path\To\OneDrive\Folder" but it output an access permission ...
3 votes
1 answer
962 views
What effect has "+:ALL:cron crond" in /etc/security/access.conf?
I am refining our rules in /etc/securiy/access.conf. I found the following rule and I am not sure what it is used for: +:ALL:cron crond According to the man page of access.conf it means something ...
- 39