Chmod Calculator

Understanding Unix File Permissions

In Unix-like operating systems (such as Linux and macOS), file permissions are a fundamental security feature designed to control access to files and directories. The permission system manages access for three distinct categories of users:

• Owner (User): The user who created or owns the file.
• Group: A collection of users associated with the file, allowing shared access among team members.
• Others: All other users on the system who are not the owner and do not belong to the file's group.

Octal vs. Symbolic Notation

Unix file permissions can be defined in two ways:

• Numeric (Octal) Notation: Uses a three-digit or four-digit number. Each digit represents a sum of permission values:
  • Read (r): Value of 4
  • Write (w): Value of 2
  • Execute (x): Value of 1
  For example, a permission of 7 (4 + 2 + 1) grants read, write, and execute access.
• Symbolic Notation: Uses a ten-character string (such as -rwxr-xr-x). The first character denotes the file type (e.g., - for regular file, d for directory), followed by three sets of three characters representing Owner, Group, and Others permissions.

Special Unix Permissions

In addition to the standard read, write, and execute permissions, Linux systems support special permission flags that alter execution behavior:

• SetUID (Set User ID): When set on an executable file, the program runs with the privileges of the file's owner rather than the user running it.
• SetGID (Set Group ID): Similar to SetUID, but runs with group privileges. For directories, new files created inside inherit the group of the parent directory.
• Sticky Bit: Primarily used on directories (like /tmp) to prevent users from deleting or renaming files owned by others, even if they have write access to the directory.

Standard Permission Configurations

Here are common permissions configurations used in web servers and general system administration:

• 755 (rwxr-xr-x): Standard for directories. The owner has full access, while group and others can read and list files.
• 644 (rw-r--r--): Standard for files (like HTML and PHP documents). The owner can read and write, while group and others can only read.
• 700 (rwx------): Private directory. Only the owner can access, read, write, and execute.
• 600 (rw-------): Private files (like SSH keys). Only the owner can read and write.

If you are working on other developer configuration scripts, you may also find our Crontab Generator and UUID Generator tools helpful.