次のアクセス制御方式をもつファイルシステムにおいて,ファイルAへのアクセス権の設定のうち,アクセス制御の条件を満足するものはどれか。 〔ファイルシステムのアクセス制御方式〕 ・アクセス権の設定単位:所有者,所有者と同じグループの利用者,その他の利用者 ・アクセス権:R(読出し),W(書込み),X(実行) ・アクセス権の優先度:設定内容は,“所有者”,“所有者と同じグループの利用者”,“その他の利用者”の順で優先される。 〔ファイルAへのアクセス制御の条件〕 ・全ての利用者が実行できる。 ・所有者,及び所有者と同じグループの利用者だけが読出しができる。 ・所有者だけが書込みができる。 ○:設定 -:未設定
平成29年度 秋期 ITパスポート試験 問92
This question's explanation and your answers so far.
問 92
Incorrectア
The W of users in the same group is set to ○. However, the condition allows only the owner to write, so the group's W must be -, therefore it is incorrect.
Incorrectイ
The R of other users is set to ○. This violates the condition that only the owner and users in the same group as the owner can read, so the R of other users should be -, therefore it is incorrect.
Incorrectウ
The other users are set to R○W○X-, missing all three conditions: R is ○ where reading should not be allowed, W is ○ where only the owner should write, and X is - where all users should be able to execute, therefore it is incorrect.
- エ
正解 Decide the setting for each item one by one to meet the conditions. First, since “all users can execute”, X is ○ for all of owner, group, and others. Next, since “only users in the same group as the owner can read”, R is ○ for the owner and the same group, and R is - for others. Finally, since “only the owner can write”, W is ○ only for the owner, and - for the group and others. In summary, owner R○W○X○ / same group R○W-X○ / others R-W-X○, and the one that matches this exactly is “エ”.
- Access rights are set as allowed or not for R (read), W (write), and X (execute) in each of the three categories “owner / same group / others”. The trick is to assign the subject (who) and the action (what) of each condition to a category one by one and match them against the table.
- A limiting expression like “only ...” means that the categories outside the target must be properly set to - (not set). This is the same idea as UNIX-style file permissions (granting rwx to owner/group/other).