Why user management secures systems in Linux CLI - See It in Action

Why User Management Secures Systems

📖 Scenario: You are a system administrator responsible for securing a Linux server. Proper user management helps protect the system by controlling who can access it and what they can do.

🎯 Goal: Learn how to list users, set a limit on user IDs, and display users with IDs above that limit to understand how user management helps secure systems.

📋 What You'll Learn

Create a list of users with their user IDs

Set a user ID threshold to separate system users from regular users

Filter users with user IDs above the threshold

Display the filtered list of users

💡 Why This Matters

🌍 Real World

System administrators use user management to control who can access a system and what they can do, protecting the system from unauthorized access.

💼 Career

Understanding user management is essential for roles like system administrator, security analyst, and IT support to maintain secure and well-managed systems.

1

Create a list of users with their user IDs

Create a variable called users that contains these exact entries as tuples: ('root', 0), ('daemon', 1), ('alice', 1001), ('bob', 1002), ('carol', 1003).

Linux CLI

# Create the list of users with their user IDs
# Your code here

Hint

Use a list of tuples where each tuple has a username and a user ID number.

2

Set a user ID threshold to separate system users from regular users

Create a variable called uid_threshold and set it to 1000.

Linux CLI

users = [('root', 0), ('daemon', 1), ('alice', 1001), ('bob', 1002), ('carol', 1003)]
# Set the user ID threshold
# Your code here

Hint

This threshold helps separate system users (below 1000) from regular users (1000 and above).

3

Filter users with user IDs above the threshold

Create a list called regular_users that contains only the usernames from users where the user ID is greater than uid_threshold. Use a list comprehension.

Linux CLI

users = [('root', 0), ('daemon', 1), ('alice', 1001), ('bob', 1002), ('carol', 1003)]
uid_threshold = 1000
# Filter regular users with user IDs above the threshold
# Your code here

Hint

Use a list comprehension to pick usernames where the user ID is greater than the threshold.

4

Display the filtered list of regular users

Write a print statement to display the regular_users list exactly as it is.

Linux CLI

users = [('root', 0), ('daemon', 1), ('alice', 1001), ('bob', 1002), ('carol', 1003)]
uid_threshold = 1000
regular_users = [name for name, uid in users if uid > uid_threshold]
# Print the list of regular users
# Your code here

Hint

Use print(regular_users) to show the list.

Practice

1. Why is user management important for system security?

easy

A. It updates software without user permission

B. It controls who can access the system and what they can do

C. It cleans temporary files automatically

D. It speeds up the computer's processing power

Solution

1. Step 1: Understand user management purpose

   User management sets permissions and access rights for users.

2. Step 2: Connect user control to security

   By controlling access, it prevents unauthorized changes and protects data.

3. Final Answer:

   It controls who can access the system and what they can do -> Option B

4. Quick Check:

   User access control = security [OK]

Hint: User management controls access rights to secure system [OK]

Common Mistakes:

• Confusing user management with system speed
• Thinking it cleans files automatically
• Believing it updates software silently

2. Which command is used to add a new user in Linux?

easy

A. useradd

B. adduserlist

C. createuser

D. newuser

Solution

1. Step 1: Recall Linux user creation commands

   The standard command to add a user is useradd.

2. Step 2: Verify other options

   Other options are not valid Linux commands for adding users.

3. Final Answer:

   useradd -> Option A

4. Quick Check:

   Linux add user = useradd [OK]

Hint: Use 'useradd' to add users in Linux [OK]

Common Mistakes:

• Using non-existent commands like 'newuser'
• Confusing 'adduserlist' with 'useradd'
• Trying 'createuser' which is not standard

3. What will be the output of the command id alice if user 'alice' exists with UID 1001 and belongs to groups 'users' and 'admin'?

medium

A. uid=1001(alice) gid=1001(alice) groups=1001(alice),1002(admin)

B. uid=1001(alice) gid=100(users) groups=100(users),101(admin)

C. uid=1001(alice) gid=1001(alice) groups=1001(alice),1002(users),1003(admin)

D. uid=1001(alice) gid=1001(alice) groups=1001(alice),1002(admin),1003(users)

Solution

1. Step 1: Understand id command output

   The id command shows user ID (uid), group ID (gid), and groups with their IDs.

2. Step 2: Match given user and groups

   User 'alice' has UID 1001 and belongs to groups 'users' and 'admin'. The gid usually matches the user's primary group, here 1001(alice). Groups listed include primary and secondary groups with their IDs.

3. Final Answer:

   uid=1001(alice) gid=1001(alice) groups=1001(alice),1002(users),1003(admin) -> Option C

4. Quick Check:

   id shows uid, gid, groups = uid=1001(alice) gid=1001(alice) groups=1001(alice),1002(users),1003(admin) [OK]

Hint: id command shows user and group IDs clearly [OK]

Common Mistakes:

• Mixing group IDs and names incorrectly
• Assuming gid is 'users' instead of user's primary group
• Adding extra groups not specified

4. You tried to add a user with useradd bob but got an error 'useradd: command not found'. What is the likely cause?

medium

A. The username 'bob' is already taken

B. You typed the command incorrectly; it should be 'adduser bob'

C. The system does not support user accounts

D. You need to run the command as root or with sudo

Solution

1. Step 1: Analyze the error message

   'command not found' means the shell cannot find the useradd command in your path or permission is denied.

2. Step 2: Check permissions and command availability

   Adding users requires root privileges; running without sudo or root causes this error.

3. Final Answer:

   You need to run the command as root or with sudo -> Option D

4. Quick Check:

   Permission needed for useradd = You need to run the command as root or with sudo [OK]

Hint: Use sudo before useradd to avoid permission errors [OK]

Common Mistakes:

• Assuming username conflict causes 'command not found'
• Thinking system lacks user accounts
• Confusing 'useradd' with 'adduser' command

5. You want to secure a system by limiting user access. Which approach best uses user management to achieve this?

hard

A. Create separate user accounts with minimal permissions and use groups to control access

B. Allow all users to share one admin account for convenience

C. Disable user accounts and only use root for all tasks

D. Remove all users except guest to simplify management

Solution

1. Step 1: Understand security best practices

   Limiting user permissions and using groups helps control who can do what on the system.

2. Step 2: Evaluate options for security

   Sharing admin accounts or using root for all tasks is risky. Removing users excessively limits functionality.

3. Final Answer:

   Create separate user accounts with minimal permissions and use groups to control access -> Option A

4. Quick Check:

   Least privilege + groups = secure user management [OK]

Hint: Use minimal permissions and groups to secure users [OK]

Common Mistakes:

• Sharing admin accounts weakens security
• Using root for all tasks is unsafe
• Removing users breaks system usability