The ACL entries are dynamically added/removed on tty switch and login/logout events.
If you log in to the console at tty2, you get device permissions.
If you press Alt+F3 and switch to tty3 where nobody (or another user) is logged in, you lose device permissions and the tty3 user gets them.
This means xinit needs to be used slightly differently.
If you ...
There is a private tmp directory for Apache located in /tmp/*apache2.service*/tmp. This exists because of the private tmp setting in /lib/systemd/system/apache2.service. I found a little article here.
Whenever I call copy(/tmp/....) in the PHP script it will look in the Apache specific private tmp directory. Apache can't see contents of /tmp with this option ...
I got in. For posterity, here's what was happening. It was a two-part problem.
I am using Git Bash. On an ls -al command, the permissions were shown as rw-r--r--. When viewed in Windows Properties, they were set correctly.
The username on the remote box was not properly set up for ssh
To discover this, I logged in using tried from my Mac, setting the ...
I ran into this issue trying to open a link in Microsoft Word 2010 on Windows 10, and found that the issue was that HKEY_LOCAL_MACHINE\Software\Classes\htmlfile\shell contained Edit and Print keys but no open key as expected.
The manual fix
From the Start Menu, open the Registry Editor and navigate to HKEY_LOCAL_MACHINE\Software\Classes\htmlfile\shell by ...
You are only applying the ACL change to the folder you specified with $path, to apply the ACL to everything in the folder you need to list each item recursively:
$path = "C:\Windows\Installer"
$items = Get-ChildItem -Recurse $path
# Enables inheritance on all items in folder
foreach ($item in $items)
$acl = Get-acl $item.FullName
Create a /etc/wsl.conf in your WSL instance (you'll need to use sudo) with the following contents:
options = "metadata,umask=22,fmask=11"
The fmask should give the config the permissions it needs, at least. But you'll still run into problems when you try to use your private key, since it can't be world-readable.
You can ...
Currently any user could SSH in (or via a script) do "ls /home" and see all the accounts on the server. They can't do anything with that information of course, "ls /home/user" would fail, however I'm wondering how "ls /home" could just show the current user's folder.
Remove the 'read' permission from /home with chmod go-r.
This is an uphill battle. The general solution is to use chroot jails and/or custom shells. Doing this does have limitations though.
IMHO, allowing shell access opens up a large can of security worms, and I wonder if you are undereatimating the risks of shell access.
In general, rely on the integrity of the applications you've installed (and on keeping your machine physically safe from installation of malware, e.g., while traveling). It is possible for an application, such as Nirsoft's WiFi Key View, to read the cached passwords in Windows. Before installing an application, check it with a few anti-malware tools, such as ...
Chrome blocks vulnerable features, including camera, location, microphone, etc. on non-secure sites. As of July 2018, with the release of Chrome 68,
Chrome starts to mark all HTTP sites as "not secure".
You have three options to unblock these features for your site:
Treat your URL, for example 192.168.10.79, as secure origins by setting chrome://...
The runas command starts a CMD instance under the account of admin.
However, Windows runs commands as non-elevated, even for administrators.
For starting any command as elevated from the command-line, see the post
How to open an elevated cmd using command line for Windows?
The highest-voted answer in the post was to use the command:
powershell -Command "...