Managing Permissions and ACLs in SUSE Linux Enterprise

1. Verify the issue as the cloud_user:

   cd /shareddata
   touch examplefile
   

2. Switch to the devuser:

   su devuser (password is P@ssw0rd)
   rm ./examplefile
   
   exit
   

3. As the cloud_user, check the permissions on the /shareddata folder:

   ls -l /
   

   Output: d---rws--- root collab shareddata

   Note that on the shareddata directory, there is no sticky bit set, but the GID is set 'denoted by the s'.

4. Set the sticky bit as cloud_user:

   sudo -i chmod 3070 /shareddata
   

5. Repeat the file create as cloud_user and then try to remove the file as devuser to verify it is working as intended.

1. Verify the issue as the cloud_user:

   cd ~/
   su testuser
   echo 'testing' >> file
   exit
   

2. Check the ACL on the file:

   getfacl file
   

Note the mask and the effective permissions.

1. Correct the mask as the cloud_user:

   setfacl -m m::rwx file
   

2. Verify the issue has been corrected:

   su testuser
   echo 'testing' >> file
   cat file
   exit