Permissions & Security (Chmod/Chown/ACLs/SELinux/AppArmor)

Stop fighting over which users can actually touch those legacy directories

🧩 The Challenge

You know that feeling when you have a shared directory for a dev team, but then a new hire needs access to just one subfolder without you giving them sudo or changing the primary group of every single file? I’ve spent way too many Friday afternoons hacking together ugly group-sharing workarounds that just lead to more permission denied errors.

💡 The Fix

Get off the basic chmod-only train and start using POSIX Access Control Lists to grant granular rights without remapping your entire directory structure. It’s the difference between a blunt instrument and a scalpel.

setfacl -m u:newuser:rx /path/to/shared/data
getfacl /path/to/shared/data

⚙️ Why It Works

Access Control Lists bypass the standard user-group-other model by allowing you to attach specific permission sets to individual users on a file or folder. Since you aren’t messing with the base ownership, the original owner keeps their sanity and you stop breaking their scripts.

🚀 Pro-Tip: Keep an eye out for that plus sign at the end of your ls -l output, because it’s the only sign that an ACL is hiding on your file.

Linux Tips & Tricks | © ngelinux.com | 10/5/2026