Rhcsa 03 - Basic permissions for documents

Preface

Linux Of UGO The permissions model , It can meet daily permission requirements .

What is? UGO The permissions model ？

practice

step 1： Create user , And add users to the newly created group

[[email protected] ~]# groupadd students
[[email protected] ~]# groupadd profs
[[email protected] ~]# useradd linda -G students
useradd lisa -G students
[[email protected] ~]# useradd lisa -G students
useradd anouk -G profs
[[email protected] ~]# useradd anouk -G profs
useradd anna -G profs
[[email protected] ~]# useradd anna -G profs
[[email protected] ~]# 

step 2： Create two folders /data/students And /data/profs

[[email protected] ~]# mkdir -p /data/students /data/profs
[[email protected] ~]# ls -l /data
total 0
drwxr-xr-x. 2 root root 6 Jul  2 01:47 profs
drwxr-xr-x. 2 root root 6 Jul  2 01:47 students

step 3： The folder just created , Change the group to students, profs, Permission is 770

[[email protected] ~]# chgrp students /data/students
[[email protected] ~]# chgrp profs /data/profs
[[email protected] ~]# chmod 770 /data/{students,profs}
[[email protected] ~]# ls -l /data
total 0
drwxrwx---. 2 root profs    6 Jul  2 01:47 profs
drwxrwx---. 2 root students 6 Jul  2 01:47 students

step 4： verification ：anna Success to /data/profs create a file ,anouk Cannot write owner as anna Permission is 644 The file of .

[[email protected] ~]# id anna
uid=1004(anna) gid=1006(anna) groups=1006(anna),1002(profs)
[[email protected] ~]# su anna -c "touch /data/profs/anna"
[[email protected] ~]# ls -l /data/profs/anna
-rw-r--r--. 1 anna anna 0 Jul  2 01:58 /data/profs/anna
[[email protected]92f238ca5 ~]# su anouk -c "echo anouk > /data/profs/anna"
bash: /data/profs/anna: Permission denied