Hey, now look at this, we're trying to trick you out.
We haven't got our normal orange slide, so how do we know it's a summary?
Well, it says so, top of the slide,
just look. Now what have we looked at? We looked at the fact that
the file mode can be very restrictive in the fact that it's only
allowing that single user and a single group, and then grouping
everyone else together in others.
So to overcome that we have our ACL. An ACL then is a list of individual
entries that we can use to manage the permissions,
including those of default permissions when we set it on the directory.
Setting the default ACL on the directory, affect new files within that
directories. And our toolset that we have to do that is the setfacl command
to set our access control lists, and getfacl, which we can use to retrieve
or read our access control lists.
We can also see that the access control list is set from our ordinary
command line with the ls ‑l command, but we can only notice that the
plus symbol is there, indicating that there are more permissions that
are set in the access control list.
Now with that done and dusted, we want to take you onto a journey now to start
looking not at discretionary access control lists such as our file mode and our
access control lists, but mandatory access control lists, and we can do this
first off by looking at SELinux, which we have installed and running by default on our AlmaLinux systems.