Default Permissions: Set a User's umask and Close an Exposed Share
EasyRHCSA Prep10-15 minThe finance analyst's exports keep coming out readable by every account on this box. Two things to fix:
1. Every file the user analyst creates from now on must come out 640 and every new directory 750, in every new interactive session analyst opens. Change analyst's default only: kim and everyone else keep theirs.
2. /srv/reports was written with a umask of 000, so all of it is open to other users. Remove all access for other users from everything under /srv/reports. The owner and the finance group must keep their access, and the directories must stay enterable.
Grading opens a fresh interactive login as analyst and as kim and creates a file and a directory in each, so what counts is what a real login gets.
- Calculate the modes a umask produces
- Make one user's umask persistent
- Fix exposed files without breaking directories
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.
