Questions tagged [access-control]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
43 views

Is it possible to limit the permissions of a user based on his or her actions?

I'm currently working on a research project, that includes the question, if it is possible to implement a Chinese-Wall based information flow control model based on SELinux. One of the core principles ...
0
votes
0answers
122 views

TP-LINK router access control

I am using a TP-LINK TL-WR841N router. I want to block a device with a certain MAC address from accessing certain domains at night, say www.youtube.com. I tested it with my phone, and this is what ...
0
votes
1answer
128 views

How to manage NTFS Conditional Access (DAC) based on group membership via Powershell?

I need to manage NTFS Access Conditions based on group membership through the Powershell. Digging through MS Documentation about DAC I've found a bunch of cmdlets [Get/New/Set/Remove]-[ADClaimType/...
1
vote
1answer
56 views

Router Access Control Settings — wrong URL

I am using a TP-Link Wireless N Router WR841N Model No. TL-WR841N and currently trying to restrict the access for one specific instagram page in 'Target Settings' in Access Control menu of my router. ...
0
votes
1answer
955 views

Know the identity behind an AWS canonical ID

Today while auditing a friends security settings, I found that an Amazon Folder (s3 bucket) with his most personal files had an unrecognised ACL entry. A person (with id ending in f6995f) had "Write" ...
40
votes
7answers
8k views

Temporarily disable WLAN internet access for children, but allow it for adults

We use a WLAN access point for internet access. I need the internet access to be turned off at 10pm for my children, but still be able to use it for myself. Can I have 2 passwords? Or does anyone ...
2
votes
0answers
123 views

How to restrict other programs from reading a certain file on Windows 10?

Secret files such as ssh private keys are stored in plain on the disk. There is only one user account on my computer. Programs like ssh.exe need to read these files, and I want to view them by text ...
0
votes
1answer
34 views

Is it safe to remove read rights from all /var/log files for others?

Am I supposed to be able to revoke read access recursively to /var/log/ for others or will it break some applications which rely on being able to read from /var/log/ with other rights?
3
votes
2answers
910 views

TP-Link Access Control targets

I want to configure an access control rule target on my TP-Link router (Archer C-7). I want a target I can use to blocks access to any Internet IP. I thought I could tell it "block IP address range 0....
3
votes
1answer
4k views

chmodding files with an SELinux security context / ACL

Okay, so I have a bunch of bash & python scripts that I've written, all just chilling together in one big directory. Well, actually there are separate subdirectories, but they're all nested in ...
-1
votes
1answer
46 views

Applying IT Sarbanes–Oxley (SOX) to a tool management application [closed]

Does an application that manages access controls to a suite of tools (Jenkins, Nexus, BitBucket) in a SOX environment need to be considered a SOX application? The app itself only deals with data in ...
0
votes
1answer
65 views

Completely hiding a dir, but leaving its descendants accessible via symlinks, in Samba

Due to the way Samba handles symlinks and wide links (it can only distinguish "within the share root" or "outside the share root") I want to create fixed symlinks in the share root to the "actual" ...
0
votes
1answer
94 views

Ubuntu user access restrictions

I want to create an user account for each users at our office, where 2 users can have the full permission, whereas other users have limited access, say /var/www/html/ or /home/username.
2
votes
1answer
146 views

Struggling with OpenLDAP configuration

I've been configurating a LDAP server on a linux instance using AWS EC2. Up to now, I successfully set up LDAP and phpLDAPadmin to work together. I've created Users and Groups "Organisation Units". I'...
0
votes
1answer
70 views

Can I seperate users in VmWare to only access their own VM's by default?

I am trying to create a practise enviroment in VmWare EXSi 6.0 using a single host where students could login using vSphere and create VM's for server install practise. However, I want to prevent ...
2
votes
2answers
3k views

Restricting a program's access to the Windows registry

Is it possible to prevent a certain program from accessing the Windows registry? I know there are ACLs to lock out a user, but what about per-executable control?
4
votes
1answer
2k views

Impossible to modify Windows 10 drives from other OSs

I'm here to describe an interesting issue I've been facing today, in order to get some hints or solutions. My goal : access and modify one of my computer's Windows (10) system hard drive in order to ...
1
vote
2answers
92 views

How to make a network be fail-deadly upon physical tampering?

I wish to no longer allow my roommate usage of my internet line. While the router I have gives me surprisingly powerful administrative control over my network, any blocks I put in place can be ...
0
votes
3answers
9k views

Inbound/Outbound ACLs?

I do understand the basic difference but I find it confusing. One processes packet first then routes it and other routes first and then it's processed in ACL. If I want to save routers resources then ...
0
votes
1answer
150 views

How to add a Deny ACE for TrustedInstaller?

I'm having trouble deleting a file/folder. The operating system claims its in use even though its old and subject to deletion. The same problem occurs on occasion under both Windows 8 and Windows 10. ...
1
vote
2answers
542 views

Can't delete Windows.old under Windows 10, Service Pack 1

I'm having trouble deleting Windows.old after applying the Windows 10 Version 1511 (Fall Update) (i.e., Service Pack 1 as its know internally). According to KB 930527, I should be able to use Disk ...
1
vote
0answers
205 views

MacOSX Server accessed from Screen Sharing not allowing to change Access Control

I have a Mac Mini working as a build server for my iOS apps. However, the XCode Server daemon runs with special permissions, that requires certificates to be added in the System keychain. In order ...
0
votes
0answers
39 views

Appropriate Location for Executable BitTorrent Sync in Debian 8.1?

I am wondering if there is any good location for the executable of BitTorrent Sync. I have it many times at HOME but not sure if its the best way. Perhaps, some locals is better. How would you ...
0
votes
1answer
228 views

TeamViewer issue

Today I had the stupidity to grant full access to a stranger on my TeamViewer. Don't ask me why, such a foolish thing to do. So once done, he/she created an admin account on my laptop and blocked my ...
2
votes
1answer
1k views

How to increase delay of ssh root access every time login fails

Is there a way in Linux to delay, for example double the delay time, of the ssh root access every time an ssh root login fails from a given IP and them let the delay expire after X minutes of no login ...
2
votes
1answer
52 views

Is it possible to limit remote administration accesses of an admin using Selinux?

Suppose and admin needs to access a machine remotely.Root logins are disabled but he belongs to the sudoers list. I read that "sudo command" is good practice because you don't forget you are using ...
6
votes
1answer
4k views

Unknown Contact has full access to folder?

Is anyone able to take any educated guess(es) about what this "Unknown Contact" is, which has access to a few shared folders on my computer? The concerned machine is connected to another via a ...
3
votes
1answer
140 views

Reversing AppArmor log line to rule

I am looking for a way to easily reverse a single line from /var/log/syslog reported by AppArmor for a profile in complain mode. I have seen that using aa-genprof that it uses what is reported to the ...
1
vote
1answer
9k views

Apache Add 'Access-Control-Allow-Origin' header

I am running Apache on a Windows Server 2012 Machine, an keep getting No 'Access-Control-Allow-Origin' header messages. Specifically, the message I get is this: XMLHttpRequest cannot load http://...
1
vote
3answers
4k views

PHP can't connect to PostgreSQL with “permission denied” error with SELinux

My PHP app can connect when I turn off SELinux, but not with it on. setenforce 0; curl -I http://domain.com; setenforce 1 Yields no errors in /var/log/httpd/error_log. However, if I have it on, I ...
1
vote
1answer
914 views

how to reset internal hard disk drive access permissions on windows 7 [duplicate]

I restricted the access permissions of F drive on my hard disk after that my os is changed without removing the permissions thats why i am not able to access that drive, can any one help me ??
1
vote
2answers
128 views

How to make a computer not detect flash drive?

One of my acquaintances often comes to me with his pen drive and uses my laptop for a long time, which gets me annoyed. How do I make my machine temporarily not detect any external flash drive ?
1
vote
1answer
293 views

Windows 8.1 and totally denied access to all users and administrators

I lost control over one whole disc. I called icacls and denied all access on g:\ to Everyone. But then - every call of icacls fails with the access denied message. Neither owner nor any administrator ...
1
vote
1answer
645 views

Allow access to Apache server from .local name in URL

I am running an Apache server on one of my macs in my local network. At the same time in my httpd.conf file I allow all the computers in the local network to access it using allow from 192.168.1. ...
0
votes
0answers
755 views

Network resource access control (maybe using VLANs?)

I'm trying to set up a network that has a couple of different device groups with different access rights. Physically, devices are connected to the network either via wall-ports or via one of several ...
0
votes
0answers
23 views

Allowing access to source files for only a group of users in a webserver

I have this folder structure : RootFolder Export Files Site and want the access to the files (source code) in Export and Site to be allowed only for a group of ...
1
vote
2answers
435 views

Non-admin account should not have shutdown & restart privileges

The admin account on my PC should ALWAYS BE RUNNING. I am allowing other accounts to use the PC (includes running apps of course) while the admin is logged in but i want to prevent that non-admin ...
4
votes
3answers
5k views

SELinux transition from unconfined_r to user_r

On a Fedora 18 machine, I have the following SELinux context as a regular user created during installation: $ sestatus SELinux status: enabled Loaded policy name: targeted ...
0
votes
1answer
895 views

Limit program's (Viber for Linux) access only to certain directory

Is it possible to limit programs' access only to certain directory, for example, to run Viber on Fedora and force it to only be able to read under /home/username/.local/share/viber/exchange and no ...
-1
votes
1answer
302 views

“White-listing” USB drives in antivirus?

I was just reading some antivirus manuals and came across a mention that the antivirus will block all read/write access to removable media except for white-listed drives. Can somebody explain to me ...
0
votes
0answers
233 views

Allow Secondary Logon (Run As) to a specific exe only

Is it possible to disable Secondary Logon (Run As) to all programs except for one? If yes, how? If not, is it possible to always run a specific program as administrator without using Secondary Logon (...
1
vote
0answers
224 views

How does UAC generate the relevant list of accounts?

When you click on a "shielded" button in Windows 7, UAC tries to figure out what accounts can access the feature behind that button. This happens very quickly; and I succeeded to capture it only by ...
1
vote
1answer
1k views

Tracking people with NFC/RFID

I recently read an article about a Texan student called Andrea Hernandez who refused "wearing" an RFID tracking tag at school. I became interested in the subject. Apart from any legal/social/...
1
vote
0answers
2k views

Temporarily block other users from network printer

I found where someone else asked this question here, but they did not get a working answer. We have a printer that is shared. It has it's own network card, so we all have equal access to it. (none of ...
1
vote
0answers
119 views

Shared folder with access control and logging

At work we are 20 people who access a folder thats shared on a computer running Windows 2003 Server Enterprise. We've been facing issues with people playing pranks by deleting some files every now ...
1
vote
1answer
173 views

Create a Git view like in SQL

Is it possible to create a view of a Git repository just like in SQL? I would like to give someone access to a repo, but just on a certain file types such as CSS; however, I want to deny access to PHP ...
4
votes
1answer
3k views

git management - user rights

I have to set up git for a development team. The team members must have different rights. Some roles should have read rights only, some should be able to push but not to create new branches or tags. ...
1
vote
5answers
4k views

CAC not working; Chrome gives “error 107”

One of my employees recently got a CAC card and a USB reader. The reader works fine, and I can see the certificates if I open IE9 and go to Options > Content > Certificates > Personal. When I go to ...
0
votes
1answer
376 views

Windows 7 access rights - Remote desktop connection vs. “real” login

Is there any (implicit) difference of access right depending on whether I directly logon to a Win 7 system or whether I do this via a remote desktop connection as the same user. I wonder, because I ...
0
votes
1answer
344 views

Multilevel access control in Active Directory…?

I'm trying to solve a problem. The tool i'm trying to use is Active Directory, but i'm not sure if it is the right tool for the job. Let me try to explain... I have an application(a website) under ...