Kenye Gụọ/Dee ohere ịnweta onye ọrụ na akwụkwọ ndekọ aha akọwapụtara na Linux


N'ime edemede gara aga, anyị gosiri gị otu esi emepụta akwụkwọ ndekọ aha na Linux. N'ebe a, anyị ga-akọwa otu esi enye onye ọrụ ohere ịgụ/dee na otu ndekọ aha na Linux.

Enwere ụzọ abụọ enwere ike ime nke a: nke mbụ bụ ịmepụta otu ndị ọrụ iji jikwaa ikike faịlụ, dịka akọwara n'okpuru.

Maka ebumnuche nkuzi a, anyị ga-eji ntọlite eso.

Operating system: CentOS 7
Test directory: /shares/project1/reports 
Test user: tecmint
Filesystem type: Ext4

Jide n'aka na emechara iwu niile dị ka onye ọrụ mgbọrọgwụ ma ọ bụ jiri iwu sudo jiri ikike nhata mee ihe.

Ka anyị bido site n'ịmepụta ndekọ aha a na-akpọ akụkọ site na iji iwu mkdir:

# mkdir -p /shares/project1/reports   				

Iji ACL inye agụ/dee ohere onye ọrụ na ndekọ aha

Ihe dị mkpa: Iji usoro a, hụ na ụdị faịlụ Linux gị (dị ka Ext3 na Ext4, NTFS, BTRFS) na-akwado ACL.

1. Nke mbụ, lelee ụdị sistemụ faịlụ dị ugbu a na sistemụ gị, yana kwa ma kernel na-akwado ACL dị ka ndị a:

# df -T | awk '{print $1,$2,$NF}' | grep "^/dev"
# grep -i acl /boot/config*

Site na nseta ihuenyo dị n'okpuru, ụdị faịlụ faịlụ bụ Ext4 na kernel na-akwado POSIX ACL dị ka CONFIG_EXT4_FS_POSIX_ACL=y nhọrọ gosiri.

2. Na-esote, lelee ma ọ bụrụ na etinyere usoro faịlụ (nkebi) na nhọrọ ACL ma ọ bụ na ọ bụghị:

# tune2fs -l /dev/sda1 | grep acl

Site na mmepụta dị n'elu, anyị nwere ike ịhụ na nhọrọ mgbago ndabara enweela nkwado maka ACL. Ọ bụrụ na enyeghị ya aka, ị nwere ike mee ya maka akụkụ nke otu (/ dev/sda3 maka ikpe a):

# mount -o remount,acl /
# tune2fs -o acl /dev/sda3

3. Ugbu a, ọ bụ oge iji kenye onye ọrụ tecmint ịgụ/dee ohere na otu ndekọ aha akpọrọ akụkọ site na ịme iwu ndị a.

# getfacl /shares/project1/reports       		  # Check the default ACL settings for the directory 
# setfacl -m user:tecmint:rw /shares/project1/reports     # Give rw access to user tecmint 
# getfacl /shares/project1/reports    			  # Check new ACL settings for the directory

Na nseta ihuenyo dị n'elu, onye ọrụ tecmint nwere ikike ịgụ/dee (rw) na ndekọ/shares/project1/ akụkọ dị ka a hụrụ site na mmepụta nke iwu getfacl nke abụọ.

Maka ozi ndị ọzọ gbasara ndepụta ACL, lelee ntuziaka ndị a.

  1. Otu esi eji ACLs (Nchịkwa Nweta Nweta) iji hazie oke Diski maka ndị ọrụ/otu dị iche iche
  2. Otu esi eji ACLs (Nchịkwa Nnweta Nweta) n'Ugwu Nkekọrịta netwọkụ

Ugbu a, ka anyị hụ usoro nke abụọ nke ekenye ohere ịgụ/dee na ndekọ.

Iji Otu dị iche iche na-enye ohere ịgụ/dee onye ọrụ na ndekọ aha

1. Ọ bụrụ na onye ọrụ enweelarị otu onye ọrụ ndabara (na-enwekarị otu aha dị ka aha njirimara), naanị gbanwee onye nwe ndekọ ahụ.

# chgrp tecmint /shares/project1/reports

N'aka nke ọzọ, mepụta otu ọhụrụ maka ọtụtụ ndị ọrụ (ndị a ga-enye ikike ịgụ/dee na akwụkwọ ndekọ aha kpọmkwem), dị ka ndị a. Agbanyeghị, nke a ga-emepụta ndekọ aha nkekọrịta:

# groupadd projects

2. Mgbe ahụ tinye onye ọrụ tecmint na otu projects dị ka ndị a:

# usermod -aG projects tecmint	    # add user to projects
# groups tecmint	            # check users groups

3. Gbanwee onye nwe akwụkwọ ndekọ aha ka ọ bụrụ ọrụ:

# chgrp	projects /shares/project1/reports

4. Ugbu a hazie ohere ịgụ/dee maka ndị otu:

# chmod -R 0760 /shares/projects/reports
# ls  -l /shares/projects/	    #check new permissions

Ọ bụ ya! N'ime nkuzi a, anyị gosiri gị otu esi enye onye ọrụ ohere ịgụ/dee na otu ndekọ aha na Linux. Ọ bụrụ na nsogbu ọ bụla, jụọ site na ngalaba nkọwa n'okpuru.