9

Access Control Lists and Shared Directory Management

In the previous chapter, we reviewed the basics of Discretionary Access Control (DAC). Normal Linux file and directory permissions settings aren’t very granular. With an access control list (ACL), we can fine-tune things to get the exact set of permissions that we really want. We can also use this capability to control access to files in shared directories.

The topics in this chapter include the following:

  • Creating an ACL for either a user or a group
  • Creating an inherited ACL for a directory
  • Removing a specific permission by using an ACL mask
  • Using the tar --acls option to prevent loss of ACLs during a backup
  • Creating a user group and adding members to it
  • Creating a shared directory for ...

Get Mastering Linux Security and Hardening - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.