LT4 User Privileges and Permissions

In Linux, the UID is a system defined number to represent a group account, while the GID is a system defined number to represent a user account.

False

If you saw the following permission on a file -rwsr-xr-x and the owner of the file was the root account, then the account of anyone executing that file would temporarily be given (i.e. elevated to) root privilege as the file was being executed.

True

NIS and LDAP are the two main network authentication tools mentioned in out text.

True

The /etc/shadow file was created so the encrypted user passwords would no longer be in /etc/passwd where they could potentially be copied and decrypted with password cracker software.

True

The standard permissions of read, write, and execute can be represented by the numbers 4, 2, and 1 (and in that order, i.e. rwx).

True

Linux user accounts can be only be associated with a security group by typing a command from the command line prompt, i.e. you can not add accounts to a group by manually editing the /etc/group file.

false

The /etc/group file contains a field that has a semi-colon delimited list of all the users who are members of a specific group.

false

The /etc/passwd file has been in use less than 5 years and contains the user's password.

false

The default values for the shadow password suite can be found in the /etc/skel file.

false

The sudo command requires you to know the root password, but it doesn't leave you in a root shell once the command is executed.

false

The three standard categories of user permissions on a file are represented by the characters o (owner), g (general), and e (everybody else).

false

Using the sudo command requires entering the root password (not your own password).

false

A PAM configuration file allows you to use PAM modules to construct custom authentication and other security for a user attempting to use a command or service.

true

A line in a PAM configuration file will contain a module type, control flag, the name of the module, and possible optional arguments.

true

A salted password means extra characters were added to the password before it was hashed (making it harder for a password cracker program to to crack the password).

true

Because the syntax of the sudoers file is so complex, a special version of vi called visudo will automatically check your syntax as the sudoers file is being saved and not allow you to save a changed sudoers file with serious syntax errors.

true

If a log file name has a number on the end of the name (for example: /var/log.secure.1), the number refers to a sequential generation of that file, such as a different log file for each week.

true

If you want more information on a command to manage a user account (such as how to use the useradd command), you could either Google the command or consult the online Linux manual by typing "man <command name>" at the command line prompt.

true

In the sudoers file, a "%" in front of an account name means you are working with a group account, and that the configuration line refers to everyone in that group as opposed to a single account.

true

Rather than using the sudo command to temporarily get root priviledges, you could use the su command to become the root account (assuming you know the root password) and remain at the root privilege level until you log out of the resulting root shell. But many administrators would consider remaining in the root shell as dangerous because the root account is too powerful and could easily allow you to delete data by mistake.

true

Since any physical device (like a tape drive or CD) is treated like a file in Linux, you can enter commands at a command line prompt that will read or write to a device just like you would issue commands to read and write to a text file.

true

The /etc/yp.conf configuration file is used by the NIS network authentication tool.

true

The command (assuming you had the permission to execute it successfully), "find / -group dip", would find all the files where dip is the group owner.

true

The command chmod ug=6 filex is equivalent to chmod ug=rw filex

true

The following (when see as part of the output from an ls -l command) would mean the owner/user has read, write, and execute privileges, while the group owner members only have read and write privileges, and everybody else only has read privileges. -rwxrw-r--

true

The purpose of the /etc/sudoers file is to specify who can use sudo to execute specific commands with the privileges a specified user (such as root).

true

The su -c '<actual command>' will execute <actual command> with root privileges, and you still have to know the root password, but you won't remain at a root prompt after the <actual command> executes.

true

The su command will prompt you for the root password (not your password), and allow you to execute commands with root privileges.

true

When looking at an /etc/passwd record for a user account, an "x" in the password column means the encrypted password for the account is in the /etc/shadow file.

true

chmod ugo=7 would result in the following permission for the three primary categories of users. user/owner - rwx group owner - rwx other - rwx

true