setfacl 的问题

stock99

请问一下, 为什么D 不能disable user 'test1' from reading /etc/passwd ?  不是也把other 设为---了吗?

Given:
# logins -l test1
test1 1001 other 1
# logins -l root
root 0 root 0 Super-User
# ls -l /etc/passwd
-rw-r--r-- 1 root sys 726 Jan 25 16:56 /etc/passwd
Which two commands disable test1 from reading /etc/passwd? (Choose two.)
A. #setfacl -m g::---,o:---,m:r-- /etc/passwd
B. #setfacl -m u:test1:rwx,g::r--,o:r--,m:r-- /etc/passwd
C. #setfacl -m u:test1:rwx,g::---,o:r--,m:r-- /etc/passwd
D. #setfacl -m u:test1:rwx,g::r--,o:---,m:r-- /etc/passwd
E. #setfacl -m u:test1:rwx,g::r--,o:r--,m:--- /etc/passwd
Answer: AE

waily

仔细看书的话应该可以知道答案

stock99

ok.. i got it...

BCD still allow user allow test1 to read because m:r--

Test1 can still read because "u:test1:rwx" is specified.

A is correct because no "u:test1:rwx" specified.
E is correct because m:--- supress all permission (except owner which is root).

yuhuohu

恭喜lz