Permission for files:
chmod 664 myFile // rw-rw-r--
And for folders:
chmod 774 myFolder // rwxrwxr--
If I only use the "read and write" permission, the folders won't show their contents.
What's the reason for this?
Since you can't 'execute' a directory, the execute bit has been put to better use. The execute bit on a directory allows you to access items that are inside the directory, even if you cannot list the directories contents.
$ mkdir -p dir/
$ echo 'Hello World!' > dir/file
$ chmod 000 dir/
$ ls -al dir/
ls: cannot open directory dir: Permission denied
$ cat dir/file
cat: dir/file: Permission denied
$ chmod +x dir/
$ ls -al dir/
ls: cannot open directory dir: Permission denied
$ cat dir/file
Hello World!
From the chmod
manpage:
The letters rwxXst select file mode bits for the affected users: read (r), write (w), execute (or search for directories) (x), execute/search only if the file is a directory or already has execute permission for some user (X), set user or group ID on execution (s), restricted deletion flag or sticky bit (t).
ls
the contents? It seems like catting the file would require read access, whereas ls
would require "search" or execute access. I'm confused by this.
Commented
May 31, 2022 at 1:54
dir/file
has default permissions -rw-rw-r--
so cat dir/file
reads the file, and ls -al dir
is denied because you are trying to read the directory without read permissions. I guess it makes a bit more sense to me to call this the traverse bit rather than the search bit. Otherwise the difference between reading and searching a directory seems a bit ambiguous to me. The difference between reading and traversing seems more clear cut to me.
Commented
May 31, 2022 at 2:03
+x
does not allow you to cat a file, it only allows you to execute a file.
cat
a file, I don't think you can claim you "execute a file". Anyways after playing around with it in a terminal (comment above) it makes more sense to me. I'd rephrase your comment to "+x
does not allow you to cat a file, the read bit of dir/file
allows you to cat the file. The +x
bit on dir
allows you to traverse into dir
in order to access dir/file
, which itself has its own permissions".
Commented
May 31, 2022 at 2:08
find
command does seem complex at first, but it is one of the most useful shell commands you will come across, along with xargs
. An alternative is chmod -R -x dir/
followed by chmod -R +X dir/
(see man chmod
)
Directories (they're not typically called folders in *nix) have a different meaning for the permission bits than normal files.
For directories, write allows creating new files and deleting files inside it.
Read allows you to list the files inside of it.
Execute allows you to enter it and access files (or other directories) inside.
cd
) you enter(execute) it.
dir
command in DOS. And *nix GUIs also call it "folder". What is the difference between a directory and a folder?, What is the difference between a directory and a folder?
The "execute" bit actually means "search" when applied to directories (from man chmod
). This seems reasonable since execute has no meaning for a directory.
Execute permissions on a directory allow you to traverse it, for using resources contained within it.
The x
bit on a folder refers to indexing/directory search/listing; none of those are possible if you keep that bit low.
Here's an example of its use: If you want to have a user with limited read permissions on every directory but his home, say /home/dummy
, then you need to make /
and /home
have the x
bit set, otherwise he can't even get to his home directory.