Page 54 - RHEL8 BOOK

Access control list

Acl: - to configure different set of files permission for different users on a single resource (file/directory),
acl ‘s is implemented
Acl’s can be implemented, only on acl enable partitions
Acl’s can be applied on two levels are
1. User level
2. Group level

If we apply acl user level and also group level in which the user is a member, the user level permission
will be effected.
If we apply acl’s on file / directory we observe a “+” symbol at three permission column

Step1. Create required users and group
[root@sun ~]# useradd tom
[root@sun ~]# groupadd salesgrp
[root@sun ~]# groupadd fingrp
[root@sun ~]# useradd -g salesdept sai
[root@sun ~]# useradd -g salesgrp ram
[root@sun ~]# useradd -g fingrp tata
[root@sun ~]# useradd -g fingrp birla

Step 2.to create the new partition
[root@sun ~]# fdisk -l
[root@sun ~]# fdisk /dev/sda
Command (m for help): n
Command (m for help): +2g
Command (m for help): w

Step3. Update to the kernel without restart
[root@sun ~]#partprobe /dev/sda

Step4. Format the partition with ext 3 file system
[root@sun ~]# mkfs.ext3 /dev/sda13

Step5. Create a directory
[root@sun ~]# mkdir /salesdept

Step6. Mount the partition with acl options
[root@sun ~]# mount -O acl /dev/sda13 /salesdept

Step7. To see the mount partition
[root@sun ~]# mount

Step8. Change the mode with full permission
[root@sun ~]#chmod 777 /salesdept
[root@sun ~]#cd /salesdept/
[root@sun salesdept]# touch fabc.txt

S. Pradhan
(MCA, MBA-IT, BCA, CCNA, MCSA 2012, RHCE, ETHICAL HACKING)
Email Id:-spradhan.iiht@gmail.com
54