Question 1

Why does chmod 777 pose a critical security risk?

Accepted Answer

chmod 777 grants Read, Write, and Execute permissions to absolutely everyone on the system (User, Group, and Others/World). On shared hosts or servers running web daemons, any compromised service can overwrite or execute malicious code inside a 777 folder.

Question 2

What does the Execute bit do on a directory vs a file?

Accepted Answer

On a regular file, Execute (x) allows the file to run as a binary program or script. On a directory, Execute (x) is known as the search/traverse permission: it allows users to 'cd' into the directory and access files inside, even if directory listing (Read) is disabled.

Question 3

What is the Sticky Bit (chmod 1777)?

Accepted Answer

The sticky bit (indicated by 't' in the others execute position) restricts file deletion in world-writable directories like /tmp. When set, only the owner of a file (or root) can delete or rename that file, preventing malicious users from wiping other users' temporary files.

Question 4

How do SUID and SGID permissions work?

Accepted Answer

SUID (Set User ID, 4000) causes an executable to run with the permissions of the file owner rather than the user running it (such as the /usr/bin/passwd utility which runs as root). SGID (Set Group ID, 2000) runs with group privileges or ensures files created inside a directory inherit the directory's group.

Question 5

Why does SSH refuse to connect with 'UNPROTECTED PRIVATE KEY FILE'?

Accepted Answer

OpenSSH requires that private key files (e.g. ~/.ssh/id_rsa or AWS .pem files) be protected against group and world access. If permissions are too open (like 644 or 755), SSH client intentionally aborts. Running 'chmod 600 key.pem' or 'chmod 400 key.pem' resolves this.

Scope	Read (r = 4)	Write (w = 2)	Execute (x = 1)	Octal Sum
User (Owner) File creator or owner				7
Group Users in file's group				5
Others (World) All other system users				5

Octal Digit	Binary Representation	Symbolic	Permissions Granted	Calculation Formula
7	111	rwx	Read, Write, and Execute (Full Control)	4 + 2 + 1 = 7
6	110	rw-	Read and Write (No Execution)	4 + 2 + 0 = 6
5	101	r-x	Read and Execute (No Modification)	4 + 0 + 1 = 5
4	100	r--	Read Only	4 + 0 + 0 = 4
0	000	---	No Permissions (Completely Denied)	0 + 0 + 0 = 0

Standard Use Case	Octal	Symbolic	Security Rationale
Web Root Directories	755	drwxr-xr-x	Allows Nginx/Apache to enter and traverse directories while preventing web visitors from modifying them.
Static Web Files & Images	644	-rw-r--r--	Web visitors can read HTML/CSS/images, but execution is blocked, mitigating remote code execution exploits.
SSH Private Keys	600	-rw-------	OpenSSH strictly rejects private keys with looser permissions to prevent other users on the host from snooping.
Environment & Secrets (.env)	600 or 400	-rw-------	Prevents neighboring Linux user accounts and unprivileged daemons from reading database passwords.
World-Writable /tmp with Sticky	1777	drwxrwxrwt	Any process can write temporary cache files, but the sticky bit stops users from deleting each other's files.

Chmod Permissions Calculator & Command Builder

Linux Permission Values & Octal Digit Math

Common Linux Server Security Permission Profiles

How to Calculate & Apply Linux Permissions in 4 Steps

Select Scope Bits

Type or Read Octal

Set Target & Flags

Copy Command

Frequently Asked Questions About Linux Chmod Permissions

Client-Side Privacy Guarantee