During a Linux security audit at a local college, it was noted that members of the dean’s group
were able to modify employee records in addition to modifying student records, resulting in an
audit exception. The college security policy states that the dean’s group should only have the
ability to modify student records. Assuming that the correct user and group ownerships are in
place, which of the following sets of permissions should have been assigned to the directories
containing the employee records?
A.
R-x—rwx
B.
Rwxrwxrwx
C.
Rwx—-wx
D.
Rwxrwxr—
The answer makes no sense at all. They want to open the folder to the entire system? I don’t like any of the answer. If I was the admin on the system it would be 750 rwxr-x—
1
0
I am not a Linux guy and I am not sure which one is the correct answer. However, I take a logical guess R refers to Read, W refers to Write, X refers to Delete. The question refers to permission limitation, I would not GUESS giving the permission Read Write Delete for everything (shows up 3 times).
Please show us the correct answer if you are Linux expert. THANKS
1
0
x refers to execute. Linux/unix assumes the write permission is also delete.
The correct permission on the employee records directories should be
———-
1
0
Well none of them are good but if I had to choose it would be “D”. In the question it says “Assuming that the correct user and group ownership are in place” rwxrwxr would allow the owner and group to edit the files but only world could read them.
1
0
The answer has to be D. rwxrwxr– means the owner can read, write, and execute, as can the group (to which the dean’s group presumably does not belong,) but all users can read but not modify or execute. Since the question specifies that a group that does not own the files cannot modify them, D is the only answer that does not have a w in the last set of three. (A w there would mean that anyone (including the dean’s group) can modify the files.)
2
0