Linux Commands: Changing Permissions with chmod
How to Use chmod to update file and directory permissions
Dec 5, 2008
Every Linux file and every Linux directory has its own set of permissions which controls who can do what with them. Each of them has three types of permission:
- read
- write
- execute
They can be accessed (according to the permissions) by three types of user:
- the file owner
- the user group
- all other users
But all are set by one Linux command - chmod.
Viewing File Permissions
The easiest way to examine a file or directory's permission is by using ls in its long format:
The first column shows the file permissions and is actually divided into 10 fields (with any empty fields set to -):
- Field 1: the file type, which can be:
- - (a file)
- d (a directory)
- l (a symbolic link)
- fields 2-4: the file owner permissions
- fields 5-7: the file group permissions
- fields 8-10: the permissions for all other users
Each group of three fields (for owner, group and others) have the same structure:
- 1st field: read permission (can be r or -)
- 2nd field: write permission (can be w or -)
- 3rd field: execute permission (can be x or -)
Therefore, the file check_disk_usage has a very dangerous set of file permissions - it can be written to by anybody logged on to the system (not the best idea for an executable file in a bin directory); however, the file permissions can be changed by using chmod either of two ways:
- setting the permission symbols
- setting the absolute permission
Setting the Permission Symbols
When setting the permission symbols a combination of different symbols are used; to start with there are symbols for the owner, group and others:
- u - owner
- g - group
- o - others
Then a symbol to add or remove a permission:
- + - add
- - - remove
And finally the symbols for the permissions themselves:
- r - read
- w - write
- x - execute
For example:
Now:
- the owner can read, write and execute the file
- members of the group can read and execute the file
- anyone else has no access at all
Setting the Absolute Permission
The absolute permission is an octal translation of the binary representation of the permissions a file - that sounds complicated, but is made more obvious by viewing a complete set of permissions:
Unlike the symbolic permissions all three permissions have to be set at the same time, for example:
Summary
A Linux user uses the chmod command to change the permissions of any of their files or directories; chmod has two modes:
- symbolic - this uses:
- u, g or o to represent owner, group and other
- + or - to add or remove a permission
- r, w, and x to represent read, write and execute
- absolute - uses an octal translation of the binary representation of the permissions a file or directory so that:
- 0 represents ---
- 1 represents --x
- 2 represents -w-
- 3 represents -wx
- 4 represents r--
- 5 represents r-x
- 6 represents rw-
- 7 represents rwx
In both cases the form chmod [symbolic or absolute permission] [file or directory] is used.
