SY0-501 · Question #322
An administrator has configured a new Linux server with the FTP service. Upon verifying that the service was configured correctly, the administrator has several users test the FTP service. Users repor
The correct answer is A. Create an ACL to allow the FTP service write access to user directories. Users are experiencing issues uploading files to an FTP server, despite being able to connect and download, indicating a file system write permission problem.
Question
An administrator has configured a new Linux server with the FTP service. Upon verifying that the service was configured correctly, the administrator has several users test the FTP service. Users report that they are able to connect to the FTP service and download their personal files, however, they cannot transfer new files to the server. Which of the following will most likely fix the uploading issue for the users?
Options
- ACreate an ACL to allow the FTP service write access to user directories
- BSet the Boolean selinux value to allow FTP home directory uploads
- CReconfigure the ftp daemon to operate without utilizing the PSAV mode
- DConfigure the FTP daemon to utilize PAM authentication pass through user permissions
How the community answered
(29 responses)- A79% (23)
- B7% (2)
- C10% (3)
- D3% (1)
Why each option
Users are experiencing issues uploading files to an FTP server, despite being able to connect and download, indicating a file system write permission problem.
Creating an ACL (Access Control List) grants granular write access to specific user directories, directly addressing the inability to upload new files, as standard file permissions might be insufficient for the FTP service or the authenticated users to write to those locations.
While SELinux can block writes, the ability to download files suggests basic FTP operations are permitted, and a file system ACL is a more direct solution for write permissions than a general SELinux boolean.
PASV (Passive) mode issues typically relate to establishing the data connection itself, affecting both uploads and downloads, not specifically preventing writes once a connection is established.
PAM (Pluggable Authentication Modules) handles user authentication and service access, which is already functional since users can connect and download, and does not directly control file system write permissions.
Concept tested: Linux file system ACLs for write permissions
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/managing_file_system_access_control/using-acls_managing-file-system-access-control
Topics
Community Discussion
No community discussion yet for this question.