tmpfs.tech · all tracks · Security & TLS

Grant Access With setfacl

Security & TLS · pro · solved in-browser (no VM needed) · 3 tiered hints

Write the bash script /home/player/grant-acl.sh (starting with a bash shebang) that uses setfacl to give the 'auditor' user read-and-execute (rX) access to /var/log/app, recursively, AND sets a default ACL so new files inherit that grant. Use two setfacl calls: 'setfacl -R -m u:auditor:rX /var/log/app' and 'setfacl -R -m d:u:auditor:rX /var/log/app'. (Authored config, graded structurally — the engine isn't run here.)

▶ Start this challenge

Nobody has solved this one yet — be the first clear on the leaderboard.

How it works

Open the challenge and an in-page editor appears — write your answer and tmpfs.tech grades it server-side against the same checks a real box would run. No VM, no install, no signup needed to try.

More Security & TLS challenges

Certificates, signatures, hardening sshd and verifying trust.

• Cap a User's Open Fileseasy · in-browser
• Disconnect Idle SSH Sessionseasy · in-browser
• Generate an RSA keyeasy
• Harden the SSH Clienteasy · in-browser
• Limit Processes Per Usereasy · in-browser
• Lock a key fileeasy
• Lock down a key directoryeasy
• Lock down a private keyeasy

See all Security & TLS challenges →

FAQ

Is it free? Yes — play as a guest, no signup required to start.

Do I need to install anything? No. Everything runs in your browser.

How is it graded? Automatically and deterministically — your work is checked against the exact rules the live box would apply.