[Solved] Giving A Normal User R/W Access To A SSD

I have virtualbox setup so that it has direct (raw) access to my SSD (which is formatted with NTFS if it that matters) but the only way I can currently get it to work is by running virtualbox with root permissions. How can I make it work with my normal user?
Last edited by brando56894 (2011-07-26 16:15:06)

So the problem is that your user have no rights on the /dev/sdXY device on your hostsystem? Let's assume that your SSD is /dev/sdc.
If you look at: ls -l /dev/sdc you will see that only user root and members of group disk have access(rw) on this device.
One could think: ok, i put my normal user in group disk, problem solved. That's right, but it opens unneccassary security risks. It's bad to give a user more rights than needed exactly for one job. In group disk the user has direct access to all blockdevices on the host.
So one possible solution: Devices in /dev are setup by udev via rules. So write a rule that change ownership on exactly the SSD device (sdc). Maybe with owner root:privdev, and put your user in the (new) privdev group.
The IMHO better, simpler solution is IMHO: Use ACL's. (from package acl)
With above example /dev/sdc:
getfacl /dev/sdc
getfacl: Removing leading '/' from absolute path names
# file: dev/sdc
# owner: root
# group: disk
user::rw-
group::rw-
other::---
Now add a acl for your user (username brando for ex.)
setfacl -m u:brando:rw /dev/sdc
Control with getfacl and you will see that brando have now rw access directly on the device.
You could put this permanently in /etc/rc.local
Instead of /dev/sdxy in device naming it's better to work with ID's or UUID's. Adressing could be then:
/dev/disk/by-id/???
/dev/disk/by-uuid/???
Identify your SSD device by looking in these directories. Not using the "old" /dev/sdxy naming prevents from wrong access when the SSD may changes the order of blockdevices.
Last edited by GerBra (2011-07-26 08:27:53)

Similar Messages

Automount using udev, but normal user can't access

i'm using udev rules to automount usb drive. one of my external drive using usb to connect my pc.the file system of that external hdd is ntfs. when i plugin, automount in /media, but i can't using normal user to go in. need superuser.how to i slove this question?

miau wrote:You could also try to install ntfs-3g, maybe its a problem related to NTFS.
i already install ntfs-3g, i use "mount -t ntfs-3g /dev/sdb1 /media/usbhd" with no problem read and write.
how do i add to udev rules?

Access denied when trying to use PDF printer as normal user

I have Acrobat 8 professional installed on a computer running Windows XP SP3. When i try to print a document to pdf from any program as Administrator it performs just fine. When i log on as a normal, restricted, user i get the window popup asking for a file name and location and whereever i try to save a file i get "access denied" error.
Users have right to write and modify in all of the folders i've tried to save to (desktop, my documents, custom made folders), but i think the problem is with the temp file being written to some system folder where restricted users don't have permission to write. Did anyone encounter a similar problem, and how did you solve it? What directories do the normal users need access to in order to perform printing.
Thank You

The forum added some nice links and i found my answer here http://forums.adobe.com/message/1179199#1179199 - changed the registry key permissions and it's working like a charm. Thank you.

How a normal designer user gain RAU access privilege

Hi,
We have installed Oracle 9i Designer in our setup.Today we got a requirement that a normal Designer user wants to access Repository Admin Utility(RAU)(Normaly a repository owner alone have the permission to get into RAU).
What is the procedure to be followed to provide RAU access privilege while login in to Oracle 9i Designer as a Normal Designer user.
Help me to solve this call.
Thanks
Rajan.

Why does a normal user require RAU permission? I think this is a dangerous thing to do. Unless you trust this person not to trash your repository (accidently or otherwise), in which case just give them the existing RAU password.
But I think you would be better off finding out what it is they want to do that requires administrator privileges and doing it yourself. In my experience it is quite easy enough to shag a designer repository when we know what we are supposed to be doing without allowing normal users to have RAU access as well.
Cheers, APC

[SOLVED] DBUS boot problems - Mounting system devices as a normal user

I have the [testing] and [community-testing] repositories enabled. A few days ago, probably due to an update, I started having trouble mounting devices and the shutdown/reboot options don't show up anymore on the LXDE exit menu.
I use gvfs for mounting devices as a normal user with PCManFM or Thunar. The error message is "Authentication is required".
After some testing, I found out that by restarting dbus, I could start mounting devices again:
/etc/rc.d/dbus restart
So my guess is that there's some problem with dbus startup. I have it in DAEMONS of rc.conf, as well as .xinitrc, the daemon seems to start correctly on boot, and it worked previously, so I have no idea of what could be wrong.
My ~/.xinitrc:
if [ -d /etc/X11/xinit/xinitrc.d ]; then
for f in /etc/X11/xinit/xinitrc.d/*; do
[ -x "$f" ] && . "$f"
done
unset f
fi
if test -z "$DBUS_SESSION_BUS_ADDRESS" ; then
eval 'dbus-launch --sh-syntax --exit-with-session'
fi
numlockx && exec ck-launch-session dbus-launch startlxde
My /etc/rc.conf:
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# DAEMON_LOCALE: If set to 'yes', use $LOCALE as the locale during daemon
# startup and during the boot process. If set to 'no', the C locale is used.
# HARDWARECLOCK: set to "", "UTC" or "localtime", any other value will result
# in the hardware clock being left untouched (useful for virtualization)
# Note: Using "localtime" is discouraged, using "" makes hwclock fall back
# to the value in /var/lib/hwclock/adjfile
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# Note: if unset, the value in /etc/localtime is used unchanged
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="ca_AD.UTF-8"
DAEMON_LOCALE="no"
HARDWARECLOCK="UTC"
TIMEZONE="Europe/Andorra"
KEYMAP="es"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# MODULES: Modules to load at boot-up. Blacklisting is no longer supported.
# Replace every !module by an entry as on the following line in a file in
# /etc/modprobe.d:
# blacklist module
# See "man modprobe.conf" for details.
MODULES=()
# Udev settle timeout (default to 30)
UDEV_TIMEOUT=30
# Scan for FakeRAID (dmraid) Volumes at startup
USEDMRAID="no"
# Scan for BTRFS volumes at startup
USEBTRFS="no"
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
# HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
HOSTNAME="localhost"
# Use 'ip addr' or 'ls /sys/class/net/' to see all available interfaces.
# Wired network setup
# - interface: name of device (required)
# - address: IP address (leave blank for DHCP)
# - netmask: subnet mask (ignored for DHCP) (optional, defaults to 255.255.255.0)
# - broadcast: broadcast address (ignored for DHCP) (optional)
# - gateway: default route (ignored for DHCP)
# Static IP example
# interface=eth0
# address=192.168.0.2
# netmask=255.255.255.0
# broadcast=192.168.0.255
# gateway=192.168.0.1
# DHCP example
# interface=eth0
# address=
# netmask=
# gateway=
interface=eth0
address=
netmask=
broadcast=
gateway=
# Setting this to "yes" will skip network shutdown.
# This is required if your root device is on NFS.
NETWORK_PERSIST="no"
# Enable these netcfg profiles at boot-up. These are useful if you happen to
# need more advanced network features than the simple network service
# supports, such as multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network.d
# This requires the netcfg package
#NETWORKS=(main)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
# If you are sure nothing else touches your hardware clock (such as ntpd or
# a dual-boot), you might want to enable 'hwclock'. Note that this will only
# make a difference if the hwclock program has been calibrated correctly.
# If you use a network filesystem you should enable 'netfs'.
DAEMONS=(hwclock syslog-ng network crond alsa dbus cupsd)
Thanks!
Last edited by gamezelda (2011-11-08 19:28:04)

I solved it.
The Wiki page for Mounting for normal users with PCManFM tells to create a "/etc/polkit-1/localauthority/50-local.d/55-myconf.pkla" file specifying the privileges to grant to the user. The problem is that it does not include the privilege needed to mount internal drives (which was what I was trying to mount). To fix it, I added:
;org.freedesktop.udisks.filesystem-mount-system-internal
To the "Action=..." line.
(Though I have no idea why it worked before it broke, or why restarting dbus after initializing my WM fixed it.)
As for the power issues, I've concluded that it was working, but restarting dbus after initializing my WM broke it (my bad for not checking it before restaring dbus). So it all works now.

ALSA won't work for normal user [solved]

hello archers!
alsa on my arch box doesn't work for normal user, just for root. when i attempt to run ogle, it gives this error:
ALSA lib pcm_dmix.c:1102:(_snd_pcm_dmix_open) The field ipc_gid must be a valid group (create group audio)
ERROR[ogle_audio]: Opening alsa pcm device 'default': Invalid argument
FATAL[ogle_audio]: failed opening the alsa audio driver at default
error in the first line accurs even when i attempt to open audio tab in winecfg. googling this error didn't help me. xmms with alsa output doesn't seem to work too giving the same error, it works just with oss output.
hmm, and YES i DO HAVE audio group, and my user IS member of this group.
[root@otovo /]# ls -l /dev/sound/
total 0
crw-rw---- 1 root audio 14, 12 2006-03-09 01:37 adsp
crw-rw---- 1 root audio 14, 4 2006-03-09 01:37 audio
crw-rw---- 1 root audio 14, 20 2006-03-09 01:37 audio1
crw-rw---- 1 root audio 14, 3 2006-03-09 01:37 dsp
crw-rw---- 1 root audio 14, 19 2006-03-09 01:37 dsp1
crw-rw---- 1 root audio 14, 0 2006-03-09 01:37 mixer
crw-rw---- 1 root audio 14, 16 2006-03-09 01:37 mixer1
crw-rw---- 1 root audio 14, 1 2006-03-09 01:37 sequencer
crw-rw---- 1 root audio 14, 8 2006-03-09 01:37 sequencer2
can anyone help me? or should i provide more information?
thanx & greetings
ota

I've found it!
groups run under user gave just gids of groups, whilst under root it gave proper names. so i took look at /etc/group and here is the problem :shock:
[root@otovo etc]# ls -l group
-rw------- 1 root root 427 2006-03-09 01:32 group
i've changed permissions to a+r and it's working.
thanks Gandalf, you've helped to save the Middleearth again .
ota

XFCE4's terminal doesn't keep transparency w/ normal user [solved]

... but it can as a root user. I can set it to something after I launch it, but after I close it and reopen it, it's 0% transparent again. It doesn't do this when I run sudo Terminal, so I imagine it has something to do with file permissions somewhere. Maybe I even saved the settings as sudo'd root at one point in time and set the config file permanently (as far as a normal user is cocerned), but since the file is now owned by root, I can't access it? I don't know the file regardless
Any thoughts?
Last edited by synthead (2007-06-04 00:28:35)

B wrote:Is ~/.config/Terminal/terminalrc user-read- and writeable?
And owned by you? I usually find it inadviseable to sudo anything that automatically writes config files. Even Vim gives me this problem sometimes (with .viminfo).

Firefox/Mozilla won't run as normal user [SOLVED]

I have had this weird thing happen, where Mozilla and Firefox wont' work as a normal users. I fixed this temporarily by allowing non-group rwx access to /tmp, however somehow the problem has returned again.
Has anyone else had this? I'm not sure what log to check for errors either. Basically, is starts loading, then exits before starting

seems to be fine here
-- no firefox folder
> ls -ld .mozilla
drwxr-xr-x 5 yohoho users 184 2006-03-06 19:39 .mozilla/
>ls -l .mozilla
total 8.0K
-rw-r--r-- 1 yohoho users 335 2005-02-26 05:39 appreg
drwxr-xr-x 3 yohoho users 144 2005-02-26 05:39 firefox/
-rw------- 1 yohoho users 1.9K 2006-03-15 10:21 pluginreg.dat
drwxr-xr-x 2 yohoho users 48 2005-06-23 05:31 plugins/
drwxr-xr-x 2 yohoho users 80 2006-01-15 18:41 searchplugins/

[SOLVED] Can't hibernate with xfce as normal user

Until recently, I can't hibernate using xfce menu as normal user. All other operations such as poweroff, reboot, logout... works.
When I tried systemctl:
> systemctl hibernate
Failed to issue method call: Operation not supported
Failed to issue method call: Access denied
"sudo systemctl hibernate" works
All other operations also works for normal user (without sudo).
When I checked CanHibernate:
>sudo dbus-send --system --print-reply --dest=org.freedesktop.login1 /org/freedesktop/login1 org.freedesktop.login1.Manager.CanHibernate
method return sender=:1.0 -> dest=:1.56 reply_serial=2
string "na"
Which is totally not true since I could hibernate as root.
CanReboot, CanShutdown... returns "true".
As expected, this doesn't work:
> dbus-send --system --print-reply --dest=org.freedesktop.login1 /org/freedesktop/login1 org.freedesktop.login1.Manager.Hibernate boolean:true
Error org.freedesktop.DBus.Error.Failed: Operation not supported
And of course, all other operations work, which is confusing.
Package versions:
> pacman -Q xfwm4 xfdesktop xfce4-session xfce4-power-manager systemd slim polkit
xfwm4 4.10.1-1
xfdesktop 4.10.2-1
xfce4-session 4.10.1-3
xfce4-power-manager 1.2.0-5
systemd 208-1
slim 1.3.6-1
polkit 0.112-1
Any ideas what's wrong? Thanks in advance.
Last edited by bullno1 (2013-10-05 05:57:20)

qr wrote:
Hey,
I experienced the same problem after todays update and after I downgraded systemd and systemd-sysvcompat to 207-5 it's working again.
I still have to figure out what changed, but it's a temporary fix. Hope it helps.
Thanks. Downgrading seems to fix it.
root wrote:As far as I see you are using polkit with XFCE, are you aware that recent updates (03/09 in my pacman log) established that polkit would not autostart anymore but in GNOME Flashback?
You might want to make sure polkit is running (not only installed) and consider switching to lxpolkit which is suggested as a lightweight alternative which will start automatically with DEs such as XFCE.
It is running. Thanks for the suggestion about lxpolkit. I'll check it out.

Can not access usb hd as normal user

Hi,
I am trying to give read and write permissions to a normal user on my usb hd. This is in my fstab:
#/dev/sdc1 /media/usb auto rw,user,exec,dev,suid,user 0 0
/dev/sdc1 /media/usb auto defaults,user 0 0
(I tried the commented as well as the not commented line).
I can mount /media/usb as a normal user succesfully, but then:
> ls /media/usb/
ls: cannot open directory /media/usb/: Permission denied
The permisions of /media/usb are:
drwxr-xr-x 2 ls users 4096 2008-11-28 21:41 usb
(ls is my username).
I can access as root.
What could be wrong?
Thanks!
Nathan
Last edited by LonelyStar (2009-02-10 22:03:55)

What is the filesystem used in your partition ?
Can you post the output of 'cat /proc/mounts' .

Pse help! I boot my computer with apple + s and I can't return to normal user access

I need your helpy I boot my computer with (apple + s) and now I can't return to normal user access again because on the sceen I don't see my session

Thank you for answer but it's not possible to write anything because I get an invite to put a password (without my name) and an invite for Guest. The problem is I cant put the right password because my keyboard is azerty et in my password content the euro symbol (€) and (&). So I think there is the problem. I also think if I can return in normal boot (I mean with my own session) everythings will OK for me. Can you help me? Sorry for my english my mother language is french so I have some little difficulties to translate

Normal users accessing mounted NTFS disks? (Music related)

I havent yet fully converted to linux, so all my music and other stuff is on NTFS partitions.
My NTFS partitions are listed in fstab with the "defaults" options, only root have access to them now, however I want to play my music as a normal user.
How do I enable normal users, or preferably only one user, to access these partitions?
semi-newbie :?

_Gandalf_ wrote:
I usualy mount with both suggestion above, actually i need full read acess to all users logged in the machine so i do
umask=022,uid=1000,gid=102
BTW u don't need to read /etc/passwd to know ur uid/gid, instead use the command
id
the id command was handy, thanks

IE report access to normal user (SCCM 2012 R2)

Hello All
Trying to wrap my head around allowing "normal user" to view/run reports via internet explorer http://servername/Reports
I created a new group called SCCMReportViewers in AD and added one user to that group, then I went to SCCM 2012 and created a new security role by coping existing one called read-only analyst and called it reporting user. On that new role I changed all permissions
to run reports and nothing else. Then I added that new AD group under Administrative Users on SCCM 2012 server with security role that I made in previous step (reporting user)
When I try to access http://someserver/Reports I get logon window and after I log on as "normal user" I do not see any reports at all. I even added sccmreportviewers group permission directly on one of reports with permission to run reports and
browse but that didn't get me any closer to solution. Mind you admin users on sccm 2012 can see all reports and run them with out problems.
PS
SQL2012 server is running on another server then sccm 2012 and reporting service is installed on SQL2012 server

Hello All
Trying to wrap my head around allowing "normal user" to view/run reports via internet explorer http://servername/Reports
I created a new group called SCCMReportViewers in AD and added one user to that group, then I went to SCCM 2012 and created a new security role by coping existing one called read-only analyst and called it reporting user. On that new role
I changed all permissions to run reports and nothing else. Then I added that new AD group under Administrative Users on SCCM 2012 server with security role that I made in previous step (reporting user)
When I try to access http://someserver/Reports I get logon window and after I log on as "normal user" I do not see any reports at all.
The SSRS reports will not be displayed within the list of available reports if the logged-on-user doesn't have the role/permissions within ConfigMgr to access the data needed to create the report. (well, that how it is for us, and that seems to be fairly
logical to me)
e.g. If the user doesn't have the role/permissions to the status messaging data, that user will not see any status message reports available to choose from. (after all, what value is there in allowing somebody to run a report that will never return any result
rows...)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Mount a Drive with Normal User Access

How do I do this? Even better, can I mount it automatically. I know this has something to do with /etc/fstab
What should I append to /dev /sda2 /mnt/mac to make it mount automatically and allow the normal user access?
It's where I store my music library.

duke11235 wrote:How do I do this? Even better, can I mount it automatically. I know this has something to do with /etc/fstab
What should I append to /dev /sda2 /mnt/mac to make it mount automatically and allow the normal user access?
It's where I store my music library.
Every question you asked is answered in the Wiki - please read it and then try and implement it yourself. If it doesn't work, then come back with a description of what you tried, what errors you got and any other material you have come across.
This is help-vampirism.
Closing.

[Solved] xf86-video-ati low fps under normal user, fine under root

Hi again. someone must had played HL1. So did I, but I had to run it under root to get the sufficient performance. I tried both OpenGL and DirectX drivers.
At 640x480 the FPS is ~5. At 1024x768 it's "1".
after some digging I found that glxinfo produces different output for me and for root:
# glxinfo
OpenGL vendor string: Mesa Project
OpenGL renderer string: Software Rasterizer
# sudo glxinfo
OpenGL vendor string: DRI R300 Project
OpenGL renderer string: Mesa DRI R300 20060815 x86/MMX/SSE2 TCL
How do I permit the normal user to utilize HW acceleration?
wine-1.1.26
xf86-video-ati 6.12.2
xorg-server 1.6.2
Last edited by leniviy (2009-08-01 11:14:16)

Is your user added to the video group?

[Solved] Giving A Normal User R/W Access To A SSD

Similar Messages

Maybe you are looking for