A Unix tool for changing file permissions

learn more… | top users | synonyms

200
votes
2answers
46k views

Why is “chmod -R 777 /” destructive?

This is a Canonical Question about File Permission and Why 777 is "destructive". I'm not asking how to fix this problem, as there are a ton of references of that already on Server Fault (reinstall ...
50
votes
6answers
83k views

How to setup linux permissions for the WWW folder?

Updated Summary The /var/www directory is owned by root:root which means that no one can use it and it's entirely useless. Since we all want a web server that actually works (and no-one should be ...
21
votes
2answers
1k views

chmod -R makes files in child folders ureadable for some reason

I was adjusting the permissions when setting up some WordPress themes, and ran chmod 664 -R theme-dir/* It worked fine on the files in the root of the directory, but all the files in subdirectories ...
19
votes
1answer
11k views

What does the @ symbol mean in a file's permission settings?

I'm on MacOSX, I did ln -s on a directory and these are the results: -rwxrwxr-x@ 1 shiki admin 970332 Mar 6 16:38 apc.so -rwxrwxr-x@ 1 shiki admin 653884 Mar 6 16:38 eaccelerator.so -rw-rw-r--...
12
votes
4answers
27k views

vsFTPd default uploaded file permissions on Ubuntu not working

I have a Server running Ubuntu 12.10 x64, and the last version of vsFTPd. My user example.com has its home folder set on /var/www/example.com, I created a public_html folder inside and gave 777 ...
8
votes
4answers
2k views

Can a file that is executable be read?

If a file has permissions -rwx-wx-wx can it be read by other and group users, or can it only executed and written? Is there some way to read an executable file by executing it?
7
votes
2answers
25k views

Using chown to change the group owner of a directory is not permitted…Why?

I am trying to execute chown on a directory that has the following permissions and owners: drwxrwxr-x 2 justin devs 4096 Jan 1 20:42 test I am trying to simply execute the following as the justin ...
7
votes
3answers
5k views

How do I copy ACLs on Mac OS X?

Most unix derivates can copy ACLs from one file to another with: getfacl filename1 | setfacl -f - filename2 Unfortunately Mac OS X does not have the getfacl and setfacl commands, as they have ...
6
votes
3answers
6k views

chmod all files (including hidden files) in a directory in Linux (not recursively)

Yesterday I did something stupid which I today realised. I ran: /root# chmod o-rwx * .* This supposed to remove read, write and execute permissions for the world on all files in the current ...
6
votes
4answers
3k views

Making Apache able to write to PHP files with PHP running as DSO?

I have PHP running as a DSO. As such, my installer script (which writes to a config file) can't do any writing. How do I give apache (user: nobody) the ability to write to the file?
5
votes
2answers
2k views

What exactly does this dpkg command do?

I fixed a permissin problem for nagios like discribed here. The command was: sudo dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw sudo dpkg-statoverride --update --add ...
5
votes
3answers
9k views

How to set file/folder permissions using Rsync from Windows to Linux

I want to transfer lots of files/folders from Windows to Linux using Rsync. On linux server(destination), I want the file permission set to 644, and folder permission set to 755. If possible, I want ...
5
votes
3answers
6k views

How to allow members of a group to change file permissions on linux

I need to allow members of the group 'ftpusers' to be able to change permissions on all objects inside a certain directory. I was looking into how to do it but all I have found is how to do it on BSD: ...
5
votes
2answers
3k views

Why would chmod give “No such file or directory” when running recursively?

I can change the permissions of the file directly: # chmod --changes --recursive ug+rwX /var/www/shared/tmp/cache/assets/BA0/280/sprockets%2F286302903364106648b609d708884f78 and I can also ...
5
votes
3answers
8k views

Apache “No Permission” - 403 forbidden

I've accidentally performed a wrong chown update this morning and now my /var/www permissions are all wrong. I'm unable to access anything anymore, apache will always say I do not have permission to ...
4
votes
4answers
601 views

Make recursive chmod faster

I have an installation script that unzips a directory, then recursively chmods its contents. I'm surprised it takes almost 10 times the time it takes to unzip, to run the following two commands: ...
4
votes
6answers
6k views

Is there a way to run chmod on Windows

Is there a way to run the chmod command on Windows?
4
votes
4answers
1k views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
4
votes
2answers
303 views

Accidential CHMOD 755

Alright, I accidentially chomdded everything to 755, which isn't as terrible as chowning everything to the local user. How insecure is this and how would I restore it easily, without reinstalling?
4
votes
2answers
9k views

rsync - failed to set permission - operation not permitted

I got the following command with this error rsync -avz --links -O /home/jansiatest/.jenkins/workspace/svn_to_demo/trunk/CPS/ jansia@ps27670.dreamhost.com:/home/tasklite/temp sending incremental file ...
4
votes
2answers
9k views

what chmod and owner:group settings are best for a web application?

we are configuring a PHP web application on CentOS and have all our files currently in /var/www/html/project/ Apache is configured to run as apache:apache and has access to the directory above. Right ...
4
votes
1answer
5k views

chmod 1777 or 3777 on /tmp

Is there an ideal chmod for /tmp (with /var/tmp symlinked to /tmp)? I've seen people mention it both ways just curious as to the difference. Is it a security difference?
4
votes
1answer
944 views

Undoing chmod 777

Sometimes in desperation, to test if my problem is not the permission problem I do: sudo chmod -R 777 mydir/ In most cases it does not helps, and now I have two problems ;) Files inside mydir/ had ...
4
votes
1answer
2k views

Permission Hierarchy possible in OpenSolaris + ZFS + ACLs?

I've been doing some research into OpenSolaris and ZFS for use in a NAS. Thus far I have created the following: /tank/projects /tank/storage /tank/developer /tank/sandbox The ...
4
votes
1answer
801 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
4
votes
1answer
298 views

chmod -R 777 on PXE server - why

So I am following a guide to set up a PXE server, for reference here are the links: Actual PXE setup NFS PXE setup Live-cd PXE setup: Now throughout these guides he keeps running the chmod -R 777 &...
4
votes
2answers
1k views

setfacl equivalent to chmod for setting/unsetting individual flag

Using setfacl command line arguments, is there a way to set/unset a single flag as the following command will do ? chmod g+x FILE Please note that: setfacl g::x FILE setfacl g::--x FILE are ...
3
votes
6answers
1k views

Correct recursive chmod, separate for files & dirs

I'd like to recursively chmod a directory so that: Files are 0664 Directories are 0775 How to do it better, shorter, fancier? :) Maybe, use umask somehow? All find solutions are too long: I ...
3
votes
3answers
29k views

chmod -R 777 / on ubuntu - numerous problems

A client has accidentally given the entire filesystem full permissions on their ubuntu 10.04 box. chmod -R 777 httpdocs/cd / As you can see they attempted to cd to the root, and instead gave chmod ...
3
votes
4answers
2k views

Why is it so important to remove 777 permissions?

I'm writing installer for my PHP web app. It requires user to change permissions of a few files and directories (config.php, cache, uploads, .htaccess) to 777 (so that it's writable). I've seen in ...
3
votes
4answers
2k views

Allow PHP to write file without 777

I am setting up a simple website on webspace provided by my university. I do not have database access so I am storing all the data in a flat file. The issue I am experiencing is related to file ...
3
votes
1answer
17k views

Is CHMOD 775 safe to use?

I know it's not good to use CHMOD 777, but is 775 as dangerous? Does it provide a backdoor to hackers as easily as 777?
3
votes
3answers
413 views

Maintain setgid bit (after bower install or gulp build)

We run web servers where we have the following situation: The www-data user runs the web server and must have read+write access to the files The deploy user deploys all the code The bob and alice ...
3
votes
3answers
1k views

Alternative to having directories with 777 permissions

I am running several websites on my dedicated server and a lot of my sites require that some directories have permissions set to 777. I know this is a major security issue, and I also know it's ...
3
votes
1answer
724 views

centos 6.2 gives read permission denied when root has set read permissions to all users

Installing Dropbox on Centos 6.2 owned by root. Demonstrating that the dropbox folder is owned by root with read permissions to all "root" user gives read permissions to all users [root@localhost ...
3
votes
5answers
682 views

Chmod: defintion of everyone (777)

If I Chmod a directory a to 777. What exactly does Everyone mean? Anyone who connects with FTP without using the password or something else? I have a Wordpress CMS and I'm trying to install a plugin, ...
3
votes
4answers
1k views

What are the cons of restricting chmod to root/sudo users?

I have an issue with some of my users misusing chmod by doing things like chmod 777 ~ -Rf I'd like to disable chmod so that only users with full sudo rights (I.E. IT) have rights. Are there any ...
3
votes
1answer
3k views

Only allow a user to CHMOD and CHOWN in their home directory or a specified directory

I have a Windows user on my network who has Samba access to our linux development server. Occasionally permissions or ownership will become confused for reasons unknown and he will no longer be able ...
3
votes
1answer
187 views

How to run a recursive chmod that stop at FileSystem Boundaries

I have a directory with lots of files and inside a mounted directory. var/ log/ nfs/ (a NFS remote directory) www/ How can I chmod/chown everyfiles inside that directory without changing ...
3
votes
5answers
11k views

is it safe to chmod 775/664 with owner www-data:www-data?

To make working with my webserver easiest I am proposing doing something like the following: sudo chown www-data:www-data /var/www -R cd /var/www sudo find . -type f -exec chmod 664 {} \; sudo find . ...
3
votes
9answers
11k views

What CHMOD settings to keep users from viewing directory?

I have an "includes" directory that my web server should be able to fully interact with, but I don't want users to be able to see its contents.
3
votes
1answer
2k views

How do you give full access w/ chmod to multiple groups? Need to use ACL's?

First of all, thanks for reading. I've had success running a plist launchd job that is in my LaunchAgents folder. It basically calls a small shell script that chmod's a folder's permissions. I then ...
3
votes
0answers
117 views

Which permissions should I set to dhparam.pem?

I am generating Diffie-Hellman parameters for the ssl_dhparam directive in the SSL configuration of nginx. The file dhparam.pem is created with the command openssl dhparam 2048 -check -out dhparam....
3
votes
1answer
3k views

File permission mask/mode settings for Samba on FreeNAS?

I'm currently working on the Samba settings on a FreeNAS server. When any user creates a file or a folder on the server I want the file or folder to get the following RWX permissions: Folders: ...
2
votes
4answers
5k views

CHMOD - Applying Different Permissions For Files vs. Directories

I've been trying to clean up permissions on a few boxes and have been scouring the chmod man as well as all the internet documentation that I an handle without any luck -- so here we go. Basically, I'...
2
votes
4answers
358 views

Why do many linux files have others=read access?

Can I run chmod o=- -R / ? I don't want a newly created user to be able to cat /etc/passwd, just because of its default permissions. And I want to understand why these defaults were chosen for ...
2
votes
3answers
10k views

Change all file permissions to 644 and all folder permissions to 755 recursively

How to change all file permissions to 644 and all folder permissions to 755 recursively using chmod in the following two situation: If they had 777 permissions Regardless of the permission (with ANY ...
2
votes
4answers
5k views

Change group ownership of Folders with chmod g+s

I have a folder hierarchy that I want to change the group ownership including any subsequent file/folder additions. I was going to use chmod g+s but I'm not sure if it applies to already created ...
2
votes
2answers
8k views

Is chmod 700 on a directory sufficient to prevent arbitrary access to subdirectories?

If I chmod 700 the the home directory of a user (on Linux), does this guarantee that other non-privileged users cannot access any subdirectory or file under that home directory? Or are there sneaky ...
2
votes
2answers
247 views

Make files editable for guests without using chmod

Sorry if this is the wrong place to post this, or if it has been posted before. I couldn't find anything though. If I log on to a linux server without supplying a username or password (from windows ...