File Permissions in Linux
Planted .
Last tended .
Every file has a set of permissions (similar to ACLs in Windows) that determine whether a user can read, write or run that file. Running ls -l displays the permissions.
There are four parts to file’s mode.
- Type
- User Permissions
- Group Permissions
- Other Permissions
The first character is type. - means its a file, d means directories. The rest of the file’s mode contains permissions in groups of three, in order for user, group and other. We can also use octal forms for setting permissions.
r means file is readable (4)
w means file is writable (2)
x means file is executable (for scripts, etc.) (1)
- means nothing, i.e. no permissions set
## As an example
## some user has read-write
## members of somegroup have read
## others have read
-rw-r--r-- 1 someuser somegroup 64975 16 Oct 2018 somedoc.rtf
Comparing against ACLs in NTFS
- NTFS permissions are per-user permissions, multiple users can have different rights. Linux file mode has only three - user, group and others.
- NTFS has explicit deny rules.
- NTFS has inheritance model.
- NTFS has auditing capability, Linux file mode does not having anything. Though, audit tools exist.