cisco 1120 secure access control system

Learning resources from: www.magedu.comMistakes are unavoidable in the learning process, and if found, they are also pointed out by the great gods.Some of the sample operations are related to historical operations, and if the previous example operation has not been performed, there may be some examples of operations that cannot be performed. Examples are for reference only (exercises are in the appendix).File system

/test1.sh Set User Donggen have read and write permissions for/test/test1.sh files[Email protected] ~]# getfacl/test/test1.shGetfacl:removing leading '/' from absolute path names# file:test/test1.sh# Owner:root# Group:rootUser::rwxGroup::r-xOther::r-x[Email protected] ~]# setfacl-m u:donggen:rw/test/test1.sh[Email protected] ~]# GetfaclUsage:getfacl [-ACEESRLPTPNDVH] File ...Try ' Getfacl--help ' for more information.[Email protected] ~]# getfacl/test/test1.shGetfacl:removing leading '/' from ab

1.What is Facl?Facl, the file system access control list, that is, the filesystem. Based on previous knowledge of the Linux permissions model, it is probably as follows:650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/2F/4E/wKioL1OfCQXjMb5aAADyJpA5D_Q227.jpg "title=" Facl " alt= "Wkiol1ofcqxjmb5aaadyjpa5d_q227.jpg"/>Let's say there's a scenario:

::rwxUser:student:r-x #effective: r--# # #因为mask为r, so here the maximum permission is Rgroup::r--mask::r--Other::rwxCan be corrupted when you change file normal permissions with chmodRepairSetfacl-m m:rwx file name********acl default Permissions ************When we need a directory for student writable, and the new subdirectory in the directory to student can also be writtenThe default default permissions must be setNote: The default permissions are only valid for newly created files or director