mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-01-28 23:20:10 +08:00
Merge pull request #3905 from ynmlml/patch-5
Delete 20160218 Getting to Know Linux File Permissions.md
This commit is contained in:
Ezio
commit
879f7fda15
@ -1,163 +0,0 @@
|
||||
ynmlml translating
|
||||
Getting to Know Linux File Permissions
|
||||
==========================================
|
||||
初识Linux文件系统
|
||||
==========================================
|
||||
|
||||
|
||||
One of the most basic tasks in Linux is setting file permissions. Understanding how this is done should be considered a must-know, first step in your travels through the Linux ecosystem. As you might expect, such a fundamental issue within the operating environment hasn’t changed much over the years. In fact, the Linux file permission system is taken directly from the UNIX file permission (and even uses many of the same tools).
|
||||
在Linux中最基本的任务就是设置文件权限。理解如何实现是你进入LInux世界的第一步。如您所料，这一基本操作在类UNIX操作系统中大同小异。实际上，Linux文件权限系统就直接来取自UNIX文件权限（甚至使用许多相同的工具）。
|
||||
|
||||
But, don’t think for a second that understanding file permissions is something you’ll wind up having to spend days and days studying...it’s actually quite simple. Let’s walk through what you need to know and how to put it all together.
|
||||
但不要以为在学习第二种文件权限的时候你需要再次一点一点的学起。事实上会很简单，让我们一起来看看你需要了解哪些内容以及如何使用它们。
|
||||
|
||||
## The Bits and Pieces
|
||||
##预备小知识
|
||||
|
||||
The first thing you need to understand is what file permissions apply to. Effectively what you do is apply a permission to a group. When you break it down, the concept really is that simple. But what are the permissions and what are the groups?
|
||||
首先你要知道文件权限有什么用，有效的设置一个组的权限。当你将其分解，那这个概念就真的很简单了。那到底什么是权限什么是组呢。
|
||||
|
||||
There are three types of permissions you can apply:
|
||||
你可以设置的3种权限：
|
||||
|
||||
- read — gives the group permission to read the file (indicated with `r`)
|
||||
- 读 — 允许该组读文件（用`r`表示）
|
||||
|
||||
- write — gives the group permission to edit the file (indicated with `w`)
|
||||
- 写 — 允许该组写文件（用`w`表示）
|
||||
|
||||
- execute — gives the group permission to execute (run) the file (indicated with `x`)
|
||||
- 执行 — 允许该组执行(运行)文件（用`x`表示）
|
||||
|
||||
To better explain how this is applied to a group, you could, for example, give a group permission to read and write to a file, but not execute the file. Or, you could give a group permission to read and execute a file, but not write to a file. You can even give a group full permission to read, write, and execute a file or strip a group of any access to a file by removing all permissions.
|
||||
为了更好的解释为何是应用于一个组，你可是尝试允许一个组读和写一个文件，但不能执行。或者你可以允许一个组读和执行一个文件，但不能写。甚至你可以允许一组有读、写、执行全部的权限，也可以删除全部权限。
|
||||
|
||||
Now, what are the groups? There are four:
|
||||
那什么是分组呢，有以下4个：
|
||||
|
||||
- user — the actual owner of the file
|
||||
|
||||
- group — users in the file’s group
|
||||
|
||||
- others — other users not in the file’s group
|
||||
|
||||
- all — all users
|
||||
- user — 文件实际的拥有者
|
||||
- group — 用户所在的组
|
||||
- others — 用户组内的其他用户
|
||||
- all — 所有用户
|
||||
For the most part, you will only really ever bother with the first three groups. The all group is really only used as a shortcut (I’ll explain later).
|
||||
大多数情况，你只会对前3组进行操作，all这一组只是作为快捷方式（稍后我会解释）。
|
||||
|
||||
So far so simple, right? Let’s layer on a bit of complexity.
|
||||
|
||||
If you open up a terminal window and issue the command ls -l, you will see a line-by-line listing of all files and folders within the current working directory (Figure 1 above).
|
||||
|
||||
If you look in the far left column, you’ll notice listings like `-rw-rw-r--`.
|
||||
|
||||
That listing should actually be looked at like so:
|
||||
|
||||
>rw- rw- r--
|
||||
|
||||
As you can see, the listing is broken into three sections:
|
||||
|
||||
- rw-
|
||||
|
||||
- rw-
|
||||
|
||||
- r--
|
||||
|
||||
The order is quite important...for both permissions and for groups. The order is always:
|
||||
|
||||
- User Group Others — for groups
|
||||
|
||||
- Read Write Execute — for permissions
|
||||
|
||||
In our permissions listing example above, the User has read/write permission, the Group has read/write permission, and Others has only read permission. Had any of those groups been given executable permissions, it would have been represented with an x.
|
||||
|
||||
## Numerical Equivalent
|
||||
|
||||
Let’s make this even more complex. Each permission can also be represented by a number. The numbers are:
|
||||
|
||||
- Read — 4
|
||||
|
||||
- Write — 2
|
||||
|
||||
- Execute — 1
|
||||
|
||||
The numerical substitution isn’t an apples to apples change. You can’t drop in:
|
||||
|
||||
>-42-42-4--
|
||||
|
||||
Instead, what you do is add up the numbers you want for each group. Let’s stick with our example above (`-rw-rw-r—`). To give the User group read and write permission, you would add up 4+2 to get 6. For the Group, you need the same permissions, so they get the same number. You only want Others to have read permissions, so they get 4. The numerical equivalent is now:
|
||||
|
||||
>664
|
||||
|
||||
So, if you want to give a file 664 permissions, you’d issue the chmod command like this:
|
||||
|
||||
>chmod 664 FILENAME
|
||||
|
||||
where FILENAME is the name of the file.
|
||||
|
||||
## Changing Permissions
|
||||
|
||||
Now that you understand the actual permissions of files, it’s time to learn how to change those permissions. This is done with the chmod command. One of the first things you must understand is that, to be able to change the permissions of a file, either you must be the owner of the file or you must have permission to edit the file (or have admin access by way of su or sudo). Because of that, you cannot just jump around in the directory structure and change permissions of files at will.
|
||||
|
||||
Let’s stick with our example (`-rw-rw-r--`). Suppose this file (we’ll name it script.sh) is actually a shell script and needs to be executed...but you only want to give yourself permission to execute that script. At this point, you should be thinking, “Ah, then I need the permission listing to read `-rwx-rw-r--`!”. To get that `x` bit in there, you’d run the chmod command like so:
|
||||
|
||||
>chmod u+x script.sh
|
||||
|
||||
At this point, the listing will be -rwx-rw-r--.
|
||||
|
||||
If you wanted to give both User and Group executable permission, the command would look like:
|
||||
|
||||
>chmod ug+x script.sh
|
||||
|
||||
See how this works? Let’s make it interesting. Say, for whatever reason, you accidentally give all groups executable permissions for that file (so the listing looks like `-rwx-rwx-r-x`). If you want to strip Others of executable permissions, issue the command:
|
||||
|
||||
>chmod o-x script.sh
|
||||
|
||||
What if you want to completely remove executable permission from the file? You can do that two ways:
|
||||
|
||||
>chmod ugo-x script.sh
|
||||
|
||||
or
|
||||
|
||||
>chmod a-x script.sh
|
||||
|
||||
That’s where all comes into play. This is used to make the process a bit more efficient. I prefer to avoid using a as it could lead to issues (such as, when you accidentally issue the command chmod `a-rwx` script.sh).
|
||||
|
||||
## Directory Permissions
|
||||
|
||||
You can also execute the chmod command on a directory. When you create a new directory as a user, it is typically created with the following permissions:
|
||||
|
||||
>drwxrwxr-x
|
||||
|
||||
NOTE: The leading d indicates it is a directory.
|
||||
|
||||
As you can see, both User and Group have executable permission for the folder. This does not mean that any files created in the folder will have the same permissions (files will be created with the default system permissions of `-rw-rw-r--`). But, suppose you do create files in this new directory, and you want to strip Group of write permissions. You don’t have to change into the directory and then issue the chmod command on all the files. You can add the R option (which means recursive) to the chmod command and change the permission on both the folder and all the containing files.
|
||||
|
||||
Now, suppose our example is a folder named TEST and within it is a number of scripts — all of which (including the TEST folder) have permissions `-rwxrwxr-x`. If you want to strip Group of write permissions, you could issue the command:
|
||||
|
||||
>chmod -R g-w TEST
|
||||
|
||||
If you now issue the command ls `-l`, you will see the TEST folder now has a permission listing of `drwxr-xr-x`. Group has been stripped of its write permissions (as will all the files within).
|
||||
|
||||
## Permission to Conclude
|
||||
|
||||
At this point, you should now have a solid understand of the basic Linux file permissions. There are more advanced issues that you can now easily study, such as setuid and setgid and ACLs. Without a good foundation of the basics, however, you’d quickly get lost with those next-level topics.
|
||||
|
||||
Linux file permissions haven’t changed much, since the early days. And, they most likely won’t change much going into the future.
|
||||
|
||||
|
||||
------------------------------------------------------------------------------
|
||||
|
||||
via: http://www.linux.com/learn/tutorials/885268-getting-to-know-linux-file-permissions
|
||||
|
||||
作者：[Jack Wallen][a]
|
||||
译者：[译者ID](https://github.com/译者ID)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]:http://www.linux.com/community/forums/person/93
|
||||
Loading…
Reference in New Issue
Block a user