Franske ITC-2480 Lab 3: Difference between revisions

From ITCwiki
Jump to navigation Jump to search
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
=Introduction=
=Introduction=
In this lab you will create a new user account, change the ownership and permissions on files and directories, and install the Webmin package.
This lab assumes that you know the IP address of your Linux system and are connected to the ITCnet VPN network. If you need help with these steps please see [[ITC_VPN_Instructions | the VPN instructions]] and [[Franske_ITC-2480_Lab_1#Installing_sudo_and_checking_your_IP_address | Lab 1]].


=Lab Procedure=
In this lab you will perform the following tasks:
*Create a new user account
*Change the ownership and permissions on files and directories
*Install the '''[https://www.webmin.com/ Webmin]''' package.
You will be introduced to the following commands:
*'''[https://www.commandlinux.com/man-page/man8/addgroup.8.html addgroup]'''
*'''[https://linux.die.net/man/1/cat cat]'''
*'''[https://linux.die.net/man/1/more more]'''
*'''[https://linux.die.net/man/1/touch touch]'''
*'''[https://linux.die.net/man/1/chown chown]'''
*'''[https://linux.die.net/man/1/chgrp chgrp]'''
*'''[https://linux.die.net/man/1/dpkg dpkg]'''
 
= Lab Procedure =
== Prerequisites ==
== Prerequisites ==
# Make sure you have an active connection to the ITCnet either by VPN or by directly connectiong to an ITCnet switch on campus
<ol>
# Open an SSH console to your Linux system using the PuTTY software, login with your standard user account
<li> Make sure you have an active connection to the ITCnet either by VPN or by directly connectiong to an ITCnet switch on campus</li>
<li> Open an SSH console to your Linux system using the PuTTY software, login with your standard user account</li>
</ol>
 
== Creating Users and Groups ==
'''''[https://www.youtube.com/watch?v=q_tYhIVlhCU&feature=youtu.be Video Tutorial - Creating Users and Groups]''''' <br>
<ol>
<li> Create a new user account '''jsmith''' using the '''adduser''' program</li>
<code> adduser jsmith </code>
<li> Create a new group '''redteam''' using the '''addgroup''' program</li>
<code> addgroup redteam </code>
<li> Add the '''jsmith''' account as well as your own user account to the '''redteam''' group</li>
<li> Close your SSH session and open two new SSH sessions</li>
: ''NOTE: In order for your user accounts to receive their new group permissions they need to be logged out and logged back in.''
<li> Login as your regular user on one and '''jsmith''' on the other</li>
<li> View a list of all the user accounts on your system by looking at the '''/etc/passwd'''. To output the contents of the '''/etc/passwd''' file you can use the following command:</li>
<code>cat /etc/passwd</code>
: The /etc/passwd file is a plain text file on your system.
<li> View a list of the password data on your system by viewing the '''/etc/shadow''' file</li>
<li> View a list of groups and group members on your system in the '''/etc/group''' file
: ''NOTE: The group list may be longer than one full screen of text (the same is true of the '''/etc/passwd''' or '''/etc/shadow''' file depending on your screen resolution.''
* To output the contents of the file while pausing after each page of output use the following command:
: <code>more /etc/group</code>
* To output the contents of the file while pausing after each page of output and being able to scroll up and down through the output use the following command:
: <code>less /etc/group</code>
* Press '''q''' to return to the command line
* It may be helpful to try these commands to display an even longer text file like one of the Shakespeare texts you downloaded in an earlier lab in the '''~/sample-files''' directory. You may have to un-tar the files again first.</li>
</ol>
</ol>
 
== Practice Filesystem Permissions and Ownership ==
'''''[https://www.youtube.com/watch?v=5-6dRHTbJfM&feature=youtu.be Video Tutorial - Practice Filesystem Permissions and Ownership]''''' <br>
''NOTE: Working with file and directory ownership and permissions is tricky and there are many, many possible combinations of users, groups, and permissions which can be assigned to both files and folders. The goal of this section of the lab is to familiarize you with how to use the commands for changing ownership and permissions, not to teach you how to read or understand Linux file permissions (see your readings for this, it is important!) Once you understand how to use the commands you should experiment with setting different owners and permissions on a several different files and folders and subfolders until you have a good understanding of how permissions work. The only way to understand these relationships well is to read about it and then try it out. You should be able to set all of these permissions just as regular users (assuming you have access to both of the user accounts) '''you should not need sudo access to change the permissions because one of the the two users owns all the files and directories we're working in. You will need sudo access to change the owner of the files because otherwise it would be possible to accidentally lock yourself out of a file.'''''
 
''ADDITIONALLY: This table may be helpful:''
: {| class="wikitable"
|+Linux Permissions
!|Octal
!|Binary
!|File Mode
|-
| 0
| 000
| ---
|-
| 1
| 001
| --x
|-
| 2
| 010
| -w-
|-
| 3
| 011
| -wx
|-
| 4
| 100
| r--
|-
| 5
| 101
| r-x
|-
| 6
| 110
| rw-
|-
| 7
| 111
| rwx
|}
''This '''[http://permissions-calculator.org/ permissions calculator]''' may also be helpful.''
<ol>
<li> Change to the '''/home''' directory.</li>
<li> Check the ownership and permissions on the subdirectories inside of '''/home'''</li>
<li> Try to create new files using the '''touch''' command called '''foo''' and '''foo2''' in the '''/home/jsmith''' directory.
*Try as both your regular user and as '''jsmith''' respectively
: <code>touch foo</code>
: <code>touch foo2</code></li>
<li> Try removing the '''foo''' and/or '''foo2''' files using both your regular user account and '''jsmith'''</li>
<li> Use the '''jsmith''' user to create a new directory '''/home/jsmith/redteam/'''</li>
<li> Use the '''jsmith''' user to create some files: '''/home/jsmith/redteam/theplan''' and '''/home/jsmith/redteam/yours''' '''/home/jsmith/redteam/mine''' and '''/home/jsmith/ours'''</li>
<li> In order to find out more about the '''chown''' and '''chgrp''' programs which you'll use to change the owners and groups for files and directories use the following commands to view the built in manual pages:
: <code>man chown</code>
: <code>man chgrp</code>
: ''NOTE: Almost every command line tool in Linux has a manual page you can view in this way, try accessing a few other man pages for some of the other tools we've been using. You can scroll through the manual pages using the arrow keys and page up/down. To return to the command line press the q key.''</li>
<li> Change the permissions on the '''/home/jsmith/redteam/''' directory so that the group '''redteam''' is the group owner of the directory</li>
: [[File:Change-ownership-directory.png | link=https://wiki.ihitc.net/mediawiki/images/6/61/Change-ownership-directory.png | 500px]]
: [[media:Change-ownership-directory.png | Click for Larger Image]]
<li> Add write permission for the group to the '''/home/jsmith/redteam/''' directory</li>
<li> Change the ownership of the '''yours''' file so that it is owned by your regular user account instead of '''jsmith'''</li>
<li> Change the group owner of the '''ours''' file so that it is controlled by the '''redteam''' group</li>
<li> Experiment with creating and removing files and subdirectories inside of the '''/home/jsmith/redteam/''' directory as well as listing the contents of directories with various permissions applied to them until you have a good understanding of how permissions work.</li>
</ol>


== Create Linux users and groups ==
== Install the Webmin Control Panel ==
# Create a new user account ''jsmith'' using the '''adduser''' program
'''''[https://www.youtube.com/watch?v=tfthl4jH-jg&feature=youtu.be Video Tutorial - Install the Webmin Control Panel]''''' <br>
# Create a new group ''redteam'' using the '''addgroup''' program
<ol>
# Add the ''jsmith'' account as well as your own user account to the ''redteam'' group
<li> Use the '''links''' browser to download the '''DEB''' package file from '''[https://www.webmin.com www.webmin.com]'''</li>
# In order for your user accounts to receive their new group permissions they need to be logged back in so close your SSH session and open two new SSH sessions, login as your regular user on one and ''jsmith'' on the other
: ''NOTE: Because this DEB file was downloaded directly instead of automatically by APT from a package repository the installation command is slightly different and some other commands such as '''apt show''' will not work.''
# View a list of all the user accounts on your system by looking at the ''/etc/passwd'' file which is a plain text file on your system. To output the contents of the ''/etc/passwd'' file you can use the '''cat /etc/passwd''' command
<li>Install the package with '''apt install'''
# View a list of the password data on your system by viewing the ''/etc/shadow'' file
<code>apt install ./<filename.deb></code>
# View a list of groups and group members on your system in the ''/etc/group'' file
: Don't forget that installation of software must be done with system administrator permissions.''</li>
#* NOTE: The group list may be longer than one full screen of text (the same is true of the ''/etc/passwd'' or ''/etc/shadow'' file depending on your screen resolution.
:[[File:Apt-install-webmin.png | link= https://wiki.ihitc.net/mediawiki/images/f/f8/Apt-install-webmin.png | 500px]]
#*# To output the contents of the file while pausing after each page of output use the '''more /etc/group''' command
:[[Media:Apt-install-webmin.png | Click for Larger Image]]
#*# To output the contents of the file while pausing after each page of output and being able to scroll up and down through the output use the '''less /etc/group''' command and press q to return to the command line
: ''NOTE: You can get similar information to what you can get with '''apt show''' from a '''DEB''' package file using the following command:''
#*# It may be helpful to try these commands to display an even longer text file like one of the Shakespeare texts you downloaded in an earlier lab in the ''~/sample-files'' directory. You may have to un-tar the files again first.
: <code>dpkg -I <filename></code>
<li> Notice the additional packages which are required by Webmin (dependencies) which will be downloaded and installed by '''apt''' from a repository in order to complete the installation.</li>
<li> Open a web browser on your host system and visit https://xxx.xxx.xxx.xxx:10000 where your IP replaces xxx.xxx.xxx.xxx</li>
: ''NOTE: You will receive a certificate error when you connect to this site because the default Webmin SSL certificate is self-signed. Some browsers will allow you to bypass this error and connect to the untrusted site anyway. Some browsers, in particular Chrome, may not allow the connection. In that case you will need to use a different browser which allows you to bypass the insecure certificate warning or update the Webmin SSL certificate. In most cases it will be easier for our lab purposes to just use a different browser.''
<li> Login using your Debian username and password </li>
<li> Explore the Webmin interface
:[[file:Webmin-dashboard.png | link= https://wiki.ihitc.net/mediawiki/images/0/0f/Webmin-dashboard.png | 500px]]
:[[media:Webmin-dashboard.png | Click for Larger Image]]</li>
</ol>


== Practice Linux filesystem permissions and ownership ==
= Checking Your Work =
* NOTE: Working with file and directory ownership and permissions is tricky and there are many, many possible combinations of users, groups, and permissions which can be assigned to both files and folders. The goal of this section of the lab is to familiarize you with how to use the commands for changing ownership and permissions, not to teach you how to read or understand Linux file permissions (see your readings for this, it is important!) Once you understand how to use the commands you should experiment with setting different owners and permissions on a several different files and folders and subfolders until you have a good understanding of how permissions work. The only way to understand these relationships well is to read about it and then try it out. You should be able to set all of these permissions just as regular users (assuming you have access to both of the user accounts) ''you should not need sudo access to change the permissions because one of the the two users owns all the files and directories we're working in. You will need sudo access to change the owner of the files because otherwise it would be possible to accidentally lock yourself out of a file.''
<ol>
# Change to the ''/home'' directory and check the ownership and permissions on the subdirectories inside of ''/home''
<li> Run the following command:
# Try to create new files using the '''touch''' command called ''foo'' and ''foo2'' in the ''/home/jsmith'' directory as both your regular user and as ''jsmith'' respectively
<br>
# Try removing the ''foo'' and/or ''foo2'' files using both your regular user account and ''jsmith''
<code> ls -al /home/jsmith/redteam </code>
# Use the ''jsmith'' user to create a new directory ''/home/jsmith/redteam/''
* Verify the following directories are present:
# Use the ''jsmith'' user to create some files: ''/home/jsmith/redteam/theplan'' and ''/home/jsmith/redteam/yours'' ''/home/jsmith/redteam/mine'' and ''/home/jsmith/ours''
*: '''/theplan'''
# In order to find out more about the chown and chgrp programs which you'll use to change the owners and groups for files and directories use the '''man chown''' and '''man chgrp''' commands to view the built in manual pages. Almost every command line tool in Linux has a manual page you can view in this way, try accessing a few other man pages for some of the other tools we've been using. You can scroll through the manual pages using the arrow keys and page up/down. To return to the command line press the q key.
*: '''/yours'''
# Change the permissions on the ''/home/jsmith/redteam/'' directory so that the group ''redteam'' is the group owner of the directory
*: '''/mine'''
# Add write permission for the group to the ''/home/jsmith/redteam/'' directory
*: '''/ours'''</li>
# Change the ownership of the yours file so that it is owned by your regular user account instead of ''jsmith''
* Verify the '''redteam''' group owns the '''/ours''' directory.
# Change the group owner of the ours file so that it is controlled by the ''redteam'' group
<li>Run the following command:
# Experiment with creating and removing files and subdirectories inside of the ''/home/jsmith/redteam/'' directory as well as listing the contents of directories with various permissions applied to them until you have a good understanding of how permissions work.
<br>
<code> ls -al /home/jsmith </code>
* Verify the '''redteam''' group owns and has write permissions of the '''/redteam''' directory.</li>
<br><br>
<li> Automatically check your results by running this command:</li>


== Install the Webmin control panel ==
<code><nowiki>
# Use the links browser to download the DEB package file from www.webmin.com
curl https://raw.githubusercontent.com/mnjk-inver/Linux-2480-Rebuild/main/lab_03_test.py | python3
# Because this DEB file was downloaded directly instead of automatically by APT from a package repository the installation command is slightly different and some other commands such as '''apt show''' will not work. Install the package with '''apt install ./''<filename.deb>''''' Don't forget that installation of software must be done with system administrator permissions.
</nowiki></code></ol>
#* NOTE: You can get similar information to what you can get with '''apt show''' from a DEB package file using '''dpkg -I ''<filename>'''''
<br><br>
# Notice the additional packages which are required by Webmin (dependencies) which will be downloaded and installed by APT from a repository in order to complete the installation.
=Web App=
# Open a web browser on your host system and visit https://xxx.xxx.xxx.xxx:10000 where your IP replaces xxx.xxx.xxx.xxx
You can check your progress on any of the labs in the ITC-2480 course from a webapp from this link:  <br>
# Explore the webmin interface
[http://webcheck.itc2480.campus.ihitc.net webcheck.itc2480.campus.ihitc.net]<br>
You must be logged into the campus VPN to use this application.

Latest revision as of 19:50, 29 September 2021

Introduction

This lab assumes that you know the IP address of your Linux system and are connected to the ITCnet VPN network. If you need help with these steps please see the VPN instructions and Lab 1.

In this lab you will perform the following tasks:

  • Create a new user account
  • Change the ownership and permissions on files and directories
  • Install the Webmin package.

You will be introduced to the following commands:

Lab Procedure

Prerequisites

  1. Make sure you have an active connection to the ITCnet either by VPN or by directly connectiong to an ITCnet switch on campus
  2. Open an SSH console to your Linux system using the PuTTY software, login with your standard user account

Creating Users and Groups

Video Tutorial - Creating Users and Groups

  1. Create a new user account jsmith using the adduser program
    2. adduser jsmith
  2. Create a new group redteam using the addgroup program
    3. addgroup redteam
  3. Add the jsmith account as well as your own user account to the redteam group
  4. Close your SSH session and open two new SSH sessions
    5. NOTE: In order for your user accounts to receive their new group permissions they need to be logged out and logged back in.
  5. Login as your regular user on one and jsmith on the other
  6. View a list of all the user accounts on your system by looking at the /etc/passwd. To output the contents of the /etc/passwd file you can use the following command:
    7. cat /etc/passwd
    The /etc/passwd file is a plain text file on your system.
  7. View a list of the password data on your system by viewing the /etc/shadow file
  8. View a list of groups and group members on your system in the /etc/group file
    NOTE: The group list may be longer than one full screen of text (the same is true of the /etc/passwd or /etc/shadow file depending on your screen resolution.
    • To output the contents of the file while pausing after each page of output use the following command:
    more /etc/group
    • To output the contents of the file while pausing after each page of output and being able to scroll up and down through the output use the following command:
    less /etc/group
    • Press q to return to the command line
    • It may be helpful to try these commands to display an even longer text file like one of the Shakespeare texts you downloaded in an earlier lab in the ~/sample-files directory. You may have to un-tar the files again first.

Practice Filesystem Permissions and Ownership

Video Tutorial - Practice Filesystem Permissions and Ownership
NOTE: Working with file and directory ownership and permissions is tricky and there are many, many possible combinations of users, groups, and permissions which can be assigned to both files and folders. The goal of this section of the lab is to familiarize you with how to use the commands for changing ownership and permissions, not to teach you how to read or understand Linux file permissions (see your readings for this, it is important!) Once you understand how to use the commands you should experiment with setting different owners and permissions on a several different files and folders and subfolders until you have a good understanding of how permissions work. The only way to understand these relationships well is to read about it and then try it out. You should be able to set all of these permissions just as regular users (assuming you have access to both of the user accounts) you should not need sudo access to change the permissions because one of the the two users owns all the files and directories we're working in. You will need sudo access to change the owner of the files because otherwise it would be possible to accidentally lock yourself out of a file.

ADDITIONALLY: This table may be helpful:

Linux Permissions
Octal Binary File Mode
0 000 ---
1 001 --x
2 010 -w-
3 011 -wx
4 100 r--
5 101 r-x
6 110 rw-
7 111 rwx

This permissions calculator may also be helpful.

  1. Change to the /home directory.
  2. Check the ownership and permissions on the subdirectories inside of /home
  3. Try to create new files using the touch command called foo and foo2 in the /home/jsmith directory.
    • Try as both your regular user and as jsmith respectively
    touch foo
    touch foo2
  4. Try removing the foo and/or foo2 files using both your regular user account and jsmith
  5. Use the jsmith user to create a new directory /home/jsmith/redteam/
  6. Use the jsmith user to create some files: /home/jsmith/redteam/theplan and /home/jsmith/redteam/yours /home/jsmith/redteam/mine and /home/jsmith/ours
  7. In order to find out more about the chown and chgrp programs which you'll use to change the owners and groups for files and directories use the following commands to view the built in manual pages:
    man chown
    man chgrp
    NOTE: Almost every command line tool in Linux has a manual page you can view in this way, try accessing a few other man pages for some of the other tools we've been using. You can scroll through the manual pages using the arrow keys and page up/down. To return to the command line press the q key.
  8. Change the permissions on the /home/jsmith/redteam/ directory so that the group redteam is the group owner of the directory
    9. Change-ownership-directory.png
    Click for Larger Image
  9. Add write permission for the group to the /home/jsmith/redteam/ directory
  10. Change the ownership of the yours file so that it is owned by your regular user account instead of jsmith
  11. Change the group owner of the ours file so that it is controlled by the redteam group
  12. Experiment with creating and removing files and subdirectories inside of the /home/jsmith/redteam/ directory as well as listing the contents of directories with various permissions applied to them until you have a good understanding of how permissions work.

Install the Webmin Control Panel

Video Tutorial - Install the Webmin Control Panel

  1. Use the links browser to download the DEB package file from www.webmin.com
    2. NOTE: Because this DEB file was downloaded directly instead of automatically by APT from a package repository the installation command is slightly different and some other commands such as apt show will not work.
  2. Install the package with apt install apt install ./<filename.deb>
    Don't forget that installation of software must be done with system administrator permissions.
    3. Apt-install-webmin.png
    Click for Larger Image
    NOTE: You can get similar information to what you can get with apt show from a DEB package file using the following command:
    dpkg -I <filename>
  3. Notice the additional packages which are required by Webmin (dependencies) which will be downloaded and installed by apt from a repository in order to complete the installation.
  4. Open a web browser on your host system and visit https://xxx.xxx.xxx.xxx:10000 where your IP replaces xxx.xxx.xxx.xxx
    5. NOTE: You will receive a certificate error when you connect to this site because the default Webmin SSL certificate is self-signed. Some browsers will allow you to bypass this error and connect to the untrusted site anyway. Some browsers, in particular Chrome, may not allow the connection. In that case you will need to use a different browser which allows you to bypass the insecure certificate warning or update the Webmin SSL certificate. In most cases it will be easier for our lab purposes to just use a different browser.
  5. Login using your Debian username and password
  6. Explore the Webmin interface
    Webmin-dashboard.png
    Click for Larger Image

Checking Your Work

  1. Run the following command:
    ls -al /home/jsmith/redteam
    • Verify the following directories are present:
      /theplan
      /yours
      /mine
      /ours
    • Verify the redteam group owns the /ours directory.
  2. Run the following command:
    ls -al /home/jsmith
    • Verify the redteam group owns and has write permissions of the /redteam directory.


  3. Automatically check your results by running this command:
    4. curl https://raw.githubusercontent.com/mnjk-inver/Linux-2480-Rebuild/main/lab_03_test.py | python3



Web App

You can check your progress on any of the labs in the ITC-2480 course from a webapp from this link:
webcheck.itc2480.campus.ihitc.net
You must be logged into the campus VPN to use this application.

Retrieved from "https://wiki.ihitc.net/mediawiki/index.php?title=Franske_ITC-2480_Lab_3&oldid=9727"