Shared Flashcard Set

Details

Ch 8 File Security
Unix The Textbook 2nd edition
46
Computer Science
Undergraduate 2
09/30/2014

Additional Computer Science Flashcards

 


 

Cards

Term
UNIX provides what three mechanisms to protect a users files?
Definition
password, encryption, and access permission
Term
The most fundamental scheme for protecting user files is to give every user a ___ ___ and a _____. Every user of a UNIX-based computer system is assigned these.
Definition
login name password
Term
All login names are ______ _____ and can be found in the ______ file.
Definition
public knowledge /etc/passwd
Term
The three primary ways of discovering a user's password:
Definition
owner tells, password is guessed, brute force
Term
the process of converting a file to a form that is completely different from its original version.
Definition
encryption
Term
the process of converting a file back to it's original form.
Definition
decryption
Term
the UNIX command _____ can be used to encrypt an decrypt your files.
Definition
crypt
Term
As file owner, you can attach certain _____ _____ to your files that dictate who can and cannot access them for various types of file operations.
Definition
access rights
Term
Three types of users in the UNIX system.
Definition
user, group, others
Term
When the ___ is set for a program, the system tries to keep the executable code for the program in memory or the swap space after it finishes.
Definition
sticky bit
Term
What command will allow a user to see the value of the bit mask used to set default file permissions for new files?
Definition
umask
Term
A file with the following permissions:
-rwxr-xr-x
Definition
read and execute for all users, write for user only
Term
A file whose owner has read, write, and execute permissions has file permissions equivalent to an octal value of:
Definition
7
Term
Why is issuing the command umask 000 a bad idea?
Definition
it grants unlimited access to all new files and directories.
Term
A permission value of 764 for the sample file means that:
Definition
-rwxrw-r--
Term
The root user has the authority to:
Definition
do anything
Term
If you want to set all three special access bits (SUID, SGID, and sticky) for the sample file and set the rest of its access bits to 754 with one command:
Definition
chmod 7754
Term
The command: chmod 600 sample :
Definition
-rw-------
Term
What types of files are candidates for having the execution access permissions set for users?
Definition
script files
Term
The set-user-ID bit (SUID) allows an executable file to:
Definition
if this bit is set for a file containing an executable program it can take on the privileges of the owner of the file when it executes.
Term
For a directory, users granted read permission are allowed to:
Definition
read the directories contents
Term
The execution of the umask command without argument:
Definition
Displays the current mask value
Term
File access permissions include:
Definition
read, write, and execute.
Term
File access permissions are grouped into the categories:
Definition
user, group, and others.
Term
A UNIX system administrator is:
Definition
user id of 0, login name of root, commonly known as the superuser
Term
Why is issuing the command umask 000 a bad idea?
Definition
It permits all new directories and files to be read and changed by all users.
Term
One special user who has access to all of the files on the system, regardless of the access privileges on the files.
Definition
superuser
Term
Command to display which groups on your system a user is a member of
Definition
groups user
Term
A bit value of zero is also denoted as ___.
Definition
dash(-)
Term
read permission on a directory allows you to do what?
Definition
read the contents of a directory
Term
write permission on a directory allows you to do what?
Definition
create a new directory or file in it or to remove an existing entry from it.
Term
execute permission on a directory allows you to do what?
Definition
search the directory but not read or write to it. You cannot use the ls -l to list its contents or use the cd command to make it your current directory.
Term
list directory entries instead of contents
Definition
ls -d
Term
drwxr-x--- 2 u1753120 users 4096 Aug 18 18:00 mbox. List what each field stand for.
Definition
file type and access permissions, number of links, owner, owner's group, file size in bytes, date, time, file name
Term
displays the long lists for all the files and directories in a directory
Definition
ls -ld directory
Term
which command do you use to change access privileges for your files?
Definition
chmod [options] symbolic-mode file-list
example: chmod ugo-rw sample or chmod a-rw sample - does not let anyone read or write sample
Term
which command do you use to change access privileges for your files?
Definition
chmod [options] octal-mode file-list
example: chmod 700 - set home directory to rwx for the owner and no privileges for anyone else.
Term
what permissions must you have on a directory to be able to list its contents?
Definition
read and execute.
Term
what permissions must you have on a directory to be able to be able to create a file in it?
Definition
write and execute.
Term
Search permission on a directory is the same as what?
Definition
execute permission. Allows you to make a directory your current directory.
Term
Which command sets access permission bits on newly created files and directories to 1, except those bits that are set to 1 in the 'mask'
Definition
umask mask
file access permission = 777 - umask (usually 022).
777 is for directories
666 is for text files
Term
if a file is owned by root and has the SUID fit set, it runs with what privileges?
Definition
superuser.
Term
How do you set the Set-User-ID bit?
Definition
chmod 4xxx file-list
Term
How do you set the Set-Group-ID bit?
Definition
chmod 2xxx file-list.
Term
The ___ bit works in the same manner as the SUID bit does, but it causes the access permissions of the process to take the group identity of the group to which the owner of the file belongs.
Definition
Set-Group-ID(SGID)
Term
How do you set the sticky bit?
Definition
chmod 1xxx file-list.
Supporting users have an ad free experience!