Linux User Management
Download as PPTX, PDF2 likes3,746 views
This document discusses user and file permissions in Linux. It covers how every file is owned by a user and group, and how file access is defined using file mode bits. These bits determine read, write and execute permissions for the file owner, group and others. An example of a file with permissions -rw-rw-r-- is provided to demonstrate this. User accounts are configured in /etc/passwd, while passwords are securely stored in /etc/shadow. Common commands for managing users, groups, permissions and default file access (umask) are also outlined.
![Gaurav Mishra <gmishx@gmail.com>
User management commands
• Adding new user
▫ adduser [--ingroup GROUP] USER
• Adding new group
▫ addgroup [--gid ID] GROUP
• Listing users
▫ users [GROUP]
• Listing groups
▫ groups [USER]
• Adding user to a group
▫ usermod [-a] -G GROUP USER
• Changing password
▫ passwd [USER]
• Locking/unlocking login
▫ passwd -l USER / passwd -u USER
• Removing login password
▫ passwd -d [USER]
27-02-2018](https://image.slidesharecdn.com/linux-6-180304061112/85/Linux-User-Management-7-320.jpg)
![Gaurav Mishra <gmishx@gmail.com>
Access to file/directory
• Modifying access
▫ chmod <new-mod-bits> FILE/DIRECTORY
▫ chmod <+/-><r/w/x>[…] [u/g/o] FILE/DIRECTORY
▫ Adding write access to group
chmod +w g /home/user/myfile
▫ Adding execute and removing write access to others
chmod +x-w o /home/user/myfile
• Changing owner
▫ chown [USER][:GROUP] FILE/DIRECTORY
27-02-2018](https://image.slidesharecdn.com/linux-6-180304061112/85/Linux-User-Management-8-320.jpg)
Ad
More Related Content
What's hot (20)
Similar to Linux User Management (20)
Ad
More from Gaurav Mishra (8)
Ad
Recently uploaded (20)
Linux User Management
- 1. Gaurav Mishra <[email protected]> Linux - 6 User Management 27-02-2018 Unrestricted
- 2. Gaurav Mishra <[email protected]> Users and groups • Every file in Linux is owned by a user which have access and control over it. • System files are owned by root use. • Each user belongs to at least one group and one group can have more than one user. • The user can set access for other users on their files. • The access to a file is denoted using the file mode bits. 27-02-2018
- 3. Gaurav Mishra <[email protected]> File mode bits • Every file have 10 file mode bits as follows: ▫ d rwx rwx rwx ▫ The first bit defines the file type - : Regular file. b : Block special file (stored in /dev). c : Character special file (stored in /dev). d : Directory. l : Symbolic link. p : FIFO. s : Socket. w : Whiteout. ▫ The second set of octets defines the access for the owner, third is for the group and fourth is for others The first bit defines the read access The second bit defines the write access The third bit defines the execute access 27-02-2018
- 4. Gaurav Mishra <[email protected]> Example • -rw-rw-r-- optimus developers /home/optimus/project1/README.MD • The string denotes that there is a file README.MD which is owned by the user optimus and the group developers. • From the file mode bits, we can derive that ▫ It is a regular file ▫ The owner has read and write access to the file ▫ The group has read and write access to the file ▫ Others can only read the file 27-02-2018
- 5. Gaurav Mishra <[email protected]> User directories 27-02-2018
- 6. Gaurav Mishra <[email protected]> /etc/passwd • Whenever you create a user, a new entry is created in /etc/passwd file. • Each entry takes one line and each field is separated by colons: ▫ Username ▫ Password ▫ UserID ▫ GroupID ▫ Comment ▫ Home Directory ▫ Login Shell • The passwords are stored in /etc/shadow file accessible only to root in encrypted format for security. 27-02-2018
- 7. Gaurav Mishra <[email protected]> User management commands • Adding new user ▫ adduser [--ingroup GROUP] USER • Adding new group ▫ addgroup [--gid ID] GROUP • Listing users ▫ users [GROUP] • Listing groups ▫ groups [USER] • Adding user to a group ▫ usermod [-a] -G GROUP USER • Changing password ▫ passwd [USER] • Locking/unlocking login ▫ passwd -l USER / passwd -u USER • Removing login password ▫ passwd -d [USER] 27-02-2018
- 8. Gaurav Mishra <[email protected]> Access to file/directory • Modifying access ▫ chmod <new-mod-bits> FILE/DIRECTORY ▫ chmod <+/-><r/w/x>[…] [u/g/o] FILE/DIRECTORY ▫ Adding write access to group chmod +w g /home/user/myfile ▫ Adding execute and removing write access to others chmod +x-w o /home/user/myfile • Changing owner ▫ chown [USER][:GROUP] FILE/DIRECTORY 27-02-2018
- 9. Gaurav Mishra <[email protected]> Default access • Whenever a directory or file is created, it is assigned a default access • This default access can be checked and assigned by umask • To check the current mask, enter umask ▫ user@host:~$ umask ▫ 0002 • To check the symbolic values, add -S option ▫ user@host:~$ umask -S ▫ u=rwx,g=rwx,o=rx • The umask assigns the inverse of the bits set in the mask to the new file/directory ▫ umask 002 => 000 000 010 ~ => 111 111 101 • Setting default access to rwxr--r-- ▫ umask 033 ▫ umask -S u=rwx,g=r,o=r 27-02-2018