Book Image

Hands-On Linux Administration on Azure - Second Edition

By : Kamesh Ganesan, Rithin Skaria, Frederik Vos
Book Image

Hands-On Linux Administration on Azure - Second Edition

By: Kamesh Ganesan, Rithin Skaria, Frederik Vos

Overview of this book

Thanks to its flexibility in delivering scalable cloud solutions, Microsoft Azure is a suitable platform for managing all your workloads. You can use it to implement Linux virtual machines and containers, and to create applications in open source languages with open APIs. This Linux administration book first takes you through the fundamentals of Linux and Azure to prepare you for the more advanced Linux features in later chapters. With the help of real-world examples, you’ll learn how to deploy virtual machines (VMs) in Azure, expand their capabilities, and manage them efficiently. You will manage containers and use them to run applications reliably, and in the concluding chapter, you'll explore troubleshooting techniques using a variety of open source tools. By the end of this book, you'll be proficient in administering Linux on Azure and leveraging the tools required for deployment.
Table of Contents (14 chapters)
13
Index

DAC

DAC is also known as user-dictated access control. You may already be familiar with the classic permissions in Linux and ACLs. These combine to form DAC. Classic permissions check the user ID (UID) and group ID (GID) of the current process. Classic permissions match the UID and GID of the user trying to access the file with the UID and GID set to the file. Let's see how DAC was introduced and what level of permission you have in Linux. However, we will not be discussing this in detail as the main intention is to get you familiarized with permissions in Linux.

Introduction to DAC

The majority of operating systems, such as Linux, macOS, flavors of Unix, and even Windows, are based on DAC. MAC and DAC were defined in the Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, published by the US DoD (Department of Defense). We'll be discussing MAC in the next section. As the name suggests, DAC allows the owners or creators of files to decide...