Please enable JavaScript.

Coggle requires JavaScript to display documents.

files permissions - Coggle Diagram

- - - - icacls ~\Desktop
        
        show icacls to desktop
        
        F - full control acces
        
        OI - objet inharit
        
        CI - contait inherit
        
        R read only acces
      - icacls /? - to see whats icacls permssions: (OI) (CI) (F) etc...
      - powershell icacls 'c:\Vacations pictures\' /grant 'Everyone:(CI) (OI) (R)'
      - cmd: icacls "c:\Vacations pictures\" /grant Everyone:(CI) (OI) (R)'
        
        a diferença é que tesm aspas no caminho em cmd e nao tem em no flag
        
        no powershell é diferente
      - icacls 'c:\Vacations pictures\'
        
        show permissions in vacation pictures dir
      - icacls 'c:\Vacations pictures\' /grant 'Everyone:(CI) (OI) (R)'
      - icacls 'c:\Vacations pictures\' /grant 'authenticated users:(CI) (OI) (R)'
        
        para empedir que todo mundo veja, apenas autorizados com senha
      - icacls 'c:\Vacations pictures\' /remove Everyone
        
        removes permission to group evryone
    - - WD - creat files/write data
      - AD - creat folder/append data
      - S - synchronize
      - ex:
        
        icacls c:\windows\temp
        
        to show
        
        mkdir c:\windows\temp\example
        
        icacls c:\windows\temp\example >> icacls.txt
        
        cat .\icacls.txt
- - - - d - directory, r-read, w-write, x-execute
  - - - "u" owner
      - "g" group
      - "o"others
      - para adicionar ou remover permissioes, basta colocar o sinal de + ou - para o grupo afetado :warning:
        
        ex: ls -l my_cool_file.txt
        
        chmod u+x my_cool_file.txt
        
        allow execute for owner
        
        chmod u-x my_cool_file.txt
        
        dont allow for owner
        
        multiples premissions
        
        chmod u+rx my_cool_file.txt
        
        we can do the same fo multiples permissions set
        
        chmod ugo+r my_cool_file.txt
      - numerical equivalents
        
        1 = execute
        
        4 = read
        
        2 = write
        
        ex: chmod 754 my_cool_file.txt
        
        7 for owner, 5 for the group and 4 for the others
        
        7 = 4+2+1 : rwx
        
        5 = 4+1 : rx
        
        4 = 4 : r
        
        to change owner or goup for file :warning:
        
        chown
        
        change owner - sudo chown devan my_cool_file.txt
        
        chgrp
        
        change group - sudo chgrp bes_group_ever my_cool_file.txt
  - - - set group id
        
        sudo chmod g+s my_cool_file.txt
        
        or on numerical: sudo chmod 2755 my_cool_file.txt
      - setgid = g our 2
    - - ex: passwd pertence a root entao para mudalo nao precisamos necessariament dar acesso a root
        
        ls -l /etc/shadow
        
        shadow pertence a root
      - setUID = "s" ou 4 nas permissoes
        
        it allows us to run the file with the permissions of the owner of the file. :warning:
        
        to set enable the bit to setUID
        
        sudo chmod u+s my_cool_file.txt
        
        or on numerical: sudo chmod 4755 my_cool_file.txt
      - set user id
    - - It makes it so anyone can write to a file or folder,
        but they can't actually delete anything.
        
        Only the owner of root can delete anything :warning:
      - sticky bit = t or 1
        
        sudo chmod +t my_folder
        
        or on numerical: sudo chmod +1755 my_folder