Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Need to document user rights on an existing Linux system.

What commands, actions, etc. will allow me to gather complete user profiles?

User rights include, but are not limited to:

    File/Directory: Read, Write, Execute, and Delete
    Access: Root, su, sudo
    Groups/Roles: wheel
    Connections: Local, Remote

User types include, but are not limited to: Anonymous, Authenticated, System

____

UPDATE (1):

    System_Output based on right: Permission denied
    Commands: getent group, getfacl, visudo /etc/sudoers
    Keywords_to_add_to_Searches: "man page", apropos
    Keywords: Access Control List (ACL)

UPDATE (2):

    As root, how would I document user rights. Example: [cd /home] [ls] [getfacl _user_01_to_n_] [visudo /etc/sudoers] ... etc.

UPDATE (3):

share|improve this question
    
Sounds like homework to me? –  BloodPhilia Oct 10 '10 at 13:20
    
@BloodPhilia -- No, it's not hw. It's a real self-assigned project task to attempt to make managing an existing system possible. And the question was written from scratch based on my limited understand of how Linux controls user rights. –  blunders Oct 10 '10 at 13:24
    
Okay! Just looked like it then =) –  BloodPhilia Oct 10 '10 at 13:43
    
@BloodPhilia - np, took it as a compliment. –  blunders Oct 10 '10 at 13:47
add comment

1 Answer

up vote 2 down vote accepted

Look at getfacl(1) man page. It's part of acl package. Prints file access control lists. On filesystems without ACLs it lists traditional unix permissions.

Edit

Look at various options of getfacl for instance, to document permissions of user joe you could say:

getfacl -R -p /home/joe > joe_permissions.txt

(output of getfacl will be redirected to a joe_permissions.txt file)

share|improve this answer
    
A little explanation as to what is does would be proper. Just a reference is not answering a question... –  BloodPhilia Oct 10 '10 at 13:50
    
man and apropos will tell you. :) . –  Casual Coder Oct 10 '10 at 13:54
    
@Casual_Coder - Thanks, getfacl is a on topic command, and also lead to me finding the keyword "Access Control List (ACL)" –  blunders Oct 10 '10 at 14:07
    
@Casual_Coder - Thanks, the additional info, here's the best round up on Linux ACL I've found: suse.de/~agruen/acl/linux-acls/online –  blunders Oct 10 '10 at 15:17
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.