Skip to content

Linux File Permissions

Ethan W edited this page Sep 17, 2026 · 7 revisions

Linux File Permissions

Users & Groups

Symbol Meaning
u User / Owner
g Group
o Others
a All

Permission commands

Command Purpose
chown Change Owner
chmod Change Permissions (rwx): read, write, execute
chgrp Change Group Ownership
setfacl Give specific access (User or Group)
getfacl Verify access (User or Group)

chown

User

sudo chown [username] [file]

Group

sudo chown :[groupname] [file]

User + Group Owner

sudo chown [username]:[group] [file]

chmod

Permission Number Chart

Number Permissions Symbol
0 None ---
1 Execute --x
2 Write -w-
3 Write + Execute -wx
4 Read r--
5 Read + Execute r-x
6 Read + Write rw-
7 Read + Write + Execute rwx
chmod 640 [file]
      │││
      ││└── Others 
      │└─── Group 
      └──── User / Owner 

chgrp

sudo chgrp [group] [file]

setfacl

User & Group

setfacl -m u:[username]:--- [file]
setfacl -m g:[group]:--- [file]
symbols permissions
--- none
r Read
w Write
x Execute
rw Read + Write
rx Read + Execute
rwx Read + Write + Execute

Remove ACL

User & Group

setfacl -x u:[username] [file]
setfacl -x g:[group] [file]

getfacl

getfacl [file]

Creating Users & Groups

Lab Environment

  • Proxmox
  • Windows
  • Active Directory
  • Linux
  • Pfsense

Lab01 — FW & Windows Client

Pfsense Configuration

Firewall


wks01 Configuration

Network Configuration

User & Group Configuration

Tech Terms


Lab 02 | DNS + ADDS Role

ad01 Configuration

DNS Manager

Joining Domains



Lab 03 | Linux (Rocky)

dhcp01 Configuration

Users & Groups

Extra Linux Commands


Lab 4 | DHCP (Rocky Linux)

dhcp01 Configuration

PuTTY + Enhanced Explorer security configuration (IE ESC)

Configure DHCP & Firewall Services

User & Group File Permissions

Securing SSH

DORA (DHCP Handshake)


Lab 5 | ADDS and Group Policy

ad01 Configuration

OU (Organizational Unit)

Group Policy Management


Lab 6 | Assessment

Environment Configurations


Lab 7 | Server Core / Remote Administrator Tools

FS01 - Windows Core


Clone this wiki locally