Access Control Lists (ACLs) in Operating Systems - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an Access Control List (ACL)?

An Access Control List (ACL) is a list that tells a computer system who can access certain files or resources and what actions they can perform, like reading or writing.

intermediate

How does an ACL differ from traditional file permissions?

Traditional file permissions usually allow access based on user, group, or others with fixed rights. ACLs provide more detailed control by specifying permissions for multiple users or groups individually.

beginner

Name two common types of permissions that can be set in an ACL.

Two common permissions are 'read' (view the content) and 'write' (modify the content). Others include 'execute' (run a file) and 'delete'.

beginner

Why are ACLs important in multi-user operating systems?

ACLs help protect files and resources by controlling exactly who can do what, preventing unauthorized access and keeping data safe when many users share the system.

beginner

Can ACLs be used to allow access to a specific user while denying others?

Yes, ACLs can specify permissions for individual users, allowing some users access while denying others, providing flexible and precise control.

What does an Access Control List (ACL) primarily control?

A Who can access a resource and what actions they can perform

B The speed of the computer processor

C The color scheme of the user interface

D The amount of memory used by an application

ACLs define which users or groups can access resources and what they are allowed to do.

Which of the following is NOT a typical permission in an ACL?

A Print

B Write

C Execute

D Read

Print is not usually a permission controlled by ACLs; common permissions include read, write, and execute.

How do ACLs improve security compared to basic file permissions?

A By encrypting files automatically

B By speeding up file access

C By deleting unused files

D By allowing detailed permissions for multiple users and groups

ACLs allow setting specific permissions for many users or groups, offering more precise control.

In a multi-user system, why is ACL important?

A To speed up the internet connection

B To control who can access files and what they can do

C To improve the graphics display

D To increase the number of users

ACLs protect resources by managing user access and permissions.

Can ACLs specify permissions for individual users?

A No, ACLs only work for groups

B No, ACLs only control network access

C Yes, ACLs can assign permissions to specific users

D Yes, but only for administrators

ACLs allow permissions to be set for individual users as well as groups.

Explain what an Access Control List (ACL) is and why it is useful in operating systems.

Think about how computers decide who can open or change files.

Describe the difference between traditional file permissions and ACLs.

Consider how flexible the control is in each method.

Practice

1. What is the main purpose of an Access Control List (ACL) in operating systems?

easy

A. To monitor network traffic

B. To store the content of a file securely

C. To manage system hardware devices

D. To specify which users or groups have permissions on a file or resource

Solution

1. Step 1: Understand what ACLs control

   ACLs list permissions for users or groups on files or resources.

2. Step 2: Identify the main function

   The main function is to specify who can do what on a resource.

3. Final Answer:

   To specify which users or groups have permissions on a file or resource -> Option D

4. Quick Check:

   ACL = user/group permissions [OK]

Hint: ACLs control user permissions on files/resources [OK]

Common Mistakes:

• Confusing ACL with file content storage
• Thinking ACL manages hardware
• Assuming ACL monitors network

2. Which of the following is the correct way to represent an ACL entry for a user named 'alice' with read and write permissions?

easy

A. user:alice:rwx

B. user:alice:rw

C. group:alice:rw

D. user:alice:r

Solution

1. Step 1: Identify the correct ACL entry format

   ACL entries usually specify type (user/group), name, and permissions.

2. Step 2: Match permissions to read and write only

   Read and write permissions are 'rw', execute is 'x'. So 'rw' matches read and write.

3. Final Answer:

   user:alice:rw -> Option B

4. Quick Check:

   user + alice + rw = correct ACL entry [OK]

Hint: User entries start with 'user:' and list exact permissions [OK]

Common Mistakes:

• Using 'group' instead of 'user' for a user entry
• Adding execute permission when not needed
• Listing only read permission when write is required

3. Given the following ACL entries on a file:
user:alice:rwx
group:staff:r-x
other::r--
What permissions does a user named 'bob' who belongs to the 'staff' group have?

medium

A. Read and execute only

B. Read, write, and execute

C. Read only

D. No permissions

Solution

1. Step 1: Identify bob's group membership

   Bob belongs to the 'staff' group, so group permissions apply.

2. Step 2: Check group permissions in ACL

   Group 'staff' has 'r-x' which means read and execute, no write.

3. Final Answer:

   Read and execute only -> Option A

4. Quick Check:

   Group 'staff' = r-x = read + execute [OK]

Hint: User's group permissions apply if user not listed explicitly [OK]

Common Mistakes:

• Assuming user permissions apply to bob
• Including write permission incorrectly
• Using 'other' permissions instead of group

4. A system administrator sets an ACL entry as user:bob:r but Bob reports he cannot write to the file. What is the most likely cause?

medium

A. The file is owned by another user

B. Bob is not listed in the ACL

C. The ACL entry only grants read permission, not write

D. The ACL entry syntax is incorrect

Solution

1. Step 1: Analyze the ACL entry permissions

   The entry 'user:bob:r' grants only read permission, no write.

2. Step 2: Understand why Bob cannot write

   Without write permission, Bob cannot modify the file.

3. Final Answer:

   The ACL entry only grants read permission, not write -> Option C

4. Quick Check:

   Read-only permission blocks writing [OK]

Hint: Check if write permission 'w' is included in ACL entry [OK]

Common Mistakes:

• Assuming ownership affects ACL permissions directly
• Thinking syntax error causes permission denial
• Ignoring the actual permissions granted

5. You want to allow a group named 'developers' to have read and write access to a file, but no execute permission. Which ACL entry correctly achieves this without affecting other permissions?

hard

A. group:developers:rw-

B. group:developers:rwx

C. user:developers:rw-

D. group:developers:r--

Solution

1. Step 1: Identify the correct ACL entry type

   Since 'developers' is a group, the entry must start with 'group:developers'.

2. Step 2: Set permissions to read and write only

   Read and write permissions are 'rw-', where '-' means no execute.

3. Step 3: Confirm no execute permission is given

   group:developers:rw- uses 'rw-' which excludes execute permission.

4. Final Answer:

   group:developers:rw- -> Option A

5. Quick Check:

   Group + rw- = read/write, no execute [OK]

Hint: Use 'group:name:rw-' for read/write without execute [OK]

Common Mistakes:

• Using 'user' instead of 'group' for group permissions
• Including execute permission by mistake
• Setting only read permission when write is needed