Re: user permissions changing without my intervention

From: Matthias Johnson (matthias@opennomad.com)
Date: 03/18/03 

From: Matthias Johnson <matthias@opennomad.com>
Date: 18 Mar 2003 11:19:56 -0700

Take a look in /usr/share/msec/perm.*
This is where the Mandrake Security tool (msec) stores it's
information. You can override these by placing lines with a similar
format in /etc/security/msec/security.conf

msec is normally run from cron and the settings in /usr/share/msec are
used to reset permissions and file ownerships to defaults.
                                                                               hth,
                                                                             
\@matthias

"Richard Kimber" <rkimber@ntlworld.com> writes:

> I'm a small (2 PCs) home network. I have two accounts on my machine;
> local access is not a security issue - the other user is my wife who only
> understands the Windows that is on her machine.
>
> In my own account I have a copy of the (large-ish) website that I
> maintain, and I run Apache locally so that I can view the local copy of
> that. My wife only accesses the machine to pick up her email.
>
> My problem is that , however I seem to set umask via /etc/profile or
> ~/.bash_profile as 022 or 066, periodically something (i.e. presumably
> some program on my PC) re-sets the access permissions on my account to
> drwx------, and Apache complains that it cannot access my webpages. This
> sometimes happens within minutes of my doing a chmod to set it as I need
> it.
>
> My wife's account has the permissions set as I would want them set for
> mine, and the permissions for her account never change. Interestingly,
> her individual profile file contains no umask statement.
>
> My account was the one originally created when the system was installed.
>
> I'm running Debian testing with 2.4.19
>
> What program could be re-setting my access permissions? How do I force it
> to accept what I need?
>
> - Richard.
> 

-- 
Matthias Johnson
	matthiasjbg@yahoo.com
	http://www.geocities.com/matthiasjbg/

Relevant Pages

  • Re: Server Application unavailable error
    ... account *all* the permissions ASP.NET needs to run. ... Try to give access permissions to ... XP's default ASP.NET identity is the ASPNET account. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Win2k - Account Operator not working properly
    ... You very likely have other ACL issues other than what was mentioned and I can point them out here for you for free or you can pay someone $200-500 an hour to come check it out. ... In order for that to result in inheritence protection it means the schema had to be modified. ... set the account in the GUI to inherit from its parents. ... Used the delegation wizard, on the top level OU, to assign the desired permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Consider Windows XP File Security and Group Policies
    ... If you are running Windows XP and are using the NTFS file system, ... Account from being able to purge its history footprint files. ... Changing Folder permissions to Read-Execute instead of Full ... you globally apply Full Control for the Administrators group and the SYSTEM ...
    (microsoft.public.windowsxp.general)