Franske ITC-2480 Lab 3

Introduction

In this lab you will create a new user account, change the ownership and permissions on files and directories, and install the Webmin package.

Lab Procedure

Prerequisites

1. Make sure you have an active connection to the ITCnet either by VPN or by directly connectiong to an ITCnet switch on campus
2. Open an SSH console to your Linux system using the PuTTY software, login with your standard user account

Create Linux users and groups

1. Create a new user account jsmith using the adduser program
2. Create a new group redteam using the addgroup program
3. Add the jsmith account as well as your own user account to the redteam group
4. In order for your user accounts to receive their new group permissions they need to be logged back in so close your SSH session and open two new SSH sessions, login as your regular user on one and jsmith on the other
5. View a list of all the user accounts on your system by looking at the /etc/passwd file which is a plain text file on your system. To output the contents of the /etc/passwd file you can use the cat /etc/passwd command
6. View a list of the password data on your system by viewing the /etc/shadow file
7. View a list of groups and group members on your system in the /etc/group file
   • NOTE: The group list may be longer than one full screen of text (the same is true of the /etc/passwd or /etc/shadow file depending on your screen resolution.
     1. To output the contents of the file while pausing after each page of output use the more /etc/group command
     2. To output the contents of the file while pausing after each page of output and being able to scroll up and down through the output use the less /etc/group command and press q to return to the command line
     3. It may be helpful to try these commands to display an even longer text file like one of the Shakespeare texts you downloaded in an earlier lab in the ~/sample-files directory. You may have to un-tar the files again first.

Practice Linux filesystem permissions and ownership

• NOTE: Working with file and directory ownership and permissions is tricky and there are many, many possible combinations of users, groups, and permissions which can be assigned to both files and folders. The goal of this section of the lab is to familiarize you with how to use the commands for changing ownership and permissions, not to teach you how to read or understand Linux file permissions (see your readings for this, it is important!) Once you understand how to use the commands you should experiment with setting different owners and permissions on a several different files and folders and subfolders until you have a good understanding of how permissions work. The only way to understand these relationships well is to read about it and then try it out. You should be able to set all of these permissions just as regular users (assuming you have access to both of the user accounts) you should not need sudo access to change the permissions because one of the the two users owns all the files and directories we're working in. You will need sudo access to change the owner of the files because otherwise it would be possible to accidentally lock yourself out of a file.

1. Change to the /home directory and check the ownership and permissions on the subdirectories inside of /home
2. Try to create new files using the touch command called foo and foo2 in the /home/jsmith directory as both your regular user and as jsmith respectively
3. Try removing the foo and/or foo2 files using both your regular user account and jsmith
4. Use the jsmith user to create a new directory /home/jsmith/redteam/
5. Use the jsmith user to create some files: /home/jsmith/redteam/theplan and /home/jsmith/redteam/yours /home/jsmith/redteam/mine and /home/jsmith/ours
6. In order to find out more about the chown and chgrp programs which you'll use to change the owners and groups for files and directories use the man chown and man chgrp commands to view the built in manual pages. Almost every command line tool in Linux has a manual page you can view in this way, try accessing a few other man pages for some of the other tools we've been using. You can scroll through the manual pages using the arrow keys and page up/down. To return to the command line press the q key.
7. Change the permissions on the /home/jsmith/redteam/ directory so that the group redteam is the group owner of the directory
8. Add write permission for the group to the /home/jsmith/redteam/ directory
9. Change the ownership of the yours file so that it is owned by your regular user account instead of jsmith
10. Change the group owner of the ours file so that it is controlled by the redteam group
11. Experiment with creating and removing files and subdirectories inside of the /home/jsmith/redteam/ directory as well as listing the contents of directories with various permissions applied to them until you have a good understanding of how permissions work.

Install the Webmin control panel

1. Use the links browser to download the DEB package file from www.webmin.com
2. Because this DEB file was downloaded directly instead of automatically by APT from a package repository the installation command is slightly different and some other commands such as apt show will not work. Install the package with apt install ./<filename.deb> Don't forget that installation of software must be done with system administrator permissions.
   • NOTE: You can get similar information to what you can get with apt show' from a DEB package file using dpkg -I <filename>
3. Notice the additional packages which are required by Webmin (dependencies) which will be downloaded and installed by APT from a repository in order to complete the installation.
4. Open a web browser on your host system and visit https://xxx.xxx.xxx.xxx:10000 where your IP replaces xxx.xxx.xxx.xxx
5. Explore the webmin interface