In the previous chapter, we reviewed the basics of Discretionary Access Control (DAC). Normal Linux file and directory permissions settings aren't very granular. With access control list (ACL), we can allow only a certain person to access a file, or we can allow multiple people to access a file with different permissions for each person. We're going to put what we've learned together in order to manage a shared directory for a group.
The topics in this chapter include the following:
- Creating an ACL for either a user or a group
- Creating an inherited ACL for a directory
- Removing a specific permission by using an ACL mask
- Using the tar --acls option to prevent loss of ACLs during a backup
- Creating a user group and adding members to it
- Creating a shared directory for a group, and setting the proper permissions on...