Need to document user rights on an existing Linux system.

What commands, actions, etc. will allow me to gather complete user profiles?

User rights include, but are not limited to:

    File/Directory: Read, Write, Execute, and Delete
    Access: Root, su, sudo
    Groups/Roles: wheel
    Connections: Local, Remote

User types include, but are not limited to: Anonymous, Authenticated, System



    System_Output based on right: Permission denied
    Commands: getent group, getfacl, visudo /etc/sudoers
    Keywords_to_add_to_Searches: "man page", apropos
    Keywords: Access Control List (ACL)


    As root, how would I document user rights. Example: [cd /home] [ls] [getfacl _user_01_to_n_] [visudo /etc/sudoers] ... etc.


  • Sounds like homework to me? – BloodPhilia Oct 10 '10 at 13:20
  • @BloodPhilia -- No, it's not hw. It's a real self-assigned project task to attempt to make managing an existing system possible. And the question was written from scratch based on my limited understand of how Linux controls user rights. – blunders Oct 10 '10 at 13:24
  • Okay! Just looked like it then =) – BloodPhilia Oct 10 '10 at 13:43
  • @BloodPhilia - np, took it as a compliment. – blunders Oct 10 '10 at 13:47

Look at getfacl(1) man page. It's part of acl package. Prints file access control lists. On filesystems without ACLs it lists traditional unix permissions.


Look at various options of getfacl for instance, to document permissions of user joe you could say:

getfacl -R -p /home/joe > joe_permissions.txt

(output of getfacl will be redirected to a joe_permissions.txt file)

  • A little explanation as to what is does would be proper. Just a reference is not answering a question... – BloodPhilia Oct 10 '10 at 13:50
  • man and apropos will tell you. :) . – Casual Coder Oct 10 '10 at 13:54
  • @Casual_Coder - Thanks, getfacl is a on topic command, and also lead to me finding the keyword "Access Control List (ACL)" – blunders Oct 10 '10 at 14:07
  • @Casual_Coder - Thanks, the additional info, here's the best round up on Linux ACL I've found: suse.de/~agruen/acl/linux-acls/online – blunders Oct 10 '10 at 15:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.