Permission denied when read file with setGID

I'm using a NFS system. I noticed that once I set setGID to a file, e.g.
chmod g+s myfileThe file become un-readable (even root user is not able to access it). if I try to read, i got:
tail myfile
cannot open `myfile' for reading: Permission deniedWhat could be problem? using ls -l or getfacl, I can see owner,group, other all have read permission though:
ls -l
-rw-r-Sr--+  1 oracle dba  5 Sep 19 07:51 myfile
getfacl myfile
# file: myfile
# owner: oracle
# group: dba
user::rw-
group::r--
mask::rwx
other::r--

Using the nosuid option is a good idea and you should consider using this with all NFS mounted disks. It means that the server's root user cannot make a suid-root program on the file system, log in to the client as a normal user and then use the suid-root program to become root on the client too. http://tldp.org/HOWTO/NFS-HOWTO/security.html
You could ask your system administrator to check file permissions on the parent directory, but it will require a more in-depth review of your configuration to analyze what's going on, and this is not possible unless you provide more information.

Similar Messages

  • Permission Denied when calling a method from VB using WebLogic 8.1.2 JCOM

    Hi,
    We are calling an java/ejb methods from VB using WebLogic JCOM 8.1 SP2. But
    using JCOM, we are getting a error Permission denied when called from VB. We think
    that we should update pathch jintegra 2.0 or 2.1 in WebLogic 8.1.2 the to solve
    this issue, because we faced the same problen "permission denied" when we used
    JINTEGRA(third party software). Once we installed the JINTEGRA 2.1 it solved the
    issue.
    So, can anyone help on regard to this issue of "Permission denied" in WebLogic
    JCOM 8.1 SP2.
    Thanks & Regards
    Raghu

    I too am experiencing the jCOM error: "Run-time error '70': Permission Denied". The problem appears to be related to a Microsoft Security Patch KB835732 (MS04-011 which, as you indicated, has been fixed in J-Integra v2.1 (FYI, jCOM 8.1 is based on J-Integra 1.5.4, see J-Integra/jCOM versions.
    Did you ever get a resolution concerning 8.1 SP2? 8.1 SP3 is available now but I don't see any mention of jCOM updates in the WebLogic 8.1 What's New documention. I can't immediately upgrade (trying to stay on same version as a few other developers I work with) but I am hoping it is resolved in SP3.

  • Hi, I have Mac Book It currently at 10.6.8 I want know how to recover the FileVault Password? I tried /Library/Keychains/FileVaultMaster.keychain but it say permission denied when i'm the admin account

    Hi, I have Mac Book It currently at 10.6.8 I want know how to recover the FileVault Password? I tried /Library/Keychains/FileVaultMaster.keychain but it say permission denied when i'm the admin account

    Hi BobRz,
    As this is a new issue for me, I believe I had the incorrect approach, maybe you can help me. What I want to do is recover a few files in my desktop, and some information i had on the iCal application and the Mail application as well.As I do not want to do a full migration into this computer (which is not mine) I believe that starting the damaged MBP in Target mode should allow me to search and cop the files I need. But:
    1. Can I open the Ical and mail apps to look for the info I need while reading it as an external HD  ?
    2. Do the target machine (my friends) still need to be updated to ML o Mavs so that it recognizes my MBP as an external drive if starting it in Target mode ? (no migration assistant)
    Thanks.

  • Adobe Bridge CC crashes when opening file with Photoshop CC or Camera RAW!

    Adobe Bridge CC crashes when opening file with Photoshop CC or Camera RAW!
    - Tried to Reset the preference with CTRL + Click.
    - It's just new clean install didn't do anything with it yet.
    - Windows 8.
    Any help?

    Just that one project, or any project?  Can you create new projects?

  • What to do when local file with serial number has been removed?

    what to do when local file with serial number has been removed?

    Please describe your problems and symptoms in more detail. Please include system (eg Windows 7) and name + version of Adobe software.

  • When a file with extension .htm as a product from Epilex is opened, there was a notify a screen, "This epiLearn is not supported on Netscape browsers. epiLearn supports Internet Explorer 5.5 or above. Please launch it in Internet Explorer"

    My company has decided to use Epiplex software.
    But when a file with extension .htm as a product from Epilex is opened, there was a notify a screen,
    "This epiLearn is not supported on Netscape browsers. epiLearn supports Internet Explorer 5.5 or above. Please launch it in Internet Explorer".
    I prefer to use Mozilla than Internet Explorer. Would u please handle Mozilla browser along this problem to be available in this matter?

    This might be simple but it works well for me.
    1. 
    Right click on the tool bar in IE8 and uncheck adobe PDF to disable.  Click yes when it ask if you are sure.
    2. 
    Open Adobe
    READER located in the start menu.
    3. 
    Click on Edit and then on Preferences.
    4. 
    Select the "General" category.
    5. 
    Click on "Select default PDF handler"
    6. 
    Adobe Reader should be already selected. Change it to reader if it is not.
    7. 
    Click on "Apply" and except changes.
    8. 
    Restart the computer and you are done.
    Now you can open and save PDF's from IE8.  Once you save it, you can right click and "open with" Acrobat if you choose. 
    Be careful to not make Acrobat the default or you have to start over.
    You can still create PDF's from docs, scans, and picture like before.  You might think this is a work around but it really isn't. 
    Some forms that are available on the internet can't be opened by Acrobat for security reasons.
    Good luck!      P.S. I am not an IT tech but I play one on TV.

  • Photoshop CS6 (Mac) crashes when opening files with type or using the type tool

    Hi,
    Photoshop CS6 keeps crashing when using the type tool or when opening files with type on it. I've quit suitcase, disabled the suitcase plug-in, reset the preferences in Photoshop there's no crash report coming up either the application just dies! I am currently trying a system restore from time machine to see if that works!. Any other suggestions would be greatly appreciated.
    Many thanks
    Olly

    http://blogs.adobe.com/crawlspace/2012/07/photoshop-basic-troubleshooting-steps-to-fix-mos t-issues.html
    http://helpx.adobe.com/photoshop/kb/troubleshoot-fonts-photoshop-cs5.html

  • Dreamweaver very slow when opening files with external links

    Is there any way to fix Dreamweaver CS5 (Windows 7, 64bit) when opening files with external references?
    For example, I have a very simple CSS file, and toward the top the file has a line that says:
    @import url("https://fonts.googleapis.com/css?family=Ubuntu:500,700");
    This causes the file to take around 20 seconds to open in DW. If I comment out the line or remove it, the file opens almost instantly. This behaviour is also present in files that contain an SSI.
    DW often crashes before being able to open the file and I need to restart the app.
    Can I disable DW from attempting to load the references?? It's obviously what is causing the issue IMO and would love to make DW workable again!

    "Enable Related Files" isn't the fix for this issue. It's slightly different - I wanted to still load related files, but only the ones local to the file I was editing.
    The fix was to use DW's Resolve To IP Address feature. It required adding a registry value - it fixed the issue straight away
    This Adobe support doc helped: http://kb2.adobe.com/cps/887/cpsid_88742.html

  • Permission Error when copy files into cmsdk using NFS with non admin user

    Hi All,
    We are using CMSDK with NFS protocol and we have created different users with ACL to control different access for users.
    When we copy files into cmsdk folders using one of the admin user this works fine, even a multiple copy works fine. But when we use any non admin user , some time copy commands works but some time it throw a permission deny error. and this is happening very intermittently.
    when we use ftp protocol and ftp file it's all works fine for the both admin & non admin user. Is there any limitation in using CMSDK NFS protocol
    Did any one encouter any similar issue. Any pointers would be of great help.
    Thanks in advance
    Regards,
    Navin

    Hi All,
    We are using CMSDK with NFS protocol and we have created different users with ACL to control different access for users.
    When we copy files into cmsdk folders using one of the admin user this works fine, even a multiple copy works fine. But when we use any non admin user , some time copy commands works but some time it throw a permission deny error. and this is happening very intermittently.
    when we use ftp protocol and ftp file it's all works fine for the both admin & non admin user. Is there any limitation in using CMSDK NFS protocol
    Did any one encouter any similar issue. Any pointers would be of great help.
    Thanks in advance
    Regards,
    Navin

  • Play sound in specified duration and desired file when reading data with VISA functions ?

    Hi.
    I read data with VISA read function and then I use functions like multiple for showing data on Chart. every thing is OK.
    now I want play a specified sound (like a 3s song in my desired folder) when signal amplitude cross over from specified value. then after desired time, it will be wait for new cross over from specified value and this procedure repeat again until I stop the program. 
    Data comes from MCU and it doesn't stop when system play sound and when system play sound, incoming data for this part (play sound) will be ignore them until specified expired.
    I use this VI for reading data and mentioned part which is sound part is empty and I don't know what I must done ?
    altougth I use another while loop for sound apart because I want save CPU time.
    Thanks.
    Solved!
    Go to Solution.

    I would recommend making the data type of the notifier a cluster that contains a path and a numeric (double).  The path tells the player which file to play.  The numeric is the duration.
    Now for a slightly complicated, but really neat, way to stop your second loop.  Do not use a second notifier.  Instead, send the normal notification but use Not A Path for the path in the cluster.  Your second loop can do a check for the Not A Path and stop when that is recieved.
    There are only two ways to tell somebody thanks: Kudos and Marked Solutions
    Unofficial Forum Rules and Guidelines

  • [SOLVED]"permission denied" when building pkg

    most consistantly, I get the error when a pkgbuild has the line: ./autogen.sh
    in building linphone-git, mediastreamer-git and ortp-git
    another time, I got burned with the line: ./system.tmp
    from building wiimms-iso-tools
    and the last pkg I tried to build, I got it on the line: ./file2h
    while building linux-wbfs-manager
    ...it really bugs me about these packages, because my desktop has the exact same install and works fine (so well, I can build them on the desktop and install them on the laptop... but that becomes tedious after a while, so I'd like to fix this issue... I searched for the issue in the forums, and it always semed to be related to the actual pkgbuild... but that's not the case in my scenario because the build works fine on the desktop and kicks me in the teeth on the laptop.  Please ask whatever questions necessary to get the info needed to deal with this issue.  I'm not really strong at pkgbuild configurations (only make a couple for my own to test my abiliities) so I'm not sure what to include exactly.  I can include the line numbers for the pkgbuilds in question, but I'm sure the PKGBBUILDs are not the issue here... it's something to do with my laptop...
    come to think of it, my desktop isn't quite up to date as my laptop, I think... because the laptop ran into an issue where python-qt and python-sip were attempting to replace python2-qt and python2-sip, but both python2 pkgs were deps for like 50+ other packages... so I'm not sure if that's related.  Pretty sure I didn't update my desktop and get that issue... not in the last couple of days.  And that issue started on my laptop today... both issues, actually, so maybe they are related.
    SOLUTION: removed "noexec" from tmpfs options for /tmp ramdisk setup in fstab
    Moral of the story: be mindful of how you configure things, because an old configuration can ruin a new package installation or functionality.
    Last edited by CPUnltd (2011-01-24 22:09:34)

    ==> Starting make...
    patching file Makefile
    Hunk #1 succeeded at 165 (offset 11 lines).
    Hunk #2 succeeded at 459 (offset 19 lines).
    ./setup.sh: line 47: ./system.tmp: Permission denied
    ***  create templates.sed     
    ***  create version.h         
    /bin/bash: ./gen-template.sh: Permission denied
    make: *** [version.h] Error 126
        Aborting...
    The build failed.
    ==> Starting build()...
    gcc -march=x86-64 -mtune=generic -O2 -pipe -Wall -DLARGE_FILES -D_FILE_OFFSET_BITS=64 -Ilibwbfs -I. -pthread -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/include/libglade-2.0 -I/usr/include/gtk-2.0 -I/usr/include/libxml2 -I/usr/lib/gtk-2.0/include -I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0 -I/usr/include/pixman-1 -I/usr/include/freetype2 -I/usr/include/libpng14    -c -o file2h.o file2h.c
    gcc -o file2h file2h.o
    ./file2h wbfs_gui_glade.h wbfs_gui.glade
    make: execvp: ./file2h: Permission denied
    make: *** [wbfs_gui_glade.h] Error 127
        Aborting...
    The build failed.
    ==> Starting make...
    /tmp/packerbuild-1000/linphone-git/linphone-git/PKGBUILD: line 39: ./autogen.sh: Permission denied
        Aborting...
    The build failed.
    /tmp/packerbuild-1000/mediastreamer-git/mediastreamer-git/PKGBUILD: line 35: ./autogen.sh: Permission denied
        Aborting...
    The build failed.
    ==> Starting make...
    /tmp/packerbuild-1000/ortp-git/ortp-git/PKGBUILD: line 34: ./autogen.sh: Permission denied
        Aborting...
    The build failed.

  • Permission denied on a file I own??

    OL 5.7 64bit
    What's up with this?
    I'm logged on as user 'oracle'.
    User 'oracle' owns the directory OPatch, which has full permissions for the owner.
    Yet, when I try to rename (mv) it, I get 'permission denied'.
    oracle:+ASM$ ls -ld OP*
    drwxr-xr-x 8 oracle oinstall 4096 Jul 24 14:15 OPatch
    oracle:+ASM$ mv OPatch OPatch.old
    mv: cannot move `OPatch' to `OPatch.old': Permission denied
    oracle:+ASM$ id
    uid=54321(oracle) gid=54321(oinstall) groups=54321(oinstall),54322(dba)
    oracle:+ASM$

    As you have discovered, directory maintenance operations such as:
    rm(1)
    mv(1)
    rmdir(1)
    rely on your permissions on the directory containing the object, not those of the object itself. Get these permissions like this:
    $ ls -ld .However, as a courtesy of dubious merit, the GNU version of these tools check the writable status of the object as well so they can complain if you try this:
    $ ls -ld .
    drwx------. 79 tommy tommy 12288 Jul 28 09:32 .
    $ touch foo
    $ chmod foo 0444 foo
    -r--r--r--.  1 tommy tommy 12288 Jul 28 09:33 foo
    $ rm foo
    rm: remove write-protected regular empty file `foo'?See, strictly-speaking rm(1) should have removed the file silently, since I have write permissions for foo's resident directory. The original rm(1) did in fact perform the delete.
    Just for fun, try this:
    $ mkdir foo
    $ cd foo
    $ date >now
    $ chmod 0555 .
    $ rm now
    $ rm -f now
    $ cd ..
    $ rm -rf fooWe create a r/w object foo, set the directory to be read-only and then try to delete it. And then try very hard to delete it. And then try even harder.
    So, the rule is that permissions for the directory rule.

  • "Access is Denied" when accessing files in the network

    Hello developers ,
    My JSP application is reading files that reside elsewhere in our LAN (using the "\\\\<some-server>\\<some-shared-folder>\\<some-file>" notation). On my personal Tomcat it works just fine, however the IT deprtment has allocated me a server with a Tomcat installation on it. On this server I get this nasty "Access is Denied" error (with the full pth to the file I'm trying to access from my application). I'm not an administrator on this sevrer (Windows 2000) and only access to the file shre on which I deployed my JSP files.
    I tried to search here and came up with this similar problem, but there is no solution :-(
    Any advice is welcomed.
    Alon.

    Hi gimbal2 ,
    Thanks for your reply. The thing is that "that server" DOES have access to the file when we logon as an administrator on "that server" and browse to that file using Windows Explorer.
    The problem is that once that administrator logs off and the JSP application tries to access the remote file (programmatically, of course), it cannot since "Tomcat" isn't a domain user. It doesn't have priviliges in the domain.
    So programmatically we cannot access the file yet as a logged on Windows administrator we can.
    Does Tomcat have virtual site or directory like IIS? Doing this we can specify the user and password.
    Any clue might help :-)
    Thanks,
    Alon.

  • Permission denied when saving from applications on shared volume

    We have an AFP shared volume on Xraid attached to an Xserve running 10.5.8. The OS is kept up to date.
    Users started to get a "permission denied" message when trying to save open files on the shared volume, which is using POSIX permissions only. This seems to happen to Snow Leopard clients using Pages and Numbers (iLife 09). No errors appear in the server logs.
    At the moment they can circumvent the problem by saving locally and then copying the file onto the server.
    Has anyone got any pointer to a solution?
    Thanks.

    Lucazade wrote:
    This seems to happen to Snow Leopard clients using Pages and Numbers (iLife 09).
    Of course I meant iWork, not iLife.

  • Access Denied when Posting Files

    I've been trying to update the index file on my site. I haven't touched any setting in Dreamweaver on this site. It will not allow me to post this file or any others. I quit and restarted the program and deleted and rebuilt the site and am still getting the following message when I try to upload the files:
    Started: 8/10/10 12:54 PM
    Connected to [my server].
    index.html - error occurred - An FTP error occurred - cannot put index.html.  Access denied.  The file may not exist, or there could be a permission problem.   Make sure you have proper authorization on the server and the server is properly configured.
    File activity incomplete. 1 file(s) or folder(s) were not completed.
    Files with errors: 1
    index.html
    Finished: 8/10/10 12:54 PM
    When I "TEST" my login and password, it connects successfully to the site. I have no idea what to do. I am admittedly in the dark on Dreamweaver and have very little understanding of basic coding.
    I'm on an iMac6,1 in OS 10.5.8; Dreamweaver CS3
    Any suggestions are appreciated.
    Molly

    Have you tried to FTP the file directly to see if it is a server issue or a DW issue?
    If you don't have an FTP program, you should. Here's a great free one that is a FireFox plug in.
    https://addons.mozilla.org/en-US/firefox/addon/684/
    Lawrence Carmer - *Adobe Community Professional*
    http://www.Cartweaver.com
    Complete Shopping Cart Application for
    Dreamweaver, available in PHP and ColdFusion
    Stay updated - http://blog.cartweaver.com

Maybe you are looking for

  • Idoc Error: Could not find code page for receiving system

    hi, I am facing the following error while processing Idocs. ERROR: Could not find code page for receiving system Diagnosis For the logical destination BWFIN, you want to determine the code page in which the data is sent with RFC. However, this is not

  • Using ssh as an http proxy on Arch [SOLVED]

    I read this article and would like to use a friend's debian box as a www proxy.  I ssh'ed into it using the following command from my Arch box: $ ssh user@ip -D 8000 As I understand it, his box is now acting as a SOCKS-type (pseudo)server.  I configu

  • How to load flat files to BI

    Hi All, I am new to SAP BI. PLease tell me how to load excel files to BI.

  • XHTML report development/generation

    Hello, We had a problem for which Oracle support group suggested us to develop XHTML reports. Can anyone please let me know i) How to develop XHTML reports? ii) What tools are available for developing the reports. Ex. Reports Builder 6i, JDeveloper,

  • [SOLVED] Cannot mount kindle

    I have looked up at different posts on this topic but am still at a loss. I cannot mount a kindle dmesg [29881.943452] usb 2-1.5: new high-speed USB device number 75 using ehci-pci [29882.049006] usb-storage 2-1.5:1.0: USB Mass Storage device detecte