QuestionQ39

System Security

The IT security department implements the AIX CIS benchmark and requires that world-write permissions be removed from files. The users consultant1 and consuitant2 manage applications and must be able to write to the file app2.log.

Question Image

Which commands modify the permission settings on app2.log to satisfy both requirements?

  • A chown :consultants /dbstaff ; chmod g+w,o-w app2.log
  • B chgrp consultants app2.log ; chmod g+w,o-w app2.log
  • C chgrp consultant2 app2.log ; chmod g+w,o-w app2.log
  • D chown consultants app2.log ; chmod g+w,o-w app2.log
Explanation

Both application managers belong to the consultants group. Changing app2.log to that group gives them a shared access group; g+w ensures the group can write, and o-w removes write permission for all other users, eliminating the world-write permission.

Community Discussion

No comments yet. Be the first to start the discussion!