1、在/data/testdir里創建的新文件自動屬于g1組,組g2的成員如:alice能對這些新文件有讀寫權限,組g3的成員如:tom只能對新文件有讀權限,其它用戶(不屬于g1,g2,g3)不能訪問這個文件夾。
[root@localhost testdir]# mkdir -p /data/testdir [root@localhost testdir]# groupadd g1 [root@localhost testdir]# groupadd g2 [root@localhost testdir]# groupadd g3 [root@localhost testdir]# chgrp g1 /data/testdir [root@localhost testdir]# useradd -G g2 alice [root@localhost testdir]# useradd -G g3 tom [root@localhost testdir]# chmod g+s /data/testdir [root@localhost testdir]# setfacl -Rm d:g:g2:rwx /data/testdir [root@localhost testdir]# setfacl -Rm d:g:g3:r /data/testdir [root@localhost testdir]# getfacl /data/testdir |
2、創建組sales,gid 3000,passwd:centos,sales admins:user2
將用戶user1,user2,user3加入到sales輔助組
希望user1 創建新文件 默認的所屬組為sales
user2將用戶user3從sales組移除
刪除sales,user1,user2
[root@localhost ~]# groupadd -g 3000 sales [root@localhost ~]# echo centos > gpasswd --stdin sales [root@localhost ~]# gpasswd -A user2 sales [root@localhost ~]# usermod -g sales user1 [root@localhost ~]# gpasswd -a user1 sales [root@localhost ~]# gpasswd -a user2 sales [root@localhost ~]# gpasswd -a user3 sales [root@localhost ~]# su - user1 Last login: Sat Aug 6 15:28:56 CST 2016 on pts/0 [user1@localhost ~]$ touch a.txt [user1@localhost ~]$ ll !$ ll a.txt -rw-r--r--. 1 user1 sales 0 Aug 6 15:38 a.txt [user1@localhost ~]$ exit logout [root@localhost ~]# su - user2 Last login: Fri Aug 5 21:37:49 CST 2016 on pts/0 [user2@localhost ~]$ gpasswd -d user3 sales Removing user user3 from group sales [user2@localhost ~]$ exit logout [root@localhost ~]# userdel -r user1 userdel: group user1 not removed because it is not the primary group of user user1. [root@localhost ~]# userdel -r user2 [root@localhost ~]# groupdel sales [root@localhost ~]# tail -3 /etc/passwd wangcai:x:1006:1006::/home/wangcai:/bin/bash gentoo:x:1007:1007:Gentoo Distribution:/home/gentoo:/bin/csh user3:x:1010:1010::/home/user3:/bin/bash [root@localhost ~]# tail -3 /etc/group g3:x:3003: user1:x:1008: user3:x:1010: |
原創文章,作者:皺 多利亞,如若轉載,請注明出處:http://www.www58058.com/29861