LFCS Question #361: Real Exam Question with Answer & Explanation

Question

What is true about the permissions for the file afile given the following output from getfacl? (Select TWO correct answers) % getfacl afile # file: afile # owner: matt # group: support user::rwx user:hugh:rw group::r group:staff:rx mask::rwx other::r

Options

• AAnyone in the support group will be able to read and execute the file.
• BThe user hugh will be able to read the contents of the file.
• CAnyone in the users group will be able to read the file.
• DThe user matt will not be able to edit this file.
• EAnyone in the staff group will be able to read and execute the file.

Explanation

The getfacl output details specific permissions for the file afile, including those for a named user and a named group, which are then evaluated against the ACL mask.

Common mistakes.

• A. The owning group 'support' is granted only 'r' (read) permission by group::r, and the mask::rwx does not add execute permission for the owning group.
• C. The getfacl output does not contain any specific entry for a generic 'users' group, only for the owning group 'support' and the named group 'staff'.
• D. The owner 'matt' has rwx permissions as indicated by user::rwx, which includes write access, allowing them to edit the file.

Concept tested. Linux ACL interpretation and effective permissions

Reference. https://www.redhat.com/sysadmin/linux-access-control-lists

No community discussion yet for this question.