{"id":17636,"date":"2023-09-21T12:55:51","date_gmt":"2023-09-21T10:55:51","guid":{"rendered":"https:\/\/contabo.com\/blog\/?p=17636"},"modified":"2023-09-21T14:16:26","modified_gmt":"2023-09-21T12:16:26","slug":"linux-permission-basics","status":"publish","type":"post","link":"https:\/\/contabo.com\/blog\/linux-permission-basics\/","title":{"rendered":"Linux Permission Basics"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n
<\/div>\n\n\n\n

In this article, we will have a look at the fundamentals of Linux permissions, describing their importance in the context of a VPS <\/a>environment. We will shed light on the puzzling world of user privileges, file ownership, and access restrictions, providing you with the knowledge needed to safeguard your server and its data. <\/p>\n\n\n\n

So, whether you are a web developer, a system administrator, or simply someone curious about the inner workings of VPS management, read on as we describe Linux permissions on your virtual server. By the end of this article, you will be well-equipped to navigate the labyrinth of permissions and confidently secure your VPS. <\/p>\n\n\n\n

Understanding Linux File Permissions<\/h2>\n\n\n\n

As a system administrator, comprehending file permissions is related to understanding the language of control and access. Linux file permissions are your gatekeepers, dictating who can view, modify, or execute files and directories on your VPS. They are ensuring that only authorized entities can access your data and applications. <\/p>\n\n\n\n

The Three Permission Types<\/h3>\n\n\n\n

At the heart of Linux file permissions are three fundamental attributes, each governing a specific facet of file access: <\/p>\n\n\n\n

Read (r):<\/strong> This permission allows a user or group to view <\/em><\/strong>the contents of a file or list <\/em><\/strong>the contents of a directory. It is represented by the letter r<\/em> in permission settings. <\/p>\n\n\n\n

Write (w)<\/strong>: The write permission empowers users or groups to modify <\/em><\/strong>the contents of a file or create <\/em><\/strong>and delete <\/strong>files within a directory. It is symbolized by the letter w. <\/p>\n\n\n\n

Execute (x)<\/strong>: Execute permission, represented by the letter x, grants the ability to run scripts or<\/em><\/strong> execute programs<\/em><\/strong>. Without this permission, executing programs or changing into directories is impossible. <\/p>\n\n\n\n

The Three Permission Levels<\/h3>\n\n\n\n

In Linux, permissions are not granted universally; they are tailored for specific entities. There are three primary permission levels: <\/p>\n\n\n\n

User (u)<\/strong>: This level refers to the owner of the file or directory. The user can be the person who created the file or a designated user with specific access rights. <\/p>\n\n\n\n

Group (g)<\/strong>: Group permissions apply to a predefined set of users who share access to the file or directory. Groups are an efficient way to manage permissions for multiple users with similar needs. <\/p>\n\n\n\n

Others (o)<\/strong>: The “others” category includes everyone else who is neither the owner nor a member of the group associated with the file or directory. These permissions are the most open and typically apply to all users on the system. <\/p>\n\n\n\n

Numeric and Symbolic Permission Representation<\/h3>\n\n\n\n

Linux permissions can be represented in two formats: numeric and symbolic notation. <\/p>\n\n\n\n

Numeric Notation:<\/strong> In this format, each permission is assigned a numeric value. Read <\/em><\/strong>is represented by 4<\/em><\/strong>, write<\/em><\/strong> by 2<\/em><\/strong>, and execute<\/em><\/strong> by 1<\/em><\/strong>. These values are then summed to create a three-digit number, where the first digit<\/strong> represents user permissions<\/em><\/strong>, the second digit<\/strong> represents group permissions<\/em><\/strong>, and the third digit<\/em><\/strong> represents others<\/em><\/strong>. For example, a file with permissions of 644 would mean that the user has read and write access (4+2=6), while the group and others have only read access (4). <\/p>\n\n\n\n

Permission <\/td>Numeric Value <\/td><\/tr>
Read <\/td>4 <\/td><\/tr>
Write <\/td>2 <\/td><\/tr>
Execute <\/td>1 <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Symbolic Notation<\/strong>: Symbolic notation employs a combination of letters and symbols to represent permissions. r signifies read, w represents write, x means execute and \u2018-\u2019 meaning no permissions. These symbols are used with user, group, and others to set permissions. For instance, rw-r–r–<\/em> translates to user=read+write, group=read, others=read. <\/p>\n\n\n\n

Symbol <\/td>Meaning <\/td><\/tr>
r <\/td>Read permissions <\/td><\/tr>
w <\/td>Write permissions <\/td><\/tr>
x <\/td>Execute permissions <\/td><\/tr>
– <\/td>No permissions <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

In the next section, we will explore the practical applications of these permissions and take a closer look at umask. <\/p>\n\n\n\n

Viewing File Permissions<\/h2>\n\n\n\n

To gain insight into the existing file permissions on your Linux VPS, you will need to harness a couple of trusty commands. Let us look at how you can use ls -l<\/em> and stat<\/em> to reveal the complex details of your files and directories. <\/p>\n\n\n\n

Using the ls-command <\/h3>\n\n\n\n

The ls <\/em>command, with the -l<\/em> option, is your go-to tool for viewing file permissions in a user-friendly and human-readable format. Simply open your terminal and navigate to the directory containing the file or directory of interest. Then, execute the following command: <\/p>\n\n\n\n

ls -l filename_or_directory <\/code><\/pre>\n\n\n\n
Replace filename_or_directory<\/em> with the actual name of the file or directory you want to inspect. When you run this command, it will display a detailed listing that includes file permissions, ownership information, file size, modification date, and more. <\/p>\n\n\n\n
The output will look something like this: <\/p>\n\n\n\n
\"Linux<\/figure>\n\n\n\n
lrwxrwxrwx   1 root root     7 Aug 25  2021 filename  <\/code><\/pre>\n\n\n\n
Here, the lrwxrwxrwx<\/em> portion represents the file’s permissions in symbolic notation. The user and group values indicate the file’s owner and group, respectively. <\/p>\n\n\n\n
Using stat <\/h3>\n\n\n\n
For a better examination of file permissions and additional file information, you can utilize the stat <\/a>command. This command provides a comprehensive overview of a file’s attributes. <\/p>\n\n\n\n
To use stat, simply enter the following command: <\/p>\n\n\n\n
stat <filename_or_directory> <\/code><\/pre>\n\n\n\n
Again, replace <filename_or_directory> with the actual name of the file or directory you wish to inspect. The output will present lots of information, including access, modification, and change times, in a structured format. <\/p>\n\n\n\n
These commands will empower you to examine and understand the permissions of files and directories on your VPS, an essential skill for managing access and security effectively.  <\/p>\n\n\n\n
How to Use chmod to Modify Permissions<\/h3>\n\n\n\n
The chmod command is used to change file permissions. It allows you to set or modify the permissions for a file or directory using either symbolic notation or octal notation. <\/p>\n\n\n\n
Symbolic Notation<\/strong>: This method uses letters (u, g, o, a) and symbols (+, -, =) to add or remove permissions. <\/p>\n\n\n\n
Symbol <\/td>Meaning <\/td><\/tr>
u <\/td>User <\/strong>(owner of the file) <\/td><\/tr>
g <\/td>Group <\/strong>(users who are in the same group as the file) <\/td><\/tr>
o <\/td>Others <\/strong>(everyone else) <\/td><\/tr>
a <\/td>All <\/strong>(a combination of u, g, and o) <\/td><\/tr>
+ <\/td>Adds <\/strong>the specified permission <\/td><\/tr>
– <\/td>Removes <\/strong>the specified permission <\/td><\/tr>
= <\/td>Sets <\/strong>the specified permission and removes <\/strong>all others <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
Example: To add write permission for the user and group and remove all permissions for others on a file named example.txt, you can use the following command: <\/p>\n\n\n\n
chmod ug+w,o-rx example.txt <\/code><\/pre>\n\n\n\n
Octal Notation<\/strong>: This method uses three digits (0-7) to represent permissions for the owner, group, and others. Each digit corresponds to read (4), write (2), and execute (1) permissions. <\/p>\n\n\n\n
Digits (0-7) <\/td>Corresponding Permissions <\/td><\/tr>
0 <\/td>No <\/strong>permissions <\/td><\/tr>
1 <\/td>Execute <\/strong>(1) <\/td><\/tr>
2 <\/td>Write <\/strong>(2) <\/td><\/tr>
3 <\/td>Write <\/strong>+ Execute <\/strong>(2+1) <\/td><\/tr>
4 <\/td>Read <\/strong>(4) <\/td><\/tr>
5 <\/td>Read <\/strong>+ Execute <\/strong>(4+1) <\/td><\/tr>
6 <\/td>Read <\/strong>+ Write <\/strong>(4+2) <\/td><\/tr>
7 <\/td>Read <\/strong>+ Write <\/strong>+ Execute <\/strong>(4+2+1) <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
Example: To give read and write permissions to the owner, read-only permission to the group, and no permissions to others on a file named example.txt, you can use the following command: <\/p>\n\n\n\n
chmod 640 example.txt <\/code><\/pre>\n\n\n\n
Understanding User and Group Ownership <\/h2>\n\n\n\n
Ownership plays a significant role in determining file and directory permissions. In this chapter, we will explore how ownership affects permissions and how to check file ownership using the ls -l<\/em> command. <\/p>\n\n\n\n
How Ownership Affects Permissions <\/h3>\n\n\n\n
In Unix-based systems, every file and directory is associated with two levels<\/strong> of ownership: user ownership<\/strong> and group ownership<\/strong>. Understanding these ownership levels is crucial because they directly influence who can access, modify, or execute a file or directory. <\/p>\n\n\n\n
User Ownership<\/strong>: The user who creates a file or directory becomes its owner by default. This user has special privileges and can change the file’s permissions, read, write, and delete it, regardless of the permissions set for others. <\/p>\n\n\n\n
Group Ownership<\/strong>: Each user on a Unix system belongs to one or more user groups. A file or directory can be assigned to a specific group. Users who are part of that group gain group ownership over the file or directory. Group ownership allows group members to access the file according to its group permissions. <\/p>\n\n\n\n
How to Check File Ownership Using the ls -l Command <\/h3>\n\n\n\n
The ls command lists files and directories in a directory. When used with the -l option, it provides a detailed listing that includes ownership information. Here is how you can use it to check file ownership: <\/p>\n\n\n\n
ls -l<\/code><\/pre>\n\n\n\n
The output of this command will display information in a format like the following: <\/p>\n\n\n\n
-rw-r--r--  1 user1  group1  1234 Sep  6 10:00 file.txt <\/code><\/pre>\n\n\n\n
Here is a breakdown of what each column represents: <\/p>\n\n\n\n
– -rw-r–r–:<\/strong> These characters represent the file’s permissions. The first character indicates the file type (in this case, a regular file), followed by three sets of permissions for the file owner, group owner, and others. <\/p>\n\n\n\n
– 1: This number indicates the number of hard links to the file.  <\/p>\n\n\n\n
– user1<\/strong>: This is the name of the file owner. <\/p>\n\n\n\n
– group1<\/strong>: This is the name of the group owner. <\/p>\n\n\n\n
– 1234<\/strong>: This is the file size in bytes. <\/p>\n\n\n\n
– Sep  6 10:00<\/strong>: This is the date and time of the last modification. <\/p>\n\n\n\n
– file.txt<\/strong>: This is the file or directory name. <\/p>\n\n\n\n
In the example above, user1 owns the file file.txt, and it is part of the group group1. The file’s permissions are rw-r–r–, which means that the owner has read and write permissions, but others can only read the file. <\/p>\n\n\n\n
Changing File Ownership<\/h2>\n\n\n\n
Changing file ownership is an essential task, allowing you to transfer ownership of files and directories between users and groups. In the following chapter, we will explore how to change the owner and group of a file or directory using the chown and chgrp commands and provide code examples. <\/p>\n\n\n\n
How to Change File Ownership using chown <\/h3>\n\n\n\n
The chown command changes the owner of a file or directory. It allows you to transfer ownership from one user to another. To use chown, you will need superuser (root) privileges or ownership of the file or directory. <\/p>\n\n\n\n
If you want to learn more about the different users on a Linux server, check out our Practical Guide to Superuser Accounts, sudo & root<\/a>. <\/p>\n\n\n\n
The basic syntax for chown is as follows: <\/p>\n\n\n\n
chown [new_owner:new_group] [file_or_directory] <\/code><\/pre>\n\n\n\n
– new_owner: The new owner’s username. <\/p>\n\n\n\n
– new_group: The new group’s name (optional). <\/p>\n\n\n\n
– file_or_directory: The file or directory whose ownership you want to change. <\/p>\n\n\n\n
How to Change Group Ownership using chgrp <\/h3>\n\n\n\n
The chgrp command changes the group ownership of a file or directory. Like chown, you need superuser privileges or ownership of the file or directory to use chgrp. <\/p>\n\n\n\n
The basic syntax for chgrp is as follows: <\/p>\n\n\n\n
chgrp [new_group][file_or_directory]<\/code><\/pre>\n\n\n\n
– new_group: The new group’s name. <\/p>\n\n\n\n
– file_or_directory: The file or directory whose group ownership you want to change. <\/p>\n\n\n\n
Code Examples for Changing Ownership <\/h3>\n\n\n\n
Here are some practical code examples for changing ownership of files and directories: <\/p>\n\n\n\n
1. Changing File Ownership with chown<\/strong>: <\/p>\n\n\n\n
To change the owner of a file named file.txt to a user named newuser, use the following command: <\/p>\n\n\n\n
sudo chown newuser file.txt<\/code><\/pre>\n\n\n\n
To change both the owner and group ownership of the same file, use: <\/p>\n\n\n\n
sudo chown newuser:newgroup file.txt<\/code><\/pre>\n\n\n\n
2. Changing Directory Ownership with chown<\/strong>: <\/p>\n\n\n\n
To change the owner of a directory named mydir and all its contents to newuser, use the -R option for recursive ownership change: <\/p>\n\n\n\n
sudo chown -R newuser mydir <\/code><\/pre>\n\n\n\n
3. Changing Group Ownership with chgrp<\/strong>: <\/p>\n\n\n\n
To change the group ownership of a file named file.txt to a group named newgroup, use the following command: <\/p>\n\n\n\n
sudo chgrp newgroup file.txt <\/code><\/pre>\n\n\n\n
4. Changing Group Ownership of a Directory with chgrp<\/strong>: <\/p>\n\n\n\n
To change the group ownership of a directory named mydir and all its contents to newgroup, use the -R option for recursive group ownership change: <\/p>\n\n\n\n
sudo chgrp -R newgroup mydir <\/code><\/pre>\n\n\n\n
Always remember to replace newuser and newgroup with the actual usernames and group names you want to assign. Additionally, use sudo to execute these commands with superuser privileges, as changing ownership typically requires elevated permissions. Be cautious when changing ownership, as it can have significant implications for access control and security on your system. <\/p>\n","protected":false},"excerpt":{"rendered":"
Learn the Linux Permission Basics. Master file access control and understand how to manage file access control on your Linux system.<\/p>\n","protected":false},"author":50,"featured_media":17698,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[18],"tags":[],"ppma_author":[1491],"class_list":["post-17636","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorials"],"uagb_featured_image_src":{"full":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics.jpg",1200,630,false],"thumbnail":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics-150x150.jpg",150,150,true],"medium":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics-600x315.jpg",600,315,true],"medium_large":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics-768x403.jpg",768,403,true],"large":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics.jpg",1200,630,false],"1536x1536":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics.jpg",1200,630,false],"2048x2048":["https:\/\/contabo.com\/blog\/wp-content\/uploads\/2023\/09\/blog-head_linux-permission-basics.jpg",1200,630,false]},"uagb_author_info":{"display_name":"Tobias Mildenberger","author_link":"https:\/\/contabo.com\/blog\/author\/tobias\/"},"uagb_comment_info":0,"uagb_excerpt":"Learn the Linux Permission Basics. Master file access control and understand how to manage file access control on your Linux system.","authors":[{"term_id":1491,"user_id":50,"is_guest":0,"slug":"tobias","display_name":"Tobias Mildenberger","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/077178d5dce6c3d4c0c0396857a7e544bfdf8adf04145fff5160b33a22e28b1f?s=96&d=mm&r=g","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/posts\/17636","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/users\/50"}],"replies":[{"embeddable":true,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/comments?post=17636"}],"version-history":[{"count":2,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/posts\/17636\/revisions"}],"predecessor-version":[{"id":17702,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/posts\/17636\/revisions\/17702"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/media\/17698"}],"wp:attachment":[{"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/media?parent=17636"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/categories?post=17636"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/tags?post=17636"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/contabo.com\/blog\/wp-json\/wp\/v2\/ppma_author?post=17636"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}