A Linux administrator needs to check extended permissions applied to the directory test. Which of the following commands should the administrator use to help with this task?

In Linux systems, getfacl (Get File Access Control Lists) is the utility used to view extended permissions and Access Control Lists (ACLs) assigned to files and directories. Standard Linux file permissions only allow specifying access rights for a single owner, a single group, and others. POSIX ACLs extend this model by allowing administrators to grant explicit read, write, and execute permissions to multiple specific users and groups. Running getfacl test/ displays the file name, owner, group, and all extended permission entries associated with the test/ directory, providing visibility into complex security configurations that standard permission checking utilities cannot fully reveal.

A. getsebool reports the current status of SELinux boolean settings, not directory-level Access Control Lists or extended file permissions.
B. getenforce displays the current global operating mode of SELinux (Enforcing, Permissive, or Disabled), not specific file system directory permissions.
D. ls -al test/ displays standard file permissions and an indicator (+) for ACLs, but does not detail the specific extended ACL assignments.

Red Hat Enterprise Linux Documentation. "Managing File Access Control Lists (ACLs)." Red Hat System Administrator's Guide, 2023.

Linux Man-pages Project. "getfacl(1) - get file access control lists." Linux Programmer's Manual, man7.org.