Welcome to the Linux Foundation Forum!

Typos and Error in Lab 32.3

There's a typo in this questions (User instead of Use):



4. User setfacl to make the file readable by the new user and try again.

5. User setfacl to make the file not readable by the new user and try again.

Most importantly, the solutions given are the same for both:


  1. $ setfacl -m u:fool:rx /tmp/afile
  2. $ setfacl -m u:fool:rx /tmp/afile

I suppose it should be something like:


  1. $ setfacl -x u:fool /tmp/afile

 

Welcome!

It looks like you're new here. Sign in or register to get started.
Sign In

Comments

  • Posts: 1,276
    edited July 2018

    Hi Carlo,

    Yes, that's right, it's a typo. I'm going to inform of it, thanks for reporting it!

    Luis.

  • Posts: 2

    Isn't the mistake rather that we're supposed to give the user permission to write instead of read and execute? Using w or 2 instead of rx works fine for me:

    1. exit
    2. [marc@localhost ~]$ setfacl -m u:jill:5 /tmp/afile
    3. [marc@localhost ~]$ su jill
    4. Password:
    5. [jill@localhost marc]$ echo 'newline' >> /tmp/afile
    6. bash: /tmp/afile: Permission denied
    7. [jill@localhost marc]$ exit
    8. exit
    9. [marc@localhost ~]$ setfacl -m u:jill:2 /tmp/afile
    10. [marc@localhost ~]$ su jill
    11. Password:
    12. [jill@localhost marc]$ echo 'newline' >> /tmp/afile
    13. [jill@localhost marc]$
  • Hi MM69,

    I went through the lab and I found some errors, we are working on this to get the lab right.

    Regards,
    Luis.

  • Posts: 916

    I have fixed this in the ENglish ans Spanish versions for the next release. Thanks.

  • Posts: 42

    I got frustrated on this, but I got there.

    Even though it should be corrected for the next release, for others so far, you have to make the file writable (and perhaps readable too for a cat check) rather than (just) readable in steps 4 and 5. It's already readable to the others group beforehand.

    One question though: If I make the file in my home/user directory rather than under /tmp, no matter what getfacl permissions I set I can't read or write to it as the getfacl'd account. Why is that?

  • Posts: 42

    setfacl'd I mean. Wrote that late.

  • Posts: 42

    Actually, I had no problems in Ubuntu. Would be interested to know why CentOS gave me problems though.

  • Hi mo79uk,

    Can you clarify what test is failing on CentOS, please? So I can see if I can reproduce it.

    Thanks,
    Luis.

  • Posts: 42

    It was trying to write to the file after setting the getfacl permissions, if the file is saved in /home/user. It's always permission denied. It worked fine if the file was put in /tmp.

  • Ok, thanks. I'll see if I can reproduce the issue on CentOS.

    Regards,
    Luis.

  • Hi mo79uk,

    I did the test case and I was able to reproduce the behavior, and it's not an error. In CentOS a user account is not enabled by default to access other user accounts directories, so it's all OK. If you want to allow a user to access another user's directory, you need to instruct the OS to do it and you can do it using setfacl. After that you also can run the another setfacl command to enable the user to write on the file (I was able to do it).

    Regards,
    Luis.

  • Posts: 42

    Ah excellent, many thanks. A note on this is probably worth adding to an update on the lab.

  • It's a pleasure! Well, the lab is done in /tmp, so that's not a problem. I think it's a good exercise to determine why it's not working in case you do it in your home directory instead a shared one.

    Regards!

    Luis.

  • @luisviveropena said:
    It's a pleasure! Well, the lab is done in /tmp, so that's not a problem. I think it's a good exercise to determine why it's not working in case you do it in your home directory instead a shared one.

    Regards!

    Luis.

    It's a pleasure! Well, the lab is done in /tmp, so that's not a problem. I think it's a good exercise to determine why it's not working in case you do it in your home directory instead a shared one.

  • @fouad1994 said:

    It's a pleasure! Well, the lab is done in /tmp, so that's not a problem. I think it's a good exercise to determine why it's not working in case you do it in your home directory instead a shared one.

    It's a pleasure! Well, the lab is done in /tmp, so that's not a problem. I think it's a good exercise to determine why it's not working in case you do it in your home directory instead a shared one.

Welcome!

It looks like you're new here. Sign in or register to get started.
Sign In

Welcome!

It looks like you're new here. Sign in or register to get started.
Sign In

Categories

Upcoming Training