Access Control Lists (ACLs) in Operating Systems - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding the Purpose of ACLs

What is the primary purpose of Access Control Lists (ACLs) in operating systems?

A To manage network traffic between devices

B To encrypt files to prevent unauthorized reading

C To monitor system performance and resource usage

D To define which users or groups have permission to access specific files or resources

💡 Hint

Think about how systems control who can open or modify files.

ACLs specify which users or groups can access or modify files or resources, controlling permissions beyond basic ownership.

📋 Factual

intermediate

ACL Entry Components

Which of the following components is not typically part of an ACL entry?

A Timestamp of last access

B Access permissions (e.g., read, write, execute)

C User or group identifier

D Type of access (allow or deny)

💡 Hint

Consider what information controls access versus what is metadata.

ACL entries include who the rule applies to, what permissions are granted or denied, but not timestamps of access.

🔍 Analysis

advanced

Effect of Conflicting ACL Entries

Consider a file with the following ACL entries:

• User Alice: allow read, write
• User Alice: deny write

What will be Alice's effective permissions on this file?

A Read and write access

B Read access only

C Write access only

D No access

💡 Hint

Think about how deny entries usually override allow entries.

When conflicting entries exist, deny permissions typically take precedence, so write access is denied while read is allowed.

❓ Comparison

advanced

ACLs vs Traditional Unix Permissions

Which of the following is a key advantage of ACLs over traditional Unix file permissions?

A ACLs allow permissions to be set for multiple users and groups beyond owner, group, and others

B ACLs automatically encrypt files for security

C ACLs replace the need for user authentication

D ACLs improve file system performance by caching permissions

💡 Hint

Think about flexibility in specifying who can access files.

Traditional Unix permissions limit access control to owner, group, and others, while ACLs allow detailed permissions for many users and groups.

❓ Reasoning

expert

Security Implications of Misconfigured ACLs

If an administrator accidentally sets an ACL entry that grants 'allow all' permissions to 'everyone' on a sensitive file, what is the most likely consequence?

A The system will automatically revoke the incorrect ACL entry

B The file becomes inaccessible to all users including the owner

C Unauthorized users can access and modify the sensitive file

D Only users in the owner's group can access the file

💡 Hint

Consider what 'allow all' means for access control.

Granting 'allow all' to everyone means any user can read or modify the file, risking data exposure or tampering.