I used to create a user by using /usr/sbin/sysinstall in freebsd, but how do i limit that user so he can't view important files (like: dhcpd.conf, rc.conf....) or can't do such as command pico, nano, vi ...etc?
All i want is that user can log in to my freebsd box and then he will ssh to other local servers, I just want my freebsd box is a bridge/gate for him to ssh to local servers which behind that freebsd box. Is it possible ?Thanks.
I know that i have to create a group with has only ssh permission but how do i do that?
I'd like to give my username on my server permission to access g++ to compile custom C++ programs. I know I can just su - and compile as root, but I really don't like that.
What do I need to do to allow ONLY my username permission to do that?
every 4 or 5 days the lock table permission keeps getting revoked, does anyone have anything that can point me in the general direction of what would cause this? The only thing i can think of is a cpanel layer 2 update has occured a few times during hte periods where the permission is revoked
unfortunately whenever it happens it results in my SQL backup script failing
I would like to dissable from executing perl scripts on user accounts.
For example,now user can upload perl script for example with name script.pl:
Code: #!/usr/bin/perl -w print "Hello World!"; I would like to block it via mod_security - I don't want to allow running perl scripts with .pl extension at all. Is it possible for Apache 1.x?
Is there any way to totally block php shell scripts on users accounts, i don't mean like the java shell in cPanel i mean a php shell script like the kind frequently used by hackers...
I am having Virtuozzo vps with cpanel/WHM installed.I have created some accounts in it by setting disk quota . Now the issue is : some users are using space over the allocted one ,when i use the command quota -u (username),i can see that the users are used the space over the allocated one and they are still allowed to upload file . How to fix this issue ?
On a new server we have running CPanel, we have manually created a user account and when i try and log into mydomain.com/whm with that username/password it doesn't let me.
Now my second thought is that I should be logging into mydomain.com/cpanel rather than mydomain.com/whm but I get a 404 for /cpanel.
If i'm logged in as root, i cannot transfer into the user account cpanel either...
I am running wordpress for ecommerce using httpd-2.4.12 on my Ubuntu Server 12.04.5. The problem I have is some unknown clients received the message that reads "You don't have permission to access the product on this server" when they were trying to access to the Product page to make a purchase.
When I tested on all of my devices, I did not have any issue with accessing to the page. I know that the page is a secure page with https.I've looked into the apache logs file and found nothing that's related to 404 or 403 errors there.what I have configured for my httpd.conf.
Recently I moved my WordPress website to another server, After moving my site I see that my all files permission set to 664, for that I getting many error, now I want change all files permission 644, but problem is I have many subdomain with this site, is there any way to make change all files permission to 644 with SSH or any other way?
I have opensuse 13.1 on my server and i folow this tutorial: URL....but as you see this is for opensuse 12.2, but i manage to run everythink only apache2 server.Well i get this error, but i run vhost.No user or group set - set suPHP_UserGroup..Well apache2 is rurning as every other thinks on server only web page dont show and i get error: Server error!
The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there was an error in a CGI script.
I've run into a wall trying to run apache with multiple websites allowing users to use FTPd to manage files.
I'm running FreeBSD 7.1 on Apache 2.2.x
The issue is that Apache runs as www:www but FTPd writes the files as username:client. When performing some scripts that edit back-end files, this obviously can cause errors.
The data for each directory is stored in /home/username/www
I looked into some apache directives I could use. I tried putting User and Group directives into the vhost configuration for each vhost, but that did not work. I even found the perchild module and it looked like it can do the job but was a bit scared and turned off by the fact that it states it is beta at the top of the page. (I cannot link to it because I do not have enough posts.)
I'd appreciate if you can point out some links, or if anyone is willing to help me for a fee, we can talk about it.
I have a web application called MyApp
- Each MyApp user has 5gb hosting, and a web interface to manage their files.
- Therefore MyApp user gets a user account on linux machine and has access to only one directory /repo/usr/<user_id> and nowhere else. (suexec?)
- If that MyApp user creates a subdomain from any folder inside his home folder (he can do that using web interface), that folder is readable by www-data user not writable.
- That myapp user is able to mount/unmount his own ftp drives using curlftpfs.
- In short, users can only mess with their own files and they have no access nor rights to any other file that is outside of their home dir.
In short, this is a kind of hosting company server setup. Right now, we will have to manage all this from -only- one powerful server.
APache is running under the "nobody" user/group as default in CPanel servers as a suggestion I should change it to another user/group to improve security!
But in CPanel servers its hard to do that because you must edit some scripts and files to prevent the backing to nobody when running some scripts such
I've recently moved to a new server in which I don't have root, so bare with me.
For some reason when I upload a file with 'move_uploaded_file($tmpName,$new_filename)', it seems to work fine - but when I check it, try to download it (http or ftp), or change the permission - I can't, because its set to 600 for some odd reason, and owned by the user Apache is setup on.
I am using apache with subversion and need to redirect a request for a file to a different file based on the user that has made the request. It appears that the URL for the requested file could be changed on the fly using RewriteMap; however, is there any way to get the User (as typically given in the request_rec available to apache hooks) making the request in the program used?
- Webserver for member to download which is using user/pass from .htpasswd to allow anybody can see file or download.
What i need: - any software(code) can show me who log in and when, how much they download, how many time did they login. ---> this to prevent account from to be shared between many people.
- some sort of tool or software can allow me to add new user/pass quick since i am manuallly adding new username/password encrypted to .htpasswd file.
what software to use( or to buy if not so exspensive).
configure Apache server to handle users requests using condition based on where he come from so i can redirect him . what i need if user came with from site start with xn--* redirect him to virtual host and if he came from any other link then go to another virtual host