Mastering Linux Security and Hardening - Second Edition

Access Control Lists and Shared Directory Management

In the previous chapter, we reviewed the basics of Discretionary Access Control (DAC). Normal Linux file and directory permissions settings aren't very granular. With access control list (ACL), we can allow only a certain person to access a file, or we can allow multiple people to access a file with different permissions for each person. We're going to put what we've learned together in order to manage a shared directory for a group.

The topics in this chapter include the following:

• Creating an ACL for either a user or a group
• Creating an inherited ACL for a directory
• Removing a specific permission by using an ACL mask
• Using the tar --acls option to prevent loss of ACLs during a backup ...