Mission 335

Least privilege bridge

Checkpoint ownership, group assignment, and minimum useful modes.

Permissions and users
8 minutes Capstone Lesson 335 of 360
touchchownchmodstat
Lesson 335 of 360 0/360 lessons 0/17 missions Permissions and users · 8 minutes
0%
Continue View profile
Ops lab terminal Training lab
New learnerrank 0XP 0%complete
learner@clairos:/home/learner $ Unix ops lab: type a command, press Enter
Instructions 8 minutes

Click any instruction for the command details, the why, and the common mistake to avoid.

Create the protected note

Run touch lab/least-privilege.txt.

touch lab/least-privilege.txt
Set the intended owner

Run chown learner:learners lab/least-privilege.txt.

chown learner:learners lab/least-privilege.txt
Set the minimum useful mode

Run chmod 640 lab/least-privilege.txt.

chmod 640 lab/least-privilege.txt
Verify the final metadata

Run stat lab/least-privilege.txt.

stat lab/least-privilege.txt
Lesson support

What to notice while you play.

Objective

Build repeatable confidence with applying least privilege to a new operator note.

Hint

Start with touch lab/least-privilege.txt, inspect the result, then continue in order.

Why it matters

Applying least privilege to a new operator note helps operators explain what they know before they change anything.

Common mistakes
  • Skipping the output that proves applying least privilege to a new operator note.
  • Changing several things before recording a baseline.
Reference

Commands in this lesson.

touch <file>

Create an empty file.

chmod <mode> <path>

Change a simulated numeric permission mode.

chown <user:group> <path>

Change simulated owner/group labels.

stat <path>

Show lab file details.