Signal9Signal9 — home
online
back to labs

Default Permissions: Set a User's umask and Close an Exposed Share

EasyRHCSA Prep10-15 min
The brief

The finance analyst's exports keep coming out readable by every account on this box. Two things to fix:

1. Every file the user analyst creates from now on must come out 640 and every new directory 750, in every new interactive session analyst opens. Change analyst's default only: kim and everyone else keep theirs.

2. /srv/reports was written with a umask of 000, so all of it is open to other users. Remove all access for other users from everything under /srv/reports. The owner and the finance group must keep their access, and the directories must stay enterable.

Grading opens a fresh interactive login as analyst and as kim and creates a file and a directory in each, so what counts is what a real login gets.

What you'll do
  • Calculate the modes a umask produces
  • Make one user's umask persistent
  • Fix exposed files without breaking directories

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.