The Ultimate Guide to Linux File Permissions and Ownership

For anyone managing a website on a VPS hosting platform, mastering the Linux file system is a must. At the core of server management lies a critical concept: Linux file permissions and ownership. These settings determine who can read, write, and execute files on your server, acting as the first line of defense for your VPS security.

Understanding permissions is crucial for protecting your website from unauthorized access and preventing common errors. This guide will walk you through the fundamentals of file and directory management using essential Linux commands like ls, chmod, and chown.

The Three Core Permission Types

Every file and directory on a Linux system has a set of permissions. These are represented by three characters:

• r (Read): Allows you to view the contents of a file or list the contents of a directory.
• w (Write): Allows you to modify or delete a file, or add/remove files within a directory.
• x (Execute): Allows you to run a file (if it’s a script or program) or enter a directory.

These permissions are assigned to three types of users:

1. User (u): The owner of the file.
2. Group (g): The group the file belongs to.
3. Others (o): Everyone else on the system.

Viewing Permissions with ls -l

To see the permissions for your files and directories, you can use the ls -l command in your SSH terminal.

ls -l

The output will look something like this:

drwxr-xr-x 2 user group 4096 Sep 19 14:00 public_html -rw-r--r-- 1 user group 1024 Sep 19 14:05 index.html

Let’s break down the first section of that output (drwxr-xr-x):

• The first character (d) indicates the file type. A d means it’s a directory, while a - means it’s a regular file.
• The next nine characters are the permissions, in groups of three: rwx (User), r-x (Group), and r-x (Others).

In this example:

• The user (u) can read, write, and execute (rwx).
• The group (g) can read and execute (r-x), but not write.
• The others (o) can also read and execute (r-x), but not write.

Changing Permissions with chmod

The chmod (change mode) command is used to modify permissions. You can use either symbolic notation (u+r, o-w) or a more common and precise numerical (octal) notation.

Here’s a simple way to think about the numerical values: Read is 4, Write is 2, and Execute is 1. You simply add these values together to get the number for each group. For example, rwx is 4+2+1=7, and r-x is 4+0+1=5.

Common Permissions for a Website:

• Files: A typical secure permission for files is 644. This gives the owner read/write (6) access and everyone else read-only (4) access.
• Directories: A typical secure permission for directories is 755. This allows the owner to read, write, and enter the directory (7), while others can only read and enter (5).

Command Examples: To set permissions for a file: chmod 644 my_file.php

To set permissions for a directory and all its contents (recursively): chmod -R 755 public_html

Changing Ownership with chown

The chown (change owner) command allows you to change the user and group that own a file or directory. This is particularly important for web hosting security, as you want to ensure your web server user (e.g., www-data or nginx) can access necessary files while your main user maintains control.

Syntax: chown [user]:[group] [file/directory]

Command Example: chown -R myuser:mygroup /var/www/html/mysite

This command recursively changes the owner and group of the entire mysite directory.

Best Practices for Your Website

1. Set 755 for Directories: This allows the web server to access directories to serve content while preventing others from modifying their contents.
2. Set 644 for Files: This is the standard for most website files, as it allows the server to read them but prevents public writing.
3. Never Use 777: Setting permissions to 777 (rwxrwxrwx) makes your files writable by everyone. This is a massive security risk and makes your server an easy target for malware and exploits.
4. Use chown Correctly: Ensure your main user owns the files, but the web server user has the appropriate group permissions to read and execute them.

By following this file permissions tutorial, you’ll have a strong foundation for managing your Linux file system. Correct permissions are a non-negotiable aspect of website performance and web hosting security.

At Hosting.International, our VPS hosting plans give you the control you need to fully manage and secure your server environment. Start optimizing your security and performance today!