Mastering Linux Security and Hardening - Second Edition

Setting the permissions and creating the ACL

First, Vicky sets the normal permissions to

[vicky@localhost marketing]$ echo "This file is only for my good friend, Cleopatra." > vicky_file.txt[vicky@localhost marketing]$ chmod 600 vicky_file.txt[vicky@localhost marketing]$ setfacl -m u:cleopatra:r vicky_file.txt[vicky@localhost marketing]$ ls -ltotal 4-rw-rw-r--. 1 charlie marketing 0 Nov 13 15:59 charlie_file.txt-rw-r-----+ 1 vicky marketing 49 Nov 13 16:24 vicky_file.txt[vicky@localhost marketing]$ getfacl vicky_file.txt# file: vicky_file.txt# owner: vicky# group: marketinguser::rw-user:cleopatra:r--group::---mask::r--other::---[vicky@localhost marketing]$

There's nothing here that you haven't already seen. Vicky just removed all permissions ...