RHCSA-User-Permission-Management

RHCSA lab project demonstrating Linux user management, groups, permissions, ACLs, sudo (wheel group), password aging, and umask using AlmaLinux.

Lab Environment

Component	Details
OS	AlmaLinux / RHEL
Shell	Bash
Users	bibin, reuben
Directory	/projects

---

Project Objectives

• Create and manage users
• Create and manage groups
• Configure shared directories
• Manage Linux permissions
• Configure special permissions (SGID)
• Configure ACL
• Configure password aging
• Configure sudo using wheel group
• Configure default file permissions using umask

---

Step 1 — Create Users

Create two users.

useradd bibin
useradd reuben

Set passwords.

passwd bibin
passwd reuben

Verify users.

id bibin
id reuben

Screenshot:

---

Step 2 — Create Group

Create a group called developers.

groupadd developers

Verify group.

getent group developers

Screenshot:

---

Step 3 — Add Users to Group

Add users to developers group.

usermod -aG developers bibin
usermod -aG developers reuben

Verify membership.

id bibin
id reuben

Screenshot:

---

Step 4 — Create Shared Directory

Create a shared directory.

mkdir /projects

Change group ownership.

chown :developers /projects

Set permissions.

chmod 770 /projects

Verify.

ls -ld /projects

Screenshot:

---

Step 5 — Enable SGID

Enable SGID so files inherit group ownership.

chmod g+s /projects

Verify.

ls -ld /projects

Expected output example:

drwxrws---

Screenshot:

---

Step 6 — Test File Creation

Switch to user bibin.

su - bibin

Create a file.

touch /projects/project1.txt

Verify.

ls -l /projects

Screenshot:

---

Step 7 — Configure ACL

Switch to root and create a file.

touch /projects/design.txt

Give reuben read permission.

setfacl -m u:reuben:r /projects/design.txt

Verify ACL.

getfacl /projects/design.txt

Screenshot:

---

Step 8 — Configure Password Aging

Check current password policy.

chage -l reuben

Set password aging.

chage -m 5 -M 90 -W 7 reuben

Verify again.

chage -l reuben

Screenshot:

---

Step 9 — Configure Sudo Using Wheel Group

Edit sudo configuration.

visudo

Ensure this line is enabled:

%wheel ALL=(ALL) ALL

Add user bibin to wheel group.

usermod -aG wheel bibin

Verify.

id bibin

Screenshot:

---

Step 10 — Verify Sudo Access

Switch to user.

su - bibin

Become root using sudo.

sudo -i

Verify.

whoami

Expected output:

root

Step 11 — Configure umask

Check current umask.

umask

Set a new mask.

umask 027

Create test file.

touch umask_test.txt
ls -l umask_test.txt

Screenshot:

---

Useful Commands Used

useradd
usermod
groupadd
chmod
chown
setfacl
getfacl
chage
visudo
umask

Conclusion

This lab demonstrates core Linux system administration tasks related to user and permission management. By completing this project on AlmaLinux, I gained practical experience with user accounts, groups, file permissions, ACLs, password policies, and sudo configuration—key skills required for the RHCSA certification and real-world Linux administration.

---