XK0-004 · Question #457
An administrator needs to allow additional specific users and groups to have access to a foWer without removing the original owner or group. Which of the following commands should the administrator…
The correct answer is A. sentenforce. setfacl is the correct command for granting additional named users or groups access to a directory without altering the original owner or group assignments.
Question
An administrator needs to allow additional specific users and groups to have access to a foWer without removing the original owner or group. Which of the following commands should the administrator use to complete this task?
Options
- Asentenforce
- Bsetfac1
- Cchmod
- Dchown
How the community answered
(61 responses)- A89% (54)
- B7% (4)
- C2% (1)
- D3% (2)
Why each option
setfacl is the correct command for granting additional named users or groups access to a directory without altering the original owner or group assignments.
setfacl (set file access control list) extends the standard Unix permission model by allowing administrators to attach named ACL entries for individual users and groups using syntax like 'setfacl -m u:username:rwx /folder'. This adds permissions on top of the existing owner, group, and mode bits without modifying them. It is the only standard Linux command designed specifically for this multi-principal access scenario.
setenforce toggles SELinux between enforcing and permissive mode and has no effect on DAC file permissions or POSIX ACL entries.
chmod modifies the standard read/write/execute bits for owner, group, and others as a whole class - it cannot grant access to additional specific named users or groups without replacing the existing permission structure.
chown changes the owning user or group of a file, which replaces the original owner rather than adding supplemental access entries for other principals.
Concept tested: Linux POSIX ACL management with setfacl
Source: https://man7.org/linux/man-pages/man1/setfacl.1.html
Topics
Community Discussion
No community discussion yet for this question.