acl

[root@zq ~]# touch /tmp/a.txt
[root@zq ~]# getfacl /tmp/a.txt #查看權限
getfacl: Removing leading '/' from absolute path names
# file: tmp/a.txt
# owner: root
# group: root
user::rw-
group::r--
other::r--

擴展ACL
[root@zq ~]# setfacl -m u:zq:rwx /tmp/a.txt   #u：設置某個用戶擁有的權限  -m 設置權限
[root@zq ~]# getfacl !$
getfacl /tmp/a.txt
getfacl: Removing leading '/' from absolute path names
# file: tmp/a.txt
# owner: root
# group: root
user::rw-
user:zq:rwx
group::r--
mask::rwx
other::r--

[root@zq ~]# setfacl -m g:zq:rwx /tmp/a.txt 
[root@zq ~]# getfacl /tmp/a.txt
getfacl: Removing leading '/' from absolute path names
# file: tmp/a.txt
# owner: root
# group: root
user::rw-
user:zq:rwx
group::r--
group:zq:rwx
mask::rwx
other::r--


[zq@zq 桌面]$ ll /tmp/a.txt 
-rw-r--r--. 1 root root 0 6月  10 14:29 /tmp/a.txt
[zq@zq 桌面]$ ll /tmp/a.txt 
-rw-rwxr--+ 1 root root 0 6月  10 14:29 /tmp/a.txt


[root@zq ~]# mkdir /tmp/test   
[root@zq ~]# setfacl -R -m u:zq:rw- /tmp/test/    #設置目錄acl權限
[root@zq ~]# get !$
get /tmp/test/
-bash: get: command not found
[root@zq ~]# getfacl !$
getfacl /tmp/test/
getfacl: Removing leading '/' from absolute path names
# file: tmp/test/
# owner: root
# group: root
user::rwx
user:zq:rw-
group::r-x
mask::rwx
other::r-x


取消acl權限
[root@zq ~]# setfacl -x u:zq:rw- /tmp/test/
setfacl: Option -x: 無效的參數 near character 6
[root@zq ~]# setfacl -x u:zq: /tmp/test/
[root@zq ~]# getfacl !$
getfacl /tmp/test/
getfacl: Removing leading '/' from absolute path names
# file: tmp/test/
# owner: root
# group: root
user::rwx
group::r-x
mask::r-x
other::r-x

取消全部的權限
[root@zq ~]# setfacl -b /tmp/a.txt 
[root@zq ~]# getfacl !$
getfacl /tmp/a.txt
getfacl: Removing leading '/' from absolute path names
# file: tmp/a.txt
# owner: root
# group: root
user::rw-
group::r--
other::r--


建立一個讓root都沒法刪除的黑客文件
rhel6 Linux文件系統擴展屬性：chattr lsattr
+a    只能追加內容
+i     不能被修改
[root@zq ~]# ll a.txt 
-rwxrwxrwx. 1 root root 13 6月  10 16:13 a.txt
[root@zq ~]# lsattr a.txt 
-------------e- a.txt
[root@zq ~]# chattr +a a.txt 
[root@zq ~]# echo aaa >> a.txt 
[root@zq ~]# cat a.txt 
sdfadsfadsfa
aaa
[root@zq ~]# chattr +i a.txt 
[root@zq ~]# echo bbbb >> a.txt 
-bash: a.txt: 權限不夠
[root@zq ~]# lsattr a.txt 
----ia-------e- a.txt
[root@zq ~]# rm -rf a.txt 
rm: 沒法刪除"a.txt": 不容許的操做
要想有刪除更改內容的權限必須去掉ia
[root@zq ~]# chattr -ia a.txt 
[root@zq ~]# lsattr a.txt 
-------------e- a.txt