Coding – Step 14.7 – Ubuntu – User Management & System Security — “The Cathedral of Permissions”

Disclaimer: This post is for educational purposes only. Practice only in safe, non-production environments. Every command carries responsibility — treat your system as your own fortress.

The Invisible City of Ubuntu

Imagine Ubuntu as a medieval city.
Every user is a citizen.
Every group is a guild with specific rights.
The root account? That’s the King — powerful, but rarely seen, because even kings make mistakes.

Your job as a student is not to crown yourself king — it’s to learn how to govern wisely.

One Command, Many Consequences

Let’s create a new “apprentice” in our city:

sudo adduser apprentice

When you type this, Ubuntu quietly:

• Builds a house (/home/apprentice)
• Gives them keys (password)
• Registers them in the city census (/etc/passwd)

But that’s just the start. The real art lies in shaping what they can do.

Roles and Masks: Playing with Groups

You can assign different “masks” (permissions) by using groups:

sudo usermod -aG sudo apprentice
sudo usermod -aG audio,video apprentice

Now “apprentice” can manage sound and video devices, and — if needed — wear the admin’s cloak with sudo.

To see all guilds in your city:

getent group | less

Each line reveals hidden corners of Ubuntu — printer operators, log readers, web processes, etc.
Every one is a story of access and trust.

Secret Files and Silent Watchers

Let’s give “apprentice” a secret mission.
We’ll create a hidden file that only they can read:

sudo touch /srv/secret_scroll.txt
sudo chown apprentice:apprentice /srv/secret_scroll.txt
sudo chmod 600 /srv/secret_scroll.txt

Now even the mighty “root” would need explicit permission to read it.
A strong reminder: in Ubuntu, ownership is power.

The Experiment: The Hacker’s Puzzle

Try this experiment with your students:

1. Create three users: mage, warrior, healer.
2. Make warrior and healer part of the same group called guild.
3. Let only that group read a shared scroll: sudo groupadd guild sudo usermod -aG guild warrior sudo usermod -aG guild healer sudo chown :guild /srv/shared_scroll.txt sudo chmod 640 /srv/shared_scroll.txt
4. Ask: can mage read it? If not, why?
   → This sparks a real conversation about permissions and digital ethics.

From Guardians to Architects

By managing users and permissions, you’re not just “administering” —
you’re architecting trust inside your system.
Ubuntu teaches one truth every professional must learn early:

“Security isn’t about locking doors. It’s about giving the right key to the right person.”