RHCSA File Permissions and ACLs Questions and Answers

Question 1

A system administrator needs to set default permissions for all new files created in a specific directory, `/srv/data`, so that new files automatically inherit the group ownership of the directory and can be modified by any member of that group.
Which of the following commands would accomplish this for the directory?

Accepted Answer

chmod g+s /srv/data

Answer

setfacl -m d:g::rw /srv/data

Answer

chown :datagroup /srv/data

Answer

chmod o+t /srv/data

Question 2

A user reports they cannot delete a file they own inside the `/tmp` directory, even though the directory permissions appear to be `drwxrwxrwt`. What is the most likely reason for this issue?

Accepted Answer

The Sticky Bit is set on the `/tmp` directory, preventing users from deleting files they do not own.

Answer

The file has an immutable attribute set with `chattr`.

Answer

The user does not have write permissions on the file itself.

Answer

The user's umask is preventing the deletion.

Question 3

Which command will grant the user `auditor` read-only access to the file `/var/log/secure` without changing the file's owner or primary group permissions?

Accepted Answer

setfacl -m u:auditor:r-- /var/log/secure

Answer

chown auditor /var/log/secure

Answer

chmod o+r /var/log/secure

Answer

usermod -aG root auditor

Question 4

A system administrator runs the command `umask 0027`. What will be the default permissions for a newly created directory?

Accepted Answer

750

Answer

770

Answer

640

Answer

777

Question 5

An executable file named `app.sh` has the following permissions: `-rwsr-xr--`. Which of the following statements is true?

Accepted Answer

The file will run with the privileges of the file owner.

Answer

Any user can write to the file.

Answer

The file will run with the privileges of the group owner.

Answer

Only the owner and members of the group can execute the file.

Question 6

After noticing a file has extended ACLs, indicated by a `+` sign in the `ls -l` output, a system administrator wants to completely remove all ACL entries and revert to standard POSIX permissions. Which command should be used?

Accepted Answer

setfacl -b /path/to/file

Answer

setfacl -x /path/to/file

Answer

setfacl -k /path/to/file

Answer

chmod 755 /path/to/file