How to set default permissions?

In Linux, you can set default permissions for newly created files and directories using the umask command. The umask value determines the default permission settings by specifying which permissions should be masked (i.e., removed) when a new file or directory is created.

Understanding umask

1. Default Permissions:

   • By default, files are created with permissions of 666 (read and write for owner, group, and others) and directories with 777 (read, write, and execute for owner, group, and others).
   • The umask value is subtracted from these defaults to determine the actual permissions.

2. Calculating Permissions:

   • For example, if your umask is set to 022, the permissions for new files will be:
     • Default: 666
     • Umask: 022
     • Resulting permissions: 644 (read and write for owner, read for group and others).
   • For directories, with a umask of 022, the permissions will be:
     • Default: 777
     • Umask: 022
     • Resulting permissions: 755 (read, write, and execute for owner, read and execute for group and others).

Setting umask

1. Check Current umask:
   To see the current umask value, run:

   umask

2. Set umask Temporarily:
   You can set a new umask value for the current session by running:

   umask 027

   This will set the default permissions to 750 for directories and 640 for files.

3. Set umask Permanently:
   To make the change permanent, add the umask command to your shell's configuration file:

   • For Bash, add it to ~/.bashrc or ~/.bash_profile:

     echo "umask 027" >> ~/.bashrc

   • For Zsh, add it to ~/.zshrc:

     echo "umask 027" >> ~/.zshrc

4. Apply Changes:
   After editing the configuration file, apply the changes by running:

   source ~/.bashrc

   or restart your terminal session.

Example of Setting umask

To set a umask that allows the owner to read and write, while the group can only read, and others have no permissions:

umask 027

Best Practices

• Choose a umask that aligns with your security needs. For example, a umask of 077 is very restrictive, allowing only the owner to read and write.
• Regularly review your umask settings, especially on shared systems, to ensure they meet your security requirements.

Further Learning

To explore more about file permissions and management, consider checking out LabEx labs focused on Linux file systems and permissions.

If you have more questions or need further clarification, feel free to ask!