This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
linux:file_perm [2021/08/17 17:46] manu [User extended attribute] |
linux:file_perm [2021/08/17 18:12] (current) manu |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Files/directories permissions and ACL ====== | ====== Files/directories permissions and ACL ====== | ||
+ | |||
+ | Do not forget that all permissions are related to user ID and group ID, not name. | ||
===== Standard file permissions ===== | ===== Standard file permissions ===== | ||
Line 16: | Line 18: | ||
manu@opensuse:~> ls -l test* | manu@opensuse:~> ls -l test* | ||
-rw-r--r-- 1 manu users 0 Aug 17 12:01 test1 | -rw-r--r-- 1 manu users 0 Aug 17 12:01 test1 | ||
+ | </cli> | ||
+ | |||
+ | 3 commands that can be used to change permissions... | ||
+ | <cli> | ||
+ | chmod 644 <file> | ||
+ | chmod {ugo}{+,-,=}{rwx} <file> | ||
+ | chmod <user>{.:}<group> <file> | ||
+ | chgoup <group> <file> | ||
</cli> | </cli> | ||
Line 60: | Line 70: | ||
ACL are enable on most latest newly created filesystems by default, you can check using **tune2fs -l <logical_vol_name>** | ACL are enable on most latest newly created filesystems by default, you can check using **tune2fs -l <logical_vol_name>** | ||
+ | <cli prompt='#'> | ||
+ | manu-opensuse:~ # tune2fs -l /dev/mapper/libraryvg-uncryptlv | ||
+ | tune2fs 1.43.8 (1-Jan-2018) | ||
+ | ... | ||
+ | Default mount options: user_xattr acl | ||
+ | </cli> | ||
+ | |||
<cli prompt='>'> | <cli prompt='>'> | ||
Line 128: | Line 145: | ||
If extended user attribute is enable on a file or folder, you 'll see a dot (.) at end of file proterties | If extended user attribute is enable on a file or folder, you 'll see a dot (.) at end of file proterties | ||
+ | <cli> | ||
-rw-r-----. 1 root root 32 Oct 15 2018 secret.key | -rw-r-----. 1 root root 32 Oct 15 2018 secret.key | ||
+ | </cli> | ||
lsattr <file> | lsattr <file> | ||
You can change a file to secure delete, immutable... check **chattr** command | You can change a file to secure delete, immutable... check **chattr** command |