1. Chmod Command:

chmod stands for "change mode" and is a command in Unix-like operating systems (including Linux) that is used to modify the permissions of files and directories. Permissions control who can read, write, or execute a file or directory. In Unix-like systems, permissions are divided into three categories: user, group, and others. Each category has three possible permissions: read (r), write (w), and execute (x).

The basic syntax of the chmod command is:

chmod [options] permissions file

Here are some examples of how you might use the chmod command:

• Grant read, write, and execute permissions to the owner of a file:

    chmod u+rwx filename
  

  • chmod: This is the command you're using. It stands for "change mode," and it's used to modify the permissions of a file or directory.

  • u: This refers to the "user" permission category.

  • +rwx: This part of the command indicates the changes you want to make to the permissions. + signifies adding permissions. rwx stands for read, write, and execute. So, +rwx means you're adding read, write, and execute permissions to the specified category.

  • filename: Replace this with the actual name of the file you want to modify. This is the target file for which you're changing the permissions.

• Remove write permission for the group from a file:

    chmod g-w filename
  

  • chmod: This is the command you're using, as before.

  • g: This refers to the "group" permission category.

  • -w: This part of the command indicates the changes you want to make to the permissions. - signifies removing permissions, and w stands for write. So, -w means you're removing the write permission.

  • filename: Replace this with the actual name of the file you want to modify, as before.

• Allow others to execute a script file:

    chmod o+x script.sh
  

  • chmod: This is the command you're using, as before.

  • o: This refers to the "others" permission category.

  • +x: This part of the command indicates the changes you want to make to the permissions. + signifies adding permissions, and x stands for execute. So, +x means you're adding the execute permission.

  • script.sh: Replace this with the actual name of the script file you want to modify.

• Set permissions using numeric notation (where 4 is read, 2 is write, and 1 is execute ):

    chmod 755 filename
  

  • chmod: This is the command you're using, as before.

  • 755: This is the numeric notation for setting permissions. In numeric notation, each permission is represented by a number: read (4), write (2), and execute (1). The first digit (7) represents the permissions for the owner, the second digit (5) represents the permissions for the group, and the third digit (5) represents the permissions for others.

    • For the owner (first digit), 7 is the sum of read (4), write (2), and execute (1) permissions.

    • For the group (second digit), 5 is the sum of read (4) and execute (1) permissions.

    • For others (third digit), 5 is the sum of read (4) and execute (1) permissions.

  • filename: Replace this with the actual name of the file you want to modify, as before.

  • The owner will have read, write, and execute permissions

    (4 + 2 + 1 = 7).

  • The group will have read and execute permissions

    (4 + 1 = 5).

  • Others will have read and execute permissions

    (4 + 1 = 5).

2. Chown Command:

chown stands for "change owner" and is also a command in Unix-like operating systems. It is used to change the ownership of files and directories. Ownership determines which user and group have control over a file or directory.

The basic syntax of the chown command is:

chown [options] new_owner: new_group file

Here's an example of how you might use the chown command:

• Change the owner of a file to a user named "newuser":

    chown newuser filename
  

3. ACL (Access Control List):

An Access Control List (ACL) is a more fine-grained permission system that goes beyond the traditional Unix permissions. ACLs allow you to set permissions for specific users and groups on a file or directory. This enables more complex and customizable access control.

ACLs provide additional permissions like "read_acl" (read ACL), "write_acl" (change ACL), "append_data" (write data to file even if write permission is not granted), and more.

To set ACLs, you can use the setfacl command:

• Grant read and write ACL permissions to a specific user:

    setfacl -m u:username:rw filename
  

  • setfacl: This is the command you're using to interact with Access Control Lists (ACLs).

  • -m: This option stands for "modify" and is used to specify that you want to modify the existing ACL permissions.

  • u:username: This part of the command indicates that you're setting the ACL permissions for a specific user. Replace "username" with the actual username of the user for whom you're modifying the permissions.

  • rw: These letters stand for "read" and "write" permissions. By including these letters, you're granting the specified user both read and write permissions.

  • filename: Replace this with the actual name of the file you're modifying the ACL permissions for.

• Grant read and execute ACL permissions to a specific group:

    setfacl -m g:groupname:rx directory
  

  • setfacl: This is the command you're using, as before, to interact with Access Control Lists (ACLs).

  • -m: This option stands for "modify" and indicates that you want to modify the existing ACL permissions.

  • g:groupname: This part of the command indicates that you're setting the ACL permissions for a specific group. Replace "groupname" with the actual name of the group for which you're modifying the permissions.

  • rx: These letters stand for "read" and "execute" permissions. By including these letters, you're granting the specified group both read and execute permissions.

  • directory: Replace this with the actual name of the directory you're modifying the ACL permissions for.

• View existing ACL permissions on a file or directory:

    getfacl filename
  

  • getfacl: This is the command you're using to retrieve and view the ACL permissions.

  • filename: Replace this with the actual name of the file for which you want to see the ACL permissions.

---

Keep Exploring...