CompTIA · Linux+ XK0-006
Permissions, ACLs, SELinux, and sudo
Linux+ XK0-006 · Lesson 16 of 28 · 2:04:52
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Linux+ XK0-006 exam (CompTIA Linux+ V8). In this lesson: file permissions and ownership, umask, setuid, setgid, and the sticky bit, file attributes, access control lists, SELinux modes, contexts, and booleans, and privilege escalation with sudo and su, with Pinecrest Media, a fictional video streaming company, as the running example. Includes three original practice questions.
Preview the topics
- Editors share /srv/projects, and every new file there must belong to the editors group, whoever creates it. Which change fits?
- The catalog site now serves files from /srv/catalog. The permissions are right, but Nginx gets permission denied, and the audit log shows an SELinux denial. What should the admin do for a fix that lasts?
- Operators may run less as root to read protected logs, but they must not be able to open a shell from inside it. Which tag should their sudo rule use?