Linux Access Control List

ssh banner@stapp03
The authenticity of host ‘stapp03 (172.16.238.12)’ can’t be established.
ECDSA key fingerprint is SHA256:sksq8uhkUVnsj4YChmw07owt1RP9uIiH9OHGXN3b0uM.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added ‘stapp03,172.16.238.12’ (ECDSA) to the list of known hosts.
banner@stapp03’s password:
[banner@stapp03 ~]$
[banner@stapp03 ~]$ sudo su -

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

[sudo] password for banner:
[root@stapp03 ~]#
[root@stapp03 ~]# getfacl /etc/hosts
getfacl: Removing leading ‘/’ from absolute path names

file: etc/hosts

owner: root

group: root

user::rw-
group::r–
other::r–

[root@stapp03 ~]#
[root@stapp03 ~]# id anita
uid=1002(anita) gid=1002(anita) groups=1002(anita)
[root@stapp03 ~]#
[root@stapp03 ~]# id rod
uid=1003(rod) gid=1003(rod) groups=1003(rod)
[root@stapp03 ~]#
[root@stapp03 ~]# setfacl -m u:anita:-,rod:r /etc/hosts
[root@stapp03 ~]#
[root@stapp03 ~]# getfacl /etc/hosts
getfacl: Removing leading ‘/’ from absolute path names

file: etc/hosts

owner: root

group: root

user::rw-
user:anita:—
user:rod:r–
group::r–
mask::r–
other::r–

[root@stapp03 ~]#