Linux Foundations_LPI_Guide

Question 1

How is Debian GNU/Linux different from Ubuntu? Name two aspects.

Answer 1

The major difference
is the complexity of the user configuration that Ubuntu doesn’t require during the installation
process.

Another difference would be the stability of each distribution. Debian is considered to be more
stable compared to Ubuntu. This is because Debian receives fewer updates that are tested in
detail and the entire operating system is more stable. On the other hand, Ubuntu enables the
user to use the latest releases of software and all the new technologies.

Question 2

What are the most common environments/platforms Linux is used for? Name three different
environments/platforms and name one distribution you can use for each.

Answer 2

smartphone, desktop and server. On smartphones, it can be used by distributions such as Android. On desktop and server, it can be
used by any distribution that is mostly suitable with the functionality of that machine, from
Debian, Ubuntu to CentOS and Red Hat Enterprise Linux.

Question 3

You are planning to install a Linux distribution in a new environment. Name four things that
you should consider when choosing a distribution.

Answer 3

considered is cost,
performance,
scalability,
how stable it is
the hardware demand of the system.

Question 4

Name three devices that the Android OS runs on, other than smartphones.

Answer 4

smart TVs,
tablet computers,
Android Auto and
smartwatches.

Question 5

Explain three major advantages of cloud computing.

Answer 5

flexibility,
easy to recover
low use cost.
Cloud based services are easy to implement and scale, depending on the business
requirements.
It has a major advantage in backup and recovery solutions, as it enables
businesses to recover from incidents faster and with repocussion
subscription-based model

Question 6

Considering cost and performance, which distributions are mostly suitable for a business that
aims to reduce licensing costs, while keeping performance at its highest? Explain why

Answer 6

CentOS.
incorporates all Red Hat products, which are further used within their commercial operating
system,
while being free to use.
Similarly, Ubuntu LTS releases guarantee support for a longer
period of time.
The stable versions of Debian GNU/Linux are also often used in enterprise
environments

Question 7

What are the major advantages of the Raspberry Pi and which functions can they take in
business?

Answer 7

Raspberry Pi is small in size
is low cost
and can handle web traffic and many other functionalities.
It can be used as a server, a firewall
and can be used as the main board for robots, and many other small devices

Question 8

What range of distributions does Amazon Cloud Services and Google Cloud offer? Name at least
three common ones and two different ones.

Answer 8

The common distributions between Amazon and Google Cloud Services are Ubuntu, CentOS
and Red Hat Enterprise Linux. Each cloud provider also offers specific distributions that the
other one doesn’t. Amazon has Amazon Linux and Kali Linux, while Google offers the use of
FreeBSD and Windows Servers.

Question 9

Guided Exercises
1. For each of the following commands, identify whether it is associated with the Debian
packaging system or the Red Hat packaging system:
dpkg
rpm
apt-get
yum
dnf

Answer 9

dpkg ——–>Debian packaging system
rpm ———> Red Hat packaging system
apt-get—–> Debian packaging system
yum———> Red Hat packaging system
dnf ———>Red Hat packaging system

Question 10

Define dnf

Question 11

Which command could be used to install Blender on Ubuntu? After installation, how can the
program be executed?

Answer 11

The command apt-get install blender. The package name should be specified in
lowercase. The program can be executed directly from the terminal

Question 12

Which application from the LibreOffice suite can be used to work with electronic
spreadsheets?

Answer 12

CALC

Question 13

Which open-source web browser is used as the basis for the development of Google Chrome?

Answer 13

Chromium

Question 14

SVG is an open standard for vector graphics. Which is the most popular application for editing
SVG files in Linux systems?

Answer 14

Inkscape

Question 15

For each of the following file formats, write the name of an application able to open and edit
the corresponding file:
png
doc
xls
ppt

Answer 15

png——-> Gimp
doc——-> LibreOffice Writer
xls——–> LibreOffice Calc
ppt——-> LibreOffice Impress

Question 16

Which software package allows file sharing between Linux and Windows machines over the
local network?

Answer 16

Samba

Question 17

You know that configuration files are kept even if the associated package is removed from the
system. How could you automatically remove the package named cups and its configuration
files from a DEB based system?

Answer 17

apt-get purge cups

Question 18

Suppose you have many TIFF image files and want to convert them to JPEG. Which software
package could be used to convert those files directly at the command line?

Answer 18

ImageMagick

Question 19

Which software package do you need to install in order to be able to open Microsoft Word
documents sent to you by a Windows user?

Answer 19

LibreOffice or OpenOffice

Question 20

Every year, linuxquestions.org promotes a survey about the most popular Linux applications.
Visit https://www.linuxquestions.org/questions/2018-linuxquestions-org-members-choice-
awards-128/ and find out which desktop applications are most popular among experienced
Linux users.

Answer 20

Browser: Firefox. Email client: Thunderbird. Media player: VLC. Raster graphics editor: GIMP

Question 21

What are — in a nutshell — the “four freedoms” as defined by Richard Stallman and the Free
Software Foundation?

Answer 21

freedom 0———–> run the software
freedom 1———–> study and modify the software (source code)
freedom 2———–> distribute the software
freedom 3———–> distribute the modified software

Question 22

What does the abbreviation FLOSS stand for?

Answer 22

Free/Libre Open Source Software

Question 23

You have developed free software and want to ensure that the software itself, but also all
future results based on it, remain free as well. Which license do you choose?
CC BY———————->
GPL version 3———–> X
2-Clause BSD License———–>
LGPL———–>

Answer 23

GPL version 3 (GNU General Public License version 3)

Copyleft
Freedom

Question 24

Which of the following licenses would you call permissive, which would you call copyleft?

Answer 24

Simplified BSD License permissive
GPL version 3 copyleft
CC BY permissive
CC BY-SA copyleft

Question 25

You have written a web application and published it under a free license. How can you earn money with your product? Name three possibilities.

Answer 25

◦ Dual licensing, e.g. by offering a chargeable “Business Edition” ◦ Offering hosting, service, and support ◦ Developing proprietary extensions for customers

Question 26

Under which license (including version) are the following applications available?

Answer 26

Apache HTTP Server ------------------> Apache License 2.0 MySQL Community Server-----------> GPL 2 Wikipedia articles (English)-----------> Creative Commons Attribution Share-Alike license (CC-BY-SA) Mozilla Firefox Mozilla-----------------> Public License 2.0 GIMP ---------------------------------------->GPL 3

Question 27

You want to release your software under the GNU GPL v3. What steps should you follow?

Answer 27

◦ If necessary, secure yourself against the employer with a copyright waiver, for example, so that you can specify the license. ◦ Add a copyright notice to each file. ◦ Add a file called COPYING with the full license text to your software. ◦ Add a reference to the license in each file

Question 28

You have written proprietary software and would like to combine it with free software under the GPL version 3. Are you allowed to do this or what do you have to consider?

Answer 28

The FAQs of the Free Software Foundation provide information here: Provided that your proprietary software and the free software remain separate from each other, the combination is possible. However, you have to make sure that this separation is technically guaranteed and recognizable for the users. If you integrate the free software in such a way that it becomes part of your product, you must also publish the product under the GPL according to the copyleft principle.

Question 29

Why did the Free Software Foundation release the GNU Affero General Public License (GNU AGPL) as a supplement to the GNU GPL?

Answer 29

The GNU AGPL closes a license gap that arises especially with free software hosted on a server: If a developer makes changes to the software, he is not obliged under the GPL to make these changes accessible, since he allows access to the program, but does not “redistribute” on the program in the GPL sense. The GNU AGPL, on the other hand, stipulates that the software must be made available for download with all changes

Question 30

Name three examples of free software, which are also offered as “Business Edition”, e.g. in a chargeable version

Answer 30

MySQL Zammad Nextcloud

Question 31

You should use a “private window” in your browser if you want: To browse completely anonymous on the Internet To leave no trace on the computer you’re using To activate TLS to avoid cookie tracking In order to use DNT To use cryptography during data transmission

Answer 31

To leave no trace on the computer you’re using

Question 32

What is OpenStack? A project that allows the creation of private IaaS A project that allows the creation of private PaaS A project that allows the creation of private SaaS A hypervisor An open source password manager

Answer 32

A project that allows the creation of private IaaS

Question 33

Which of the below options are valid disk encryption softwares? RevealJS, EncFS and dm-crypt dm-crypt and KeePass EncFS and Bitwarden EncFS and dm-crypt TLS and dm-crypt

Answer 33

EncFS and dm-crypt

Question 34

Select true or false for dm-crypt device encryption: Files are encrypted before being written to the disk.

Answer 34

true

Question 35

Select true or false for dm-crypt device encryption: The entire filesystem is an encrypted blob

Answer 35

true

Question 36

Select true or false for dm-crypt device encryption: Only files and directories are encrypted, not symlinks

Answer 36

false

Question 37

Select true or false for dm-crypt device encryption: Don’t require root access

Answer 37

false

Question 38

Select true or false for dm-crypt device encryption: Is a block device encryption

Answer 38

true

Question 39

Beamer is: An encryption mechanism A hypervisor A virtualization software An OpenStack component A LaTeX presentation tool

Answer 39

A LaTeX presentation tool

Question 40

Find what type the following commands are: cd----------> cat---------> exit-------->

Answer 40

cd----------> Shell builtin cat---------> External command exit--------> Shell builtin

Question 41

With one command and using brace expansion in Bash (review the man page for Bash), create 5 files numbered 1 to 5 with the prefix game (game1, game2, …). Ranges can be used to express the numbers from 1 to 5 within one command:

Answer 41

$ touch game{1..5} $ ls game1 game2 game3 game4 game5

Question 42

Delete all 5 files that you just created with just one command, using a different special character (review Pathname Expansion in the Bash man pages). Since all files start with game and end in a single character (a number from 1 to 5 in this case), ? can be used as a special character for the last character in the filename:

Answer 42

$ rm game?

Question 43

Is there any other way to make two commands interact with each other? What are those?

Answer 43

one command could write data to a file which is then processed by another command. Linux can also collect the output of one command and use it as input for another command. This is called piping and we will learn more about it in a future lesson.

Question 44

Create a local variable number.

Answer 44

Answers to Guided Exercises 1. Create a local variable number. $ number=5

Question 45

Create an environment variable ORDER, using one of the two above methods.

Answer 45

$ export ORDER=desc

Question 46

Display both the variable names and their contents.

Answer 46

$ echo number number $ echo ORDER ORDER $ echo $number 5 $ echo $ORDER desc

Question 47

What are the scopes of the previously created variables?

Answer 47

The scope of the local variable number is the current shell only. ◦ The scope of the environment variable ORDER is the current shell and all the subshells generated by it.

Question 48

Create a local variable nr_files and assign the number of lines found in the /etc/passwd file. Hint: Look into the command wc and command substitution and don’t forget about quotation marks.

Answer 48

$ nr_files=`wc -l /etc/passwd`

Question 49

Create an environment variable ME. Assign the USER variable’s value.

Answer 49

$ export ME=$USER

Question 50

Append the HOME variable value to ME, having the : delimiter. Display the contents of the ME variable.

Answer 50

$ ME=$ME:$HOME $ echo $ME user:/home/user

Question 51

Using the date example above, create a variable called today and assign the date for one of the time zones. The following use the GMT and EST time zones as an example, but any time zone selection is valid.

Answer 51

$ today=$(TZ=GMT date) $ echo $today Thu 31 Jan 15:07:35 GMT 2019 or $ today=$(TZ=EST date) $ echo $today Thu 31 Jan 10:07:35 EST 2019

Question 52

Create another variable called today1 and assign the system’s date to it. Assuming that you are in GMT:

Answer 52

$ today1=$(date) $ echo $today1 Thu 31 Jan 10:07:35 EST 2019

Question 53

Display the path to the first 3 README files. Use the man command to identify the correct option for locate.

Answer 53

$ locate -l 3 README /etc/alternatives/README /etc/init.d/README /etc/rc0.d/README

Question 54

Create a file called test in your home directory. Find its absolute path with the locate command.

Answer 54

$ touch test $ locate test /home/user/test

Question 55

Did you find it immediately? What did you have to do in order for locate to find it?

Answer 55

$ sudo updatedb The file is newly created, therefore there is no record of it in the database.

Question 56

Search for the test file that you previously created, using the find command. What syntax did you use and what is the absolute path ?

Answer 56

$ find ~ -name test or $ find . -name test /home/user/test

Question 57

Display on the screen the present working directory, including the subfolders.

Answer 57

$ ls -R

Question 58

Search within the tree for all files that end with a number.

Answer 58

$ find ~ -name "*[0-9]" $ locate "*[0-9]"

Question 59

Remove the entire directory tree with a single command

Answer 59

$ rm -r Documents Downloads Test test

Question 60

For each of the following paths, identify whether it is absolute or relative: /home/user/Downloads absolute ../Reports relative /var absolute docs relative / absolute

Answer 60

For each of the following paths, identify whether it is absolute or relative: /home/user/Downloads------------> absolute ../Reports ------------------------------->relative /var --------------------------------------->absolute docs -------------------------------------->relative / ------------------------------------------->absolute

Question 61

Observe the following file structure. Note: Directories end with a slash (/) when tree is invoked with the -F option. You will need elevated privileges in order to run the tree command on the root (/) directory. The following is example output and is not indicative of a full directory structure. Use it to answer the following questions:

Answer 61

$ sudo tree -F / / ├── etc/ │ ├── network/ │ │ └── interfaces │ ├── systemd/ │ │ ├── resolved.conf │ │ ├── system/ │ │ ├── system.conf │ │ ├── user/ │ │ └── user.conf │ └── udev/ │ ├── rules.d/ │ └── udev.conf └── home/ ├── lost+found/ └── user/ └── Documents/ 12 directories, 5 files

Question 62

Enter the shortest possible command for each of the following: ◦ Your current location is root (/). Enter the command to navigate to lost+found within the home directory (example):

Answer 62

$ cd home/lost+found

Question 63

Enter the shortest possible command for each of the following: ◦ Your current location is root (/). Enter the command to navigate to the directory named network:

Answer 63

$ cd etc/network

Question 64

Enter the shortest possible command for each of the following: ◦ Your current location is Documents. Navigate to the directory named etc:

Answer 64

$ cd /etc

Question 65

Enter the shortest possible command for each of the following: ◦ Your current location is system. Navigate to the directory named user:

Answer 65

$ cd /home/user

Question 66

Consider the following commands: $ pwd /etc/udev/rules.d $ cd ../../systemd/user $ cd .. $ pwd What is the output of the final pwd command?

Answer 66

/etc/systemd

Question 67

Suppose a user has entered the following commands: What cd command would allow you to enter this directory

Answer 67

$ mkdir "this is a test" $ ls this is a test $ cd this\ is\ a\ test

Question 68

Try this again, but after typing in cd this, press the TAB key. What is now displayed on the prompt?

Answer 68

$ cd this\ is\ a\ test This is an example of autocompletion, which is an invaluable tool not only for saving time, but for preventing spelling errors.

Question 69

Try to create a directory whose name contains a \ character. Display the directory’s name with ls and delete the directory. You can either escape the backslash using another backslash (\\) or use single or double quotes around the whole directory name:

Answer 69

$ mkdir my\\dir $ ls 'my\dir' $ rmdir 'my\dir'

Question 70

Here is a new command to try: du -h. Run this command and describe the output that it gives you.

Answer 70

The du command will generate a list of all files and directories, and indicate the size of each. For example, du -s will display the file size of all files, directories, and subdirectories for a certain location.

Question 71

On many Linux systems, you can type in ll and get the same output as you would if you typed ls -l. Please note however that ll is not a command. For example, man ll will give you the message that no manual entry exists for it. This is an example of an alias. Why might aliases be useful to a user?

Answer 71

ll is an alias of ls -l. In Bash, we can use aliases to simplify commonly-used commands. ll is often defined for you in Linux, but you can create your own as well.

Question 72

What command will navigate into the network directory regardless of your current location?

Answer 72

cd /etc/network

Question 73

What command can user enter to navigate into their Documents directory from /etc/udev? Use the shortest possible path

Answer 73

cd ~/Documents

Question 74

What command can user enter to navigate into michael 's Music directory? Use the shortest possible path:

Answer 74

cd ~michael/Music

Question 75

What does -v do for mkdir, rm, and cp?

Answer 75

$ rm -v a b removed 'a' removed 'b' $ mv -v a b 'a' -> 'b' $ cp -v b c 'b' -> 'c'

Question 76

What happens if you accidentally attempt to copy three files on the same command line to a file that already exists instead of a directory? Linux Essentials (Version 1.6) | 2.4 Creating, Moving and Deleting Files Version: 2024-10-27 | Licensed under CC BY-NC-ND 4.0. | learning.lpi.org | 163 cp will refuse to do anything and output an error message:

Answer 76

$ touch a b c d $ cp a b c d cp: target 'd' is not a directory

Question 77

What happens when you use mv to move a directory into itself? You will get an error message telling you mv cannot do that.

Answer 77

$ mv a a mv: cannot move 'a' to a subdirectory of itself, 'a/a'

Question 78

How would you delete all files in your current directory that start with old? You would use the glob old* with rm:

Answer 78

$ rm old*

Question 79

Which of the following files would log_[a-z]_201?_*_01.txt match? og_3_2017_Jan_01.txt log_+_2017_Feb_01.txt log_b_2007_Mar_01.txt log_f_201A_Wednesday_01.txt

Answer 79

log_f_201A_Wednesday_01.txt $ ls log_[a-z]_201?_*_01.txt log_f_201A_Wednesday_01.txt

Question 80

Create a few globs to match the following list of file names: doc100 doc200 doc301 doc401

Answer 80

There are several solutions. Here are some of them: doc* doc[1-4]* doc?0? doc[1-4]0?

Question 81

Use the cp man page to find out how to make a copy of a file and have the permissions and modification time match the original. You would use the -p option. From the man page:

Answer 81

$ man cp -p same as --preserve=mode,ownership,timestamps --preserve[=ATTR_LIST] preserve the specified attributes (default: mode,ownership,time‐ stamps), if possible additional attributes: context, links, xattr, all

Question 82

What does the rmdir -p option do? Experiment with it and explain how it differs from rm -r. It causes rmdir to behave similarly to mkdir -p. If passed a tree of empty directories, it will remove all of them.

Answer 82

$ find . ./a ./a/b ./a/b/c $ rmdir -p a/b/c $ ls

Question 83

DO NOT ACTUALLY EXECUTE THIS COMMAND: What do you think rm -ri /* will do? (HONESTLY, DO NOT ATTEMPT TO DO THIS!)

Answer 83

It will remove all files and directories writable by your user account. This includes any network file systems.

Question 84

Explain cp -u

Answer 84

The -u option causes cp to only copy a file if the destination is missing or is older than the source file.

Question 85

According to the extensions, which of the following tools were used to create these files? Filename--------------->tar-------------> gzip-----------> bzip2--------------> xz archive.tar archive.tgz archive.tar.xz

Answer 85

Filename--------------->tar-------------> gzip-----------> bzip2--------------> xz archive.tar-------------> X--------------> - <--------------> - <-------------> - archive.tgz ------------>X-----------------> X <-----------> - <----------------> - archive.tar.xz---------> X ----------------> - <-----------> - <----------------> X

Question 86

Which tar option instructs tar to include the leading / in absolute paths? The -P option. From the man page:

Answer 86

-P, --absolute-names Don't strip leading slashes from file names when creating archives

Question 87

Does zip support different compression levels?

Answer 87

Yes. You would use -#, replacing # with a number from 0-9. From the man page: -# (-0, -1, -2, -3, -4, -5, -6, -7, -8, -9) Regulate the speed of compression using the specified digit #, where -0 indicates no compression (store all files), -1 indi‐ cates the fastest compression speed (less compression) and -9 indicates the slowest compression speed (optimal compression, ignores the suffix list). The default compression level is -6. Though still being worked, the intention is this setting will control compression speed for all compression methods. Cur‐ rently only deflation is controlled.

Question 88

When extracting files, does tar support globs in the file list?

Answer 88

Yes, you would use the --wildcards option. --wildcards must be placed right after the tar file when using the no dash style of options. For example: $ tar xf tarfile.tar --wildcards dir/file* $ tar --wildcards -xf tarfile.tar dir/file*

Question 89

How can you make sure a decompressed file is identical to the file before it was compressed?

Answer 89

You don’t need to do anything with the tools covered in this lesson. All three of them include checksums in their file format that is verified when they are decompressed.

Question 90

What happens if you try to extract a file from a tar archive that already exists on your filesystem?

Answer 90

The file on your filesystem is overwritten with the version that is in the tar file.

Question 91

How would you extract the file archive.tgz without using the tar z option?

Answer 91

You would decompress it with gunzip first. $ gunzip archive.tgz $ tar xf archive.tar

Question 92

List the contents of your current directory, including the ownership and permissions, and redirect the output to a file called contents.txt within your home directory.

Answer 92

$ ls -l > contents.txt

Question 93

Display the last 10 lines of the /etc/passwd file and redirect it to a new file in the your user’s Documents directory.

Answer 93

$ tail /etc/passwd > Documents/newfile

Question 94

Count the number of words within the contents.txt file and append the output to the end of a file field2.txt in your home directory. You will need to use both input and output redirection.

Answer 94

$ wc < contents.txt >> field2.txt

Question 95

Display the first 5 lines of the /etc/passwd file and sort the output reverse alphabetically.

Answer 95

$ head -n 5 /etc/passwd | sort -r

Question 96

Using the previously created contents.txt file, count the number of characters of the last 9 lines.

Answer 96

$ tail -n 9 contents.txt | wc -c 531

Question 97

Count the number of files called test within the /usr/share directory and its subdirectories. Note: each line output from the find command represents a file.

Answer 97

$ find /usr/share -name test | wc -l 125

Question 98

Select the second field of the contents.txt file and redirect the standard output and error output to another file called field1.txt.

Answer 98

$ cut -f 2 -d " " contents.txt &> field1.txt

Question 99

Using the input redirection operand and the tr command, delete the dashes (-) from the contents.txt file.

Answer 99

$ tr -d "-" < contents.txt

Question 100

What is the biggest advantage of only redirecting errors to a file?

Answer 100

Only redirecting errors to a file can help with keeping a log file that is monitored frequently.

Question 101

Replace all recurrent spaces within the alphabetically sorted contents.txt file with a single space.

Answer 101

$ sort contents.txt | tr -s " "

Question 102

In one command line, eliminate the recurrent spaces (as done in the previous exercise), select the ninth field and sort it reverse alphabetically and non-case sensitive. How many pipes did you have to use?

Answer 102

$ cat contents.txt | tr -s " " | cut -f 9 -d " " | sort -fr

Question 103

All lines containing the word cat anywhere on the line.

Answer 103

$ grep "cat" /usr/share/hunspell/en_US.dic Alcatraz/M Decatur/M Hecate/M ...

Question 104

All lines that do not contain any of the following characters: sawgtfixk.

Answer 104

$ grep -v "[sawgtfixk]" /usr/share/hunspell/en_US.dic 49269 0/nm 1/n1 2/nm 2nd/p 3/nm 3rd/p 4/nm 5/nm 6/nm 7/nm 8/nm ...

Question 105

All lines that start with any 3 letters and the word dig.

Answer 105

$ grep "^...dig" /usr/share/hunspell/en_US.dic cardigan/SM condign predigest/GDS

Question 106

All lines that end with at least one e

Answer 106

$ grep -E "e+$" /usr/share/hunspell/en_US.dic Anglicize Anglophobe Anthropocene

Question 107

All lines that contain one of the following words: org , kay or tuna.

Answer 107

$ grep -E "org|kay|tuna" /usr/share/hunspell/en_US.dic Borg/SM George/MS Tokay/M fortunate/UY

Question 108

Number of lines that start with one or no c followed by the string ati.

Answer 108

$ grep -cE "^c?ati" /usr/share/hunspell/en_US.dic 3

Question 109

Find the regular expression that matches the words in the “Include” line and doesn’t match the ones in the “Exclude” line:

Answer 109

◦ Include: pot, spot, apot Exclude: potic, spots, potatoe Answer: pot$ ◦ Include: arp99, apple, zipper Exclude: zoo, arive, attack Answer: p+ ◦ Include: arcane, capper, zoology Exclude: air, coper, zoloc Answer: arc|cap|zoo ◦ Include: 0th/pt, 3th/tc, 9th/pt Exclude: 0/nm, 3/nm, 9/nm Answer: [0-9]th.+ ◦ Include: Hawaii, Dario, Ramiro Exclude: hawaii, Ian, Alice Answer: ^[A-Z]a.*i+

Question 110

What other useful command is commonly used to search within the files? What additional functionalities does it have?

Answer 110

The sed command. The command can find and replace characters or sets of characters within a file.

Question 111

Thinking back at the previous lesson, use one of the examples and try to look for a specific pattern within the output of the command, with the help of grep.

Answer 111

I took one of the answers from the Explorational Exercises and looked for the line that has read, write and execute as the group permissions. Your answer might be different, depending on the command that you chose and the pattern that you created $ cat contents.txt | tr -s " " | grep "^....rwx"

Question 112

The user types the following into their shell: What has the user done?

Answer 112

$ PATH=~/scripts $ ls Command 'ls' is available in '/bin/ls' The command could not be located because '/bin' is not included in the PATH environment variable. ls: command not found The user has overwritten the contents of PATH with the directory ~/scripts. The ls command can no longer be found, since it isn’t contained in PATH. Note that this change only affects the current session, logging out and back in with revert the change

Question 113

Consider the following script. Notice that it is using elif to check for a second condition:

Answer 113

> /!bin/bash > fruit1 = Apples > fruit2 = Oranges if [ $1 -lt $# ] then echo "This is like comparing $fruit1 and $fruit2!" > elif [$1 -gt $2 ] then > echo '$fruit1 win!' else > echo "Fruit2 win!" > done

Question 114

#!/bin/bash fruit1=Apples fruit2=Oranges if [ $1 -lt $# ] then echo "This is like comparing $fruit1 and $fruit2!" elif [ $1 -gt $2 ] then echo "$fruit1 win!" else echo "$fruit2 win!" fi What will the output be in the following situations? $ ./guided1.sh 3 0

Answer 114

Apples win!

Question 115

Write a simple script that will check if exactly two arguments are passed. If so, print the arguments in reverse order. Consider this example (note: your code may look different than this, but should lead to the same output):

Answer 115

if [ $1 == $number ] then echo "True!" fi #!/bin/bash if [ $# -ne 2 ] then echo "Error" else echo "$2 $1" fi

Question 116

This code is correct, but it is not a number comparison. Use an internet search to discover how this code is different from using -eq. Using == will compare strings. That is, if the characters of both variables match up exactly, then the condition is true. abc == abc == 1 == 1 1+1 == 2

Answer 116

abc == ------------------------------->abc true abc == ------------------------------->ABC false 1 == 1 ------------------------------->true 1+1 == 2 ------------------------------->false String comparisons lead to unexpected behavior if you are testing for numbers.

Question 117

There is an environment variable that will print the current directory. Use env to discover the name of this variable.

Answer 117

PWD

Question 118

Using what you have learned in questions 2 and 3, write a short script that accepts an argument. If an argument is passed, check if that argument matches the name of the current directory. If so, print yes. Otherwise, print no.

Answer 118

#!/bin/bash if [ "$1" == "$PWD" ] then echo "yes" else echo "no" fi

Question 119

#!/bin/bash if [ $# -lt 1 ] then echo "This script requires at least 1 argument." exit 1 fi echo $1 | grep "^[A-Z]*$" > /dev/null if [ $? -ne 0 ] then echo "no cake for you!" exit 2 fi echo "here's your cake!" exit 0 Read the contents of script1.sh below: What is the output of these commands? Command: ./script1.sh Output: ◦ Command: Output: ◦ Command: Output: ◦ Command: Output: ◦ Command: Output:

Answer 119

Command: ./script1.sh Output: This script requires at least 1 argument. ◦ Command: echo $? Output: 1 ◦ Command: ./script1.sh cake Output: no cake for you! ◦ Command: echo $? Output: 2 ◦ Command: ./script1.sh CAKE Output: here’s your cake! ◦ Command: echo $? Output: 0

Question 120

Read the contents of file script2.sh: for filename in $1/*.txt do cp $filename $filename.bak done

Answer 120

Describe the purpose of this script as you understand it. This script will make backup copies of all files ending with .txt in a subdirectory defined in the first argument.

Question 121

Create a script that will take any number of arguments from the user, and print only those arguments that are numbers greater than 10.

Answer 121

#!/bin/bash for i in $@ do echo $i | grep "^[0-9]*$" > /dev/null if [ $? -eq 0 ] then if [ $i -gt 10 ] then echo -n "$i " fi fi done echo ""

Question 122

Retrieve the current kernel release of your Linux system if you have access to the command line.

Answer 122

$ uname -r 4.15.0-47-generic

Question 123

Using your preferred search engine locate and identify public cloud providers available to you. These could include AWS, Google Cloud, Rackspace and many more. Choose one and see which operating systems are available to deploy.

Answer 123

AWS, as an example, allows you to deploy many Linux distributions such as Debian, Red Hat, SUSE or Ubuntu as well as Windows.

Question 124

Use the which command to find out the location of the following programs and complete the table: Program which command Path to Executable (output) User needs root privileges? swapon kill cut usermod cron ps

Answer 124

Program which command Path to Binary (output) User needs root privileges? swapon which swapon /sbin/swapon Yes kill which kill /bin/kill No cut which cut /usr/bin/cut No usermod which usermod /usr/sbin/usermod Yes cron which cron /usr/sbin/cron Yes ps which ps /bin/ps No

Question 125

Where are the following files to be found? File /etc ~ .bashrc bash.bashrc passwd .profile resolv.conf sysctl.conf

Answer 125

File /etc ~ .bashrc No Yes bash.bashrc Yes No passwd Yes No .profile No Yes resolv.conf Yes No sysctl.conf Yes No

Question 126

Explain the meaning of the number elements for kernel file vmlinuz-4.15.0-50-generic found in /boot: Number Element Meaning 4 15 0 50

Answer 126

Number Element Meaning 4 Kernel version 15 Major revision 0 Minor revision 50 Patch number

Question 127

What command would you use to list all hard drives and partitions in /dev?

Answer 127

ls /dev/sd*

Question 128

Device files for hard drives are represented based on the controllers they use — we saw /dev/sd* for drives using SCSI (Small Computer System Interface) and SATA (Serial Advanced Technology Attachment), but

Answer 128

◦ How were old IDE (Integrated Drive Electronics) drives represented? /dev/hd* ◦ And modern NVMe (Non-Volatile Memory Express) drives? /dev/nvme*

Question 129

Take a look at the file /proc/meminfo. Compare the contents of this file to the output of the command free and identify which key from /proc/meminfo correspond to the following fields in the output of free:

Answer 129

Answers to Explorational Exercises 1. Device files for hard drives are represented based on the controllers they use — we saw /dev/sd* for drives using SCSI (Small Computer System Interface) and SATA (Serial Advanced Technology Attachment), but ◦ How were old IDE (Integrated Drive Electronics) drives represented? /dev/hd* ◦ And modern NVMe (Non-Volatile Memory Express) drives? /dev/nvme* 2. Take a look at the file /proc/meminfo. Compare the contents of this file to the output of the command free and identify which key from /proc/meminfo correspond to the following fields in the output of free: free output /proc/meminfo field total MemTotal / SwapTotal free MemFree / SwapFree shared Shmem buff/cache Buffers, Cached and SReclaimable available MemAvailable

Question 130

What command is used to read the following binary logs?

Answer 130

◦ /var/log/wtmp Answer: last ◦ /var/log/btmp Answer: lastb ◦ /run/log/journal/2a7d9730cd3142f4b15e20d6be631836/system.journal Answer: journalctl

Question 131

In combination with grep, what commands would you use to find out the following information about your Linux system?

Answer 131

◦ When the system was last rebooted (wtmp) Answer: last ◦ Which hard disk are installed (kern.log) Answer: less /var/log/kern.log ◦ When the last login occurred (auth.log) Answer: less /var/log/auth.log

Question 132

What two commands would you use to have the kernel ring buffer displayed?

Answer 132

dmesg and journalctl -k (also journalctl --dmesg).

Question 133

Indicate where the following log messages belong: ◦ Jul 10 13:37:39 debian dbus[303]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' /var/log/auth.log /var/log/kern.log /var/log/syslog /var/log/messages

Answer 133

/var/log/syslog

Question 134

Indicate where the following log messages belong: ul 10 11:23:58 debian kernel: [ 1.923349] usbhid: USB HID core driver (2 answers) /var/log/auth.log /var/log/kern.log /var/log/syslog /var/log/messages

Answer 134

/var/log/kern.log /var/log/messages

Question 135

Indicate where the following log messages belong: Jul 10 14:02:53 debian sudo: pam_unix(sudo:session): session opened for user root by carol(uid=0) /var/log/auth.log /var/log/kern.log /var/log/syslog /var/log/messages

Answer 135

/var/log/auth.log X

Question 136

Indicate where the following log messages belong: Jul 10 11:23:58 debian NetworkManager[322]: [1562750638.8672] NetworkManager (version 1.6.2) is starting… /var/log/auth.log /var/log/kern.log /var/log/syslog /var/log/messages

Answer 136

/var/log/messages X

Question 137

Have journalctl query information about the following units Unit ------------------------Command ssh networking- rsyslog cron

Answer 137

Unit ------------------------Command ssh ---------------------journalctl -u ssh.service networking-------------- journalctl -u networking.service rsyslog---------- journalctl -u rsyslog.service cron-------------- journalctl -u cron.service

Question 138

Learn about the command exec in Bash. Try to demonstrate its functionality by starting a Bash session, finding the Bash process with ps, then run exec /bin/sh and search for the process with the same PID again.

Answer 138

exec replaces a process with another command. In the following example we can see that the Bash process is replaced by /bin/sh (instead of /bin/sh becoming a child process): $ echo $$ 19877 $ ps auxf | grep 19877 | head -1 carol 19877 0.0 0.0 7448 3984 pts/25 Ss 21:17 0:00 \_ bash $ exec /bin/sh sh-5.0$ ps auxf | grep 19877 | head -1 carol 19877 0.0 0.0 7448 3896 pts/25 Ss 21:17 0:00 \_ /bin/sh

Question 139

Follow these steps to explore kernel events and udev’s dynamic management of devices:

Answer 139

Hotplug a USB drive into your computer. Run dmesg and pay attention to the last lines. What is the most recent line? You should get something along the lines of [ 1967.700468] sd 6:0:0:0: [sdb] Attached SCSI removable disk. there is more

Question 140

A network engineer is asked to assign two IP addresses to the ens33 interface of a host, one IPv4 address (192.168.10.10/24) and one IPv6 address (2001:0:0:abcd:0:8a2e:0370:7334/64). What commands must they enter to achieve this?

Answer 140

sudo ip addr add 192.168.10.10/24 dev ens33 sudo ip addr add 2001:0:0:abcd:0:8a2e:0370:7334/64 dev ens33

Question 141

which addresses from the list below are private? (3 answers) 192.168.10.1 120.56.78.35 172.16.57.47 10.100.49.162 200.120.42.6

Answer 141

192.168.10.1 X 172.16.57.47 X 10.100.49.162 X

Question 142

What entry would you add into the hosts file to assign 192.168.0.15 to example.com?

Answer 142

192.168.0.15 example.com

Question 143

What effect would the following command have?

Answer 143

sudo ip -6 route add default via 2001:db8:0:abcd::1 It would add a default route into the table that sends all IPv6 traffic to the router with an internal address of 2001:db8:0:abcd::1.

Question 144

Name the DNS record type used to serve the following requests Textual data Reverse IP address lookup A domain that has no address of its own and relies on another domain for this information Mail Server

Answer 144

Textual data TXT ◦ Reverse IP address lookup PTR ◦ A domain that has no address of its own and relies on another domain for this information CNAME ◦ Mail Server MX

Question 145

Linux has a feature called bridging, what does it do and how is it useful?

Answer 145

A bridge connects multiple networking interfaces. All interfaces connected to a bridge can communicate as if they were connected to the same link layer network: All devices use IP addresses from the same subnet and do not require a router in order to connect to each other

Question 146

What option needs to be supplied to the ss command in order to view all established UDP sockets?

Answer 146

The -u option shows all established UDP sockets.

Question 147

Which command shows a summary of all sockets running on a Linux device?

Answer 147

The ss -s command shows a summary of all sockets

Question 148

he following output is generated by the command from the previous exercise. How many TCP and UDP sockets are active?

Answer 148

Total: 978 (kernel 0) TCP: 4 (estab 0, closed 0, orphaned 0, synrecv 0, timewait 0/0), ports 0 Transport Total IP IPv6 * 0 - - RAW 1 0 1 UDP 7 5 2 TCP 4 3 1 INET 12 8 4 FRAG 0 0 0 11 TCP and UDP sockets are active.

Question 149

consider the following output of the id command: $ id emma uid=1000(emma) gid=1000(emma) groups=1000(emma),4(adm),5(tty),10(uucp),20(dialout),27(sudo),46(plugdev) In which files are the following attributes stored? UID and GID Groups

Answer 149

UID and GID /etc/passwd Groups /etc/group Additionally, in which file is the user password stored? The hashed user password is stored in /etc/shadow.

Question 150

Which of the following types of cryptography is used by default to store passwords locally on a Linux system?

Answer 150

By default, a one-way hash is used to store passwords.

Question 151

If an account has a User ID (UID) enumerated under 1000, what type of account is this?

Answer 151

Accounts with a UID lower than 1000 generally are system accounts.

Question 152

How can you get a list of the active logins in your system, and a count of them as well?

Answer 152

Use the w command. Besides a list of all active logins, it will also show information like how many users are logged in, along the system load and uptime

Question 153

Using the grep command, we got the result below with information about the user emma.

Answer 153

$ grep emma /etc/passwd emma:x:1000:1000:Emma Smith,42 Douglas St,555.555.5555,:/home/emma:/bin/ksh

Question 154

Fill in the blanks of the chart with the appropriate information using the output of the previous command. Username emma

Answer 154

Password x - should always be x for a valid, active user login UID 1000 Primary GID 1000 GECOS Emma Smith,42 Douglas St,555.555.5555 Home Directory /home/emma Shell /bin/ksh

Question 155

Compare the results of last to w and who. What details are missing from each of the commands compared to one another?

Answer 155

The w and who tools only list current users logged into the system, whereas last also lists users that have disconnected. The w command lists system utilization, while who does not.

Question 156

Try issuing the commands who and w -his.

Answer 156

What information has been removed from the output of the w command with the “no header” (-h) and “short” (-s) options? The header is not printed, which is useful for parsing, and the login time and select CPU information is not listed, respectively. ◦ What information has been added in the output the w command with the “ip address” (-i) option? This prints the IP address, instead of attempting DNS resolution, printing the hostname. This option to w better matches the default output of the last command.

Question 157

Which file is the file that stores a user account’s one-way password hash?

Answer 157

The file /etc/shadow stores a user account’s one-way password hash, since it is not readable by a regular, unprivileged user account, unlike file /etc/passwd.

Question 158

Which file contains the list of groups a user account is a member of? What logic could be used to compile a list of a groups a user account is a member of?

Answer 158

The file /etc/group has a CSV list of usernames in the last field, “members”, of any line for a group. Any line in the file /etc/group where the user is listed in the final field, “members”, would mean the user is a member of that group — assuming it is correctly formatted (CSV delimited). Additionally, the user’s primary group membership in the /etc/passwd file will also have a matching entry in the /etc/group file for both the group name and GID.

Question 159

One or more (1+) of the following files are not readable by regular, unprivileged users, by default. Which ones? ◦ /etc/group ◦ /etc/passwd /etc/shadow ◦ /etc/sudoers

Answer 159

/etc/shadow /etc/sudoers are not readable by default, except by select services or the superuser.

Question 160

How would you change the current user’s login shell to the Korn Shell (/usr/bin/ksh) in non- interactive mode?

Answer 160

$ chsh -s /usr/bin/ksh

Question 161

Why is the home directory of the root user not placed within /home directory?

Answer 161

the root account is required to troubleshoot and fix errors, This includes: - file system issues related to the /home directory. \\ - Root should be fully functional even when the /home file system is not available yet.

Question 162

Answers to Guided Exercises 1. For each of the following entries, indicate the file to which it refers: ◦ developer:x:1010:frank,grace,dave ◦ root:x:0:0:root:/root:/bin/bash ◦ henry:$1$.AbCdEfGh123456789A1b2C3d4.:18015:20:90:5:30:: ◦ henry:x:1000:1000:User Henry:/home/henry:/bin/bash ◦ staff:!:dave:carol,emma Answers: /etc/shadow /etc/passwd /etc/group

Answer 162

◦ developer:x:1010:frank,grace,dave /etc/group ◦ root:x:0:0:root:/root:/bin/bash /etc/passwd ◦ henry:$1$.AbCdEfGh123456789A1b2C3d4.:18015:20:90:5:30:: /etc/shadow ◦ henry:x:1000:1000:User Henry:/home/henry:/bin/bash /etc/passwd ◦ staff:!:dave:carol,emma /etc/gshadow

Question 163

Observe the following output to answer the next seven questions: # cat /etc/passwd | tail -3 dave:x:1050:1050:User Dave:/home/dave:/bin/bash carol:x:1051:1015:User Carol:/home/carol:/bin/sh henry:x:1052:1005:User Henry:/home/henry:/bin/tcsh # cat /etc/group | tail -3 web_admin:x:1005:frank,emma web_developer:x:1010:grace,kevin,christian dave:x:1050: # cat /etc/shadow | tail -3 dave:$6$AbCdEfGh123456789A1b2C3D4e5F6G7h8i9:0:20:90:7:30:: carol:$6$q1w2e3r4t5y6u7i8AbcDeFgHiLmNoPqRsTu:18015:0:60:7::: henry:!$6$123456789aBcDeFgHa1B2c3d4E5f6g7H8I9:18015:0:20:5::: # cat /etc/gshadow | tail -3 web_admin:!:frank:frank,emma web_developer:!:kevin:grace,kevin,christian dave:!:: ◦ What is the User ID (UID) and Group ID (GID) of carol? ◦ What shell is set for dave and henry? ◦ What is the name of the primary group of henry? ◦ What are the members of the web_developer group? Which of these are group administrators? ◦ Which user cannot log into the system? ◦ Which user should change the password the next time he will log into the system? ◦ How many days must pass before a password change is required for carol?

Answer 163

◦ What is the User ID (UID) and Group ID (GID) of carol? The UID is 1051 and the GID is 1015 (the third and fourth fields in /etc/passwd). ◦ What shell is set for dave and henry? dave uses /bin/bash and henry uses /bin/tcsh (the seventh field in /etc/passwd). ◦ What is the name of the primary group of henry? The group name is web_admin (the first field in /etc/group). ◦ What are the members of the web_developer group? Which of these are group administrators? The members are grace, kevin and christian (the fourth field in /etc/group), but only kevin is the administrator of the group (the third field in /etc/gshadow). ◦ Which user cannot log into the system? The henry user account is locked (it has an exclamation mark in front of the password hashes in /etc/shadow). ◦ Which user should change the password the next time he will log into the system? If the third field (Date of Last Password Change) in /etc/shadow is 0, the user should change his password the next time he will log into the system. Therefore, dave must change his password. ◦ How many days must pass before a password change is required for carol? 60 days (the fifth field in /etc/shadow).

Question 164

Working as root, run the useradd -m dave command to add a new user account. What operations does this command perform? Assume that CREATE_HOME and USERGROUPS_ENAB in /etc/login.defs are set to yes.

Answer 164

The command adds a new user, named dave, to the list of users in the system. The home directory of dave is created (by default /home/dave) and the files and directories contained in the skeleton directory are copied to the home directory. Finally, new group is created with the same name as the user account.

Question 165

Now that you have created the dave account, can this user login to the system?

Answer 165

# cat /etc/shadow | grep dave No, because the dave account is locked (see the exclamation mark in /etc/shadow). dave:!:18015:0:99999:7::: If you set a password for dave, the account will be unlocked. You can do this using the passwd command. passwd dave Changing password for user dave. New UNIX password: Retype new UNIX password: passwd: all authentication tokens updated successfully.

Question 166

# cat /etc/group | grep 1019 identify the User ID (UID) and Group ID (GID) of dave and all members of the dave group. cat /etc/passwd | grep dave dave:x:1015:1019::/home/dave:/bin/sh dave:x:1019:

Answer 166

UID 1015 GID 1019 respectively (the third and fourth fields in /etc/passwd) and the dave group has no members (the fourth field in /etc/group is empty).

Question 167

Create the sys_admin, web_admin and db_admin groups and identify their Group IDs (GIDs).

Answer 167

groupadd sys_admin # groupadd web_admin # groupadd db_admin # cat /etc/group | grep admin sys_admin:x:1020: web_admin:x:1021: db_admin:x:1022: The GIDs for the sys_admin, web_admin and db_admin groups are 1020, 1021 and 1022 respectively.

Question 168

Add a new user account named carol with UID 1035 and set sys_admin as its primary group and web_admin and db_admin as its secondary groups.

Answer 168

useradd -u 1035 -g 1020 -G web_admin,db_admin carol # id carol uid=1035(carol) gid=1020(sys_admin) groups=1020(sys_admin),1021(web_admin),1022(db_admin)

Question 169

Delete the dave and carol user accounts and the sys_admin, web_admin and db_admin groups that you have previously created.

Answer 169

userdel -r dave # userdel -r carol # groupdel sys_admin # groupdel web_admin # groupdel db_admin

Question 170

Run the ls -l /etc/passwd /etc/group /etc/shadow /etc/gshadow command and describe the output that it gives you in terms of file permissions. Which of these four files are shadowed for security reasons? Assume your system uses shadow passwords

Answer 170

ls -l /etc/passwd /etc/group /etc/shadow /etc/gshadow -rw-r--r-- 1 root root 853 mag 1 08:00 /etc/group -rw-r----- 1 root shadow 1203 mag 1 08:00 /etc/gshadow -rw-r--r-- 1 root root 1354 mag 1 08:00 /etc/passwd -rw-r----- 1 root shadow 1563 mag 1 08:00 /etc/shadow The /etc/passwd and /etc/group files are world readable and are shadowed for security reasons. When shadow passwords are used, you can see an x in the second field of these files because the encrypted passwords for users and groups are stored in /etc/shadow and /etc/gshadow, which are readable only by root and, in some systems, also by members belonging to the shadow group

Question 171

Run the ls -l /usr/bin/passwd command. Which special bit is set and what is its meaning?

Answer 171

ls -l /usr/bin/passwd -rwsr-xr-x 1 root root 42096 mag 17 2015 /usr/bin/passwd The passwd command has the SUID bit set (the fourth character of this line), which means that the command is executed with the privileges of the file’s owner (thus root). This is how ordinary users can change their password.

Question 172

Create a directory named emptydir using the command mkdir emptydir. Now, using ls, list the permissions for the directory emptydir. Add the -d parameter to ls to see the file attributes of a directory, instead of listing its contents. Therefore the answer is:

Answer 172

ls -l -d emptydir Bonus points if you merged the two parameters in one, as in ls -ld emptydir.

Question 173

Create an empty file named emptyfile with the command touch emptyfile. Now, using chmod in symbolic notation, add execute permissions for the owner of the file emptyfile, and remove write and execute permissions for everyone else. Do this using only one chmod command. Think about it this way: ◦ “For the user who owns the file (u) add (+) execute (x) permissions”, so u+x. ◦ “For the group (g) and other users (o), remove (-) write (w) and execute (x) permissions”, so go-wx. To combine these two sets of permissions, we add a comma between them. So the final result is:

Answer 173

chmod u+x,go-wx emptyfile

Question 174

What will be the permissions of a file called text.txt after I use the command chmod 754 text.txt?

Answer 174

rwxr-xr-- Remember that in numeric notation each digit represents a set of three permissions, each one with a respective value: read is 4, write is 2, execute is 1 and no permission is 0. We get the value for a digit by adding the corresponding values for each permission. 7 is 4+2+1, or rwx, 5 is 4+0+1, so r-x and 4 is just read, or r--. The permissions for text.txt would be

Question 175

Let’s assume a file named test.sh is a shell script with the following permissions and ownership: -rwxr-sr-x 1 carol root 33 Dec 11 10:36 test.sh ownership: -rwxr-sr-x 1 carol root 33 Dec 11 10:36 test.sh ◦ What are the permissions for the owner of the file? ◦ If the user john runs this script, under which user’s privileges will it be run? ◦ Using the numeric notation, which should be the syntax of chmod to “unset” the special permission granted to this file?

Answer 175

ownership: -rwxr-sr-x 1 carol root 33 Dec 11 10:36 test.sh ◦ What are the permissions for the owner of the file? The permissions for the owner (2nd to 4th characters in the output of ls -l) are rwx, so the answer is: “to read, to write to and to execute the file”. ◦ If the user john runs this script, under which user’s privileges will it be run? Pay attention to the permissions for the group. They are r-s, which means the SGID bit is set. The group who owns this file is root, so the script, even when started by a regular user, will be run with root privileges. ◦ Using the numeric notation, which should be the syntax of chmod to “unset” the special permission granted to this file? We can “unset” the special permissions by passing a 4th digit, 0, to chmod. The current permissions are 755, so the command should be chmod 0755.

Question 176

Consider this file: $ ls -l /dev/sdb1 brw-rw---- 1 root disk 8, 17 Dec 21 18:51 /dev/sdb1 Which kind of file is sdb1? And who can write to it?

Answer 176

Which kind of file is sdb1? And who can write to it? The first character of the output from ls -l shows the kind of file. b is a block device, usually a disk (internal or external), connected to the machine. The owner (root) and any users of the group disk can write to it.

Question 177

Consider the following 4 files: drwxr-xr-t 2 carol carol 4,0K Dec 20 18:46 Another_Directory ----r--r-- 1 carol carol 0 Dec 11 10:55 foo.bar -rw-rw-r-- 1 carol carol 1,2G Dec 20 18:22 HugeFile.zip drwxr-sr-x 2 carol users 4,0K Jan 18 17:26 Sample_Directory Write down the corresponding permissions for each file and directory using 4-digit numeric notation. The corresponding permissions, in numeric notation, are as follows:

Answer 177

The corresponding permissions, in numeric notation, are as follows: Another_Directory Answer: 1755 1 for the sticky bit, 755 for the regular permissions (rwx for the user, r-x for group and others). foo.bar Answer: 0044 No special permissions (so the first digit is 0), no permissions for the user (---) and just read (r—r--) for group and others. HugeFile.zip Answer: 0664 No special permissions, so the first digit is 0. 6 (rw-) for the user and group, 4 (r--) for the others. Sample_Directory Answer: 2755 2 for the SGID bit, 7 (rwx) for the user, 5 (r-x) for the group and others.

Question 178

Try this on a terminal: create an empty file called emptyfile with the command touch emptyfile. Now “zero out” the permissions for the file with chmod 000 emptyfile. What will happen if you change the permissions for emptyfile by passing only one value for chmod in numeric notation, such as chmod 4 emptyfile? What if we use two, such as chmod 44 emptyfile? What can we learn about the way chmod reads the numerical value? Remember that we “zeroed out” the permissions for emptyfile. So, its initial state would be: Now, let’s try the first command, chmod 4 emptyfile: The permissions for others were changed. And what if we try two digits, such as chmod 44 emptyfile?

Answer 178

---------- 1 carol carol 0 Dec 11 10:55 emptyfile $ chmod 4 emptyfile $ ls -l emptyfile -------r-- 1 carol carol 0 Dec 11 10:55 emptyfile $ chmod 44 emptyfile $ ls -l emptyfile ----r--r-- 1 carol carol 0 Dec 11 10:55 emptyfile Now, the permissions for group and others were affected. From this, we can conclude that in numeric notation chmod reads the value “backwards”, from the least significant digit (others) to the most significant one (user). If you pass one digit, you modify the permissions for others. With two digits you modify group and others, and with three you modify user, group and others and with four digits you modify user, group, others and the special permissions.

Question 179

Can you execute a file for which you have execute, but not read permissions (--x)? Why or why not?

Answer 179

At first, the answer seems obvious: If you have execute permission, the file should run. This applies to programs in binary format that are executed directly by the kernel. However, there are programs (e.g. shell scripts) that must first be read and interpreted, so in these cases the read permission (r) must also be set.

Question 180

Consider the permissions for the temporary directory on a Linux system, /tmp ls -l /tmp drwxrwxrwt 19 root root 16K Dec 21 18:58 tmp

Answer 180

User, group and others have full permissions. But can a regular user delete any files inside this directory? Why is this? /tmp is what we call a world writeable directory, meaning that any user can write to it. But we don’t want one user modifying files created by others, so the sticky bit_ is set (as indicated by the t on the permissions for others). This means that a user can delete files in /tmp, but only if they created that file.

Question 181

file called test.sh has the following permissions: -rwsr-xr-x, meaning the SUID bit is set. Now, run the following commands: $ chmod u-x test.sh $ ls -l test.sh -rwSr-xr-x 1 carol carol 33 Dec 11 10:36 test.sh

Answer 181

hat did we do? What does the uppercase S mean? We removed execute permissions for the user who owns the file. The s (or t) takes the place of the x on the output of ls -l, so the system needs a way to show if the user has execute permissions or not. It does this by changing the case of the special character. A lowercase s on the first group of permissions means that the user who owns the file has execute permissions and that the SUID bit is set. An uppercase S means that the user who owns the file lacks (-) execute permissions and that the SUID bit is set. The same can be said for SGID. A lowercase s on the second group of permissions means that the group who owns the file has execute permissions and that the SGID bit is set. An uppercase S means that the group who owns the file lacks (-) execute permissions and that the SGID bit is set. This is also true for the sticky bit, represented by the t in the third group of permissions. Lowercase t means the sticky bit is set and that others have execute permissions. Uppercase T means the sticky bit is set and that others do not have execute permissions.

Question 182

How would you create a directory named Box where all the files are automatically owned by the group users, and can only be deleted by the user who created them? This is a multi-step process. The first step is to create the directory

Answer 182

$ mkdir Box We want every file created inside this directory to be automatically assigned to the group users. We can do this by setting this group as the owner of the directory, and then by setting the SGID bit on it. We also need to make sure that any member of the group can write to that directory. Since we do not care about what the other permissions are, and want to “flip” only the special bits, it makes sense to use the symbolic mode $ chown :users Box/ $ chmod g+wxs Box/ Note that if you current user does not belong to the group users, you will have to use the command sudo before the commands above to do the change as root. Now for the last part, making sure that only the user who created a file is allowed to delete it. This is done by setting the sticky bit (represented by a t) on the directory. Remember that it is set on the permissions for others (o). $ chmod o+t Box/ The permissions on the directory Box should appear as follows: drwxrwsr-t 2 carol users 4,0K Jan 18 19:09 Box Of course, you can specify SGID and the sticky bit using only one chmod command: $ chmod g+wxs,o+t Box/ Bonus points if you thought of that.

Question 183

Imagine a program needs to create a one-use temporary file that will never be needed again after the program is closed. What would be the correct directory in which to create this file?

Answer 183

/tmp

Question 184

Which is the temporary directory that must be cleared during the boot process?

Answer 184

/run or on some systems /var/run.

Question 185

What is the parameter for chmod in symbolic mode to enable the sticky bit on a directory?

Answer 185

The symbol for the sticky bit in symbolic mode is t. Since we want to enable (add) this permission to the directory, the parameter should be +t

Question 186

Imagine there is a file named document.txt on the directory /home/carol/Documents. What is the command to create a symbolic link to it named text.txt in the current directory? ln -s is the command to create a symbolic link. Since you should specify the full path to the file you are linking to, the command is:

Answer 186

$ ln -s /home/carol/Documents/document.txt text.txt

Question 187

Explain the difference between a hard link to a file and a copy of this file.

Answer 187

A hard link is just another name for a file. Even though it looks like a duplicate of the original file, for all purposes both the link and the original are the same, as they point to the same data on disk. Changes made to the contents of the link will be reflected on the original, and vice- versa. A copy is a completely independent entity, occupying a different place on disk. Changes to the copy will not be reflected on the original, and vice-versa.

Question 188

imagine that inside a directory you create a file called recipes.txt. Inside this directory, you will also create a hard link to this file, called receitas.txt, and a symbolic (or soft) link to this called rezepte.txt.

Answer 188

$ touch recipes.txt $ ln recipes.txt receitas.txt $ ln -s receitas.txt rezepte.txt The contents of the directory should be like so: $ ls -lhi total 160K 5388833 -rw-r--r-- 4 carol carol 77K jun 17 17:25 receitas.txt 5388833 -rw-r--r-- 4 carol carol 77K jun 17 17:25 recipes.txt 5388837 lrwxrwxrwx 1 carol carol 12 jun 24 10:12 rezepte.txt -> receitas.txt Remember that, as a hard link, receitas.txt points to the same inode that recipes.txt. What would happen to the soft link rezepte.txt if the name receitas.txt is deleted? Why? The soft link rezepte.txt would stop working. This is because soft links point to names, not inodes, and the name receitas.txt no longer exists, even if the data is still on the disk under the name recipes.txt.

Question 189

Imagine you have a flash drive plugged into your system, and mounted on /media/youruser/FlashA. You want to create in your home directory a link called schematics.pdf, pointing to the file esquema.pdf in the root directory of the flash drive. So, you type the command: $ ln /media/youruser/FlashA/esquema.pdf ~/schematics.pdf What would happen? Why?

Answer 189

The command would fail. The error message would be Invalid cross-device link, and it makes the reason clear: hard links cannot point to a target in a different partition or device. The only way to create a link like this is to use a symbolic or soft link, adding the -s parameter to ln.

Question 190

Consider the following output of ls -lah: $ ls -lah total 3,1M drwxr-xr-x 2 carol carol 4,0K jun 17 17:27 . drwxr-xr-x 5 carol carol 4,0K jun 17 17:29 .. -rw-rw-r-- 1 carol carol 2,8M jun 17 15:45 compressed.zip -rw-r--r-- 4 carol carol 77K jun 17 17:25 document.txt -rw-rw-r-- 1 carol carol 216K jun 17 17:25 image.png -rw-r--r-- 4 carol carol 77K jun 17 17:25 text.txt ◦ How many links point to the file document.txt? ◦ Are they soft or hard links? ◦ Which parameter should you pass to ls to see which inode each file occupies?

Answer 190

◦ How many links point to the file document.txt? Every file starts with a link count of 1. Since the link count for the file is 4, there are three links pointing to that file. ◦ Are they soft or hard links? They are hard links, since soft links do not increase the link count of a file. ◦ Which parameter should you pass to ls to see which inode each file occupies? The parameter is -i. The inode will be shown as the first column in the output of ls, like below: $ ls -lahi total 3,1M 5388773 drwxr-xr-x 2 rigues rigues 4,0K jun 17 17:27 . 5245554 drwxr-xr-x 5 rigues rigues 4,0K jun 17 17:29 .. 5388840 -rw-rw-r-- 1 rigues rigues 2,8M jun 17 15:45 compressed.zip 5388833 -rw-r--r-- 4 rigues rigues 77K jun 17 17:25 document.txt 5388837 -rw-rw-r-- 1 rigues rigues 216K jun 17 17:25 image.png 5388833 -rw-r--r-- 4 rigues rigues 77K jun 17 17:25 text.txt

Question 191

Imagine you have in your ~/Documents directory a file named clients.txt containing some client names, and a directory named somedir. Inside this there is a different file also named clients.txt with different names. To replicate this structure, use the following commands. $ cd ~/Documents $ echo "John, Michael, Bob" > clients.txt $ mkdir somedir $ echo "Bill, Luke, Karl" > somedir/clients.txt You then create a link inside somedir named partners.txt pointing to this file, with the commands: $ cd somedir/ $ ln -s clients.txt partners.txt So, the directory structure is: Documents |-- clients.txt `-- somedir |-- clients.txt `-- partners.txt -> clients.txt Now, you move partners.txt from somedir to ~/Documents, and list its contents. $ cd ~/Documents/ $ mv somedir/partners.txt . $ less partners.txt Will the link still work? If so, which file will have its contents listed? Why?

Answer 191

This is a “tricky” one, but the link will work, and the file listed will be the one in ~/Documents, containing the names John, Michael, Bob. Remember that since you did not specify the full path to the target clients.txt when creating the soft link partners.txt, the target location will be interpreted as being relative to the location of the link, which in this case is the current directory. When the link was moved from ~/Documents/somedir to ~/Documents, it should stop working, since the target was no longer in the same directory as the link. However, it just so happens that there is a file named clients.txt on ~/Documents, so the link will point to this file, instead of the original target inside ~/somedir. To avoid this, always specify the full path to the target when creating a symbolic link.

Question 192

Consider the following files: -rw-r--r-- 1 rigues rigues 19 Jun 24 11:12 clients.txt lrwxrwxrwx 1 rigues rigues 11 Jun 24 11:13 partners.txt -> clients.txt what are the access permissions for partners.txt? Why?

Answer 192

The access permissions for partners.txt are rw-r—r--, as links always inherit the same access permissions as the target.