What is true about the set of permissions (rwxrwxr-x+) in the following listing? -rwxrwxr-x+ 1 EXAMPLE\\bob EXAMPLE\\domain users 0 Apr 11 17:01 windows-file.txt

Question

Options

• AIt indicates a minimum set of permissions which are granted without considering an ACL.
• BIt shows the sum of all ACLs set for the specific file.
• CIt contains default permissions which are applied to users not explicitly covered by an ACL.
• DIt has no effect since the permissions are overridden by ACLs.
• EIt shows a mask of permissions which might become effective due to the existing ACLs.

• A
  89% (47)
• C
  4% (2)
• D
  6% (3)
• E
  2% (1)

Explanation

Option A is correct because the + symbol at the end of the permission string signals that an ACL exists on the file, and in that context, the displayed bits (rwxrwxr-x) represent the baseline/minimum permissions that are always granted regardless of what any ACL entries say - the ACL can only layer additional access on top of these, never subtract below them.

Why the distractors are wrong:

• B is wrong because the displayed bits are not a sum or aggregate of all ACL entries; you need getfacl to see the full ACL.
• C is wrong because it conflates the concept with "other" permissions or a default ACL entry - the displayed string applies to all base permission classes, not just uncovered users.
• D is wrong because ACLs extend the base permissions rather than replace them; the displayed permissions remain effective as a floor.
• E is wrong because a "mask" in ACL terminology is a specific ACL entry (the mask:: field) that caps named-user/group permissions - it's not what the base permission string represents.

Memory tip: Think of + as "plus more" - the displayed permissions are the guaranteed minimum, and the ACL only adds on top. If you see +, the bits shown are your floor, not your ceiling.

No community discussion yet for this question.