Table of Contents

1. Challenge

   Correct the Issue with the `devuser` Being Able to Delete the `cloud_user`'s File Located in `/shareddata`

   1. Verify the issue as the cloud_user:

      cd /shareddata
      touch examplefile
      

   2. Switch to the devuser:

      su devuser (password is P@ssw0rd)
      rm ./examplefile
      
      exit
      

   3. As the cloud_user, check the permissions on the /shareddata folder:

      ls -l /
      

      Output: d---rws--- root collab shareddata

      Note that on the shareddata directory, there is no sticky bit set, but the GID is set 'denoted by the s'.

   4. Set the sticky bit as cloud_user:

      sudo -i chmod 3070 /shareddata
      

   5. Repeat the file create as cloud_user and then try to remove the file as devuser to verify it is working as intended.

2. Challenge

   Correct the Issue that Is Preventing `testuser` from Being Able to Write to `/home/cloud_user/file`

   1. Verify the issue as the cloud_user:

      cd ~/
      su testuser
      echo 'testing' >> file
      exit
      

   2. Check the ACL on the file:

      getfacl file
      

   Note the mask and the effective permissions.

   1. Correct the mask as the cloud_user:

      setfacl -m m::rwx file
      

   2. Verify the issue has been corrected:

      su testuser
      echo 'testing' >> file
      cat file
      exit