Access Control Lists and Shared Directory Management
In the previous chapter, we reviewed the basics of Discretionary Access Control (DAC). Normal Linux file and directory permissions settings aren’t very granular. With an access control list (ACL), we can fine-tune things to get the exact set of permissions that we really want. We can also use this capability to control access to files in shared directories.
The topics in this chapter include the following:
- Creating an ACL for either a user or a group
- Creating an inherited ACL for a directory
- Removing a specific permission by using an ACL mask
- Using the
tar --aclsoption to prevent loss of ACLs during a backup - Creating a user group and adding members to it
- Creating a shared directory for a group
- Setting the SGID bit and the sticky bit on the shared directory
- Using ACLs to access files in the shared directory
