LX0-104 · Question #364
When adding additional users to a file's extended ACLs, what is true about the default behaviour of the ACL mask for the file?
The correct answer is D. The mask is modified to be the union of all permissions of the owning group and all named users and groups.. This question describes the default behavior of the ACL mask when adding new named user or named group entries to a file's extended ACLs.
Question
Options
- AThe mask is modified to be the union of all permissions of the file owner, owning group and all named
- BThe mask is left unchanged.
- CIf required, a warning is printed indicating that the mask is too restrictive for the permissions being granted.
- DThe mask is modified to be the union of all permissions of the owning group and all named users and groups.
How the community answered
(24 responses)- A4% (1)
- C4% (1)
- D92% (22)
Why each option
This question describes the default behavior of the ACL mask when adding new named user or named group entries to a file's extended ACLs.
The file owner's permissions are not affected by the mask; thus, the mask's calculation does not include the owner's permissions.
The mask is typically recalculated by default when new named ACL entries are added to ensure it correctly reflects the maximum effective permissions for the extended ACLs.
While a warning might occur if the mask is too restrictive, this describes a potential outcome, not the default behavior of how the mask itself is modified during the addition of new ACL entries.
When adding new named ACL entries using `setfacl`, the mask entry is automatically recalculated to be the union of the permissions of the owning group (`group::`) and all named user (`user:name:`) and named group (`group:name:`) entries. This ensures the mask accurately reflects the maximum effective permissions for these categories.
Concept tested: Linux ACL mask default behavior
Source: https://linux.die.net/man/1/setfacl
Topics
Community Discussion
No community discussion yet for this question.