While preparing for an external audit, you inspect the directory /srv/docs with getfacl and notice several default: ACL entries that cause newly-created files to inherit permissions. The updated security policy states that no default ACL may exist on that directory, but the current access ACL (owner, group, others, and any named user/group entries) must be preserved. Which single command satisfies the requirement?
The -k (or --remove-default) option removes the entire Default ACL from a directory without touching its access ACL entries. Therefore setfacl -k /srv/docs deletes every default: entry while leaving the existing owner, group, others, mask, and any named user or group access entries intact.
setfacl -b /srv/docs removes all extended ACL entries for the access ACL (including any named users/groups and the mask) but does not delete the Default ACL, so it violates the requirement to keep access ACLs intact.
setfacl -x d:g:docs /srv/docs removes only the specified default group entry, leaving other default entries in place.
setfacl -m d:o::--- /srv/docs merely changes the permissions on the default others entry; it does not eliminate the Default ACL.
Thus only the -k option achieves the stated goal.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between an Access ACL and a Default ACL?
Open an interactive chat with Bash
How does `setfacl -k` differ from `setfacl -b`?
Open an interactive chat with Bash
What happens if I use `setfacl -x d:g:docs`? Why doesn’t it meet the requirement?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .