Posts

Showing posts from August, 2024

Linux and SQL -2

  The principle of least privilege in action As a security analyst, you may encounter a situation like this one: There’s a file called bonuses.txt within a compensation directory. The owner of this file is a member of the Human Resources department with a username of hrrep1 . It has been decided that hrrep1 needs access to this file. But, since this file contains confidential information, no one else in the hr group needs access. You run ls -l to check the permissions of files in the compensation directory and discover that the permissions for bonuses.txt are -rw-rw---- . The group owner type has read and write permissions that do not align with the principle of least privilege.   To remedy the situation, you input chmod g-rw bonuses.txt . Now, only the user who needs to access this file to carry out their job responsibilities can access this file. examples to check permissions- https://docs.google.com/document/d/1jl9kN7WbrdRwgJw7urDYLPE_JenWoP7MRY1N0GgpG48/template/...