nerdexam
CompTIA

LX0-104 · Question #364

When adding additional users to a file's extended ACLs, what is true about the default behaviour of the ACL mask for the file?

The correct answer is D. The mask is modified to be the union of all permissions of the owning group and all named users and groups.. This question describes the default behavior of the ACL mask when adding new named user or named group entries to a file's extended ACLs.

Administrative Tasks

Question

When adding additional users to a file's extended ACLs, what is true about the default behaviour of the ACL mask for the file?

Options

  • AThe mask is modified to be the union of all permissions of the file owner, owning group and all named
  • BThe mask is left unchanged.
  • CIf required, a warning is printed indicating that the mask is too restrictive for the permissions being granted.
  • DThe mask is modified to be the union of all permissions of the owning group and all named users and groups.

How the community answered

(24 responses)
  • A
    4% (1)
  • C
    4% (1)
  • D
    92% (22)

Why each option

This question describes the default behavior of the ACL mask when adding new named user or named group entries to a file's extended ACLs.

AThe mask is modified to be the union of all permissions of the file owner, owning group and all named

The file owner's permissions are not affected by the mask; thus, the mask's calculation does not include the owner's permissions.

BThe mask is left unchanged.

The mask is typically recalculated by default when new named ACL entries are added to ensure it correctly reflects the maximum effective permissions for the extended ACLs.

CIf required, a warning is printed indicating that the mask is too restrictive for the permissions being granted.

While a warning might occur if the mask is too restrictive, this describes a potential outcome, not the default behavior of how the mask itself is modified during the addition of new ACL entries.

DThe mask is modified to be the union of all permissions of the owning group and all named users and groups.Correct

When adding new named ACL entries using `setfacl`, the mask entry is automatically recalculated to be the union of the permissions of the owning group (`group::`) and all named user (`user:name:`) and named group (`group:name:`) entries. This ensures the mask accurately reflects the maximum effective permissions for these categories.

Concept tested: Linux ACL mask default behavior

Source: https://linux.die.net/man/1/setfacl

Topics

#ACLs#mask#extended ACLs#file permissions

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice