File Permissions
34 incident problems about File Permissions. Start with the reviewed ones.
Read first
How to split Linux failures by systemd, permission, and filesystem signalsAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when a service fails but you need to isolate whether the cause is a systemd unit, permission, inode, mount, or process.Linux3 min readWhen sudo works in the shell but fails under automationAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when only automation jobs fail because of TTY, sudoers, environment reset, or service user differences.Linux3 min readWhen permissions are fixed but only new directories are created with the wrong groupAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when existing file permissions are correct but group inheritance breaks for newly created files and directories.Linux3 min read
Recommended problems
Reviewed problems first, then problems with detailed scenarios.
All problems (34)
nginx 403 with (13: Permission denied): only the newly uploaded filenginx 403 with (13: Permission denied): only the newly uploaded file is a hands-on troubleshooting drill. Read file permissions to see why nginx cannot open a file. NGINX file-permissions needs to be checked by narrowing scope, recent change, and the current live signal before...ReviewedLinuxBeginner3 minFreeLINUX-1593A sudo path cleanup is correct and one host still runs the old binaryOne host still runs the old binary after sudo path cleanup.LinuxIntermediate7 minProLINUX-1563A sudo path is updated and one host still denies the commandOne host denies a deploy command after the binary path was standardized.LinuxIntermediate8 minProLINUX-1583A sudo rule is fixed and one command still resolves the old pathOne host still executes the old binary after a sudo rule fix.LinuxIntermediate8 minProLINUX-1573A sudoers cleanup lands and one deploy host still denies the commandOne deploy host still denies a command after sudoers cleanup.LinuxIntermediate8 minProLINUX-1585A logrotate fix is correct and one service still loses logsOne service still loses logs after a logrotate path fix.LinuxAdvanced9 minProLINUX-1595A logrotate policy rotates cleanly and one app still loses dataOne app still loses data after a logrotate policy correction.LinuxAdvanced9 minProLINUX-1522A sudo drop-in looks correct and automation still loses privilegePrivilege escalation fails only after config sync to one bastion host.LinuxAdvanced9 minProLINUX-1532A sudo drop-in looks correct and privilege still failsPrivilege escalation fails only after config sync to one bastion.LinuxAdvanced9 minProLINUX-1502A sudo include file looks correct and automation still loses rootAutomation starts failing after a sudo include file is edited from a different workstation.LinuxAdvanced9 minProLINUX-1492A sudo rule looks correct and automation still loses rootAutomation that relies on a sudo include file starts failing after the file is edited from a different workstation.LinuxAdvanced9 minProLINUX-1512A sudoers drop-in looks correct and automation still loses privilegePrivilege escalation fails only after config synchronization to one bastion.LinuxAdvanced9 minProLINUX-1551A sudoers include is fixed and one host still denies deploy commandsOnly one host still denies deployment sudo commands after a sudoers fix.LinuxIntermediate9 minProCICD-1565A GitLab autoscaled runner boots correctly and artifact upload still failsArtifact uploads fail only on runners launched from the new autoscaled image family.CI/CDAdvanced10 minProLINUX-1565A logrotate policy is updated and one app still loses writesOne app loses log writes after a rotation policy change.LinuxAdvanced10 minProLINUX-1575A logrotate rule switches to su and one app still loses writesOne app loses writes after logrotate policy changes on a single host.LinuxAdvanced10 minProCICD-1532A runner auto-update succeeds and every checkout still failsA runner pool starts failing checkouts after an image refresh even though registration succeeds.CI/CDIntermediate10 minProCICD-1542A runner image refresh succeeds and checkout still failsOnly the refreshed runner pool fails checkout after an image update.CI/CDIntermediate10 minProCICD-1512A self-hosted runner starts jobs and every checkout failsA new runner image boots fine but every checkout fails on the attached ephemeral workspace disk.CI/CDIntermediate10 minProLINUX-1557A SELinux policy module is loaded and one daemon still gets deniedA daemon remains denied after a SELinux allow module is installed.LinuxIntermediate10 minPro