LPIC-3 Exam 303 (Security) — Question 10

Which command revokes ACL-based write access for groups and named users on the file afile?

Answer options

• A. setfacl –x group: * : rx, user:*: rx afile
• B. setfacl –x mask: : rx afile
• C. setfacl ~m mask: : rx afile
• D. setfacl ~m group: * : rx, user :*: rx afile

Correct answer: C

Explanation

The correct command is C, as it properly modifies the mask to revoke write access. Option A incorrectly attempts to remove specific group and user permissions but does not address write access. Option B only affects the mask without specifying the groups or users, and option D attempts to modify permissions instead of removing them.