Permissions & Security (Chmod/Chown/ACLs/SELinux/AppArmor)

Stop fighting with file permissions when standard modes just aren’t enough

🧩 The Challenge

You know that classic headache where a directory needs to be writable by a specific group, but also accessible by a service account that shouldn’t own the files? Chmod will drive you insane trying to juggle that.

💡 The Fix

Start using POSIX Access Control Lists instead of forcing your directory tree into a rigid owner-group structure that doesn’t actually fit your workflow. It’s the only way to give granular access without breaking the primary owner’s sanity.

setfacl -m g:developers:rwx /var/www/project/data
getfacl /var/www/project/data

⚙️ Why It Works

These lists allow you to assign multiple user or group permissions to a single file or directory, ignoring the traditional three-tier restriction. It basically adds a layer of specific overrides on top of the standard bitmask.

🚀 Pro-Tip: Run mount -o remount,acl / to make sure your filesystem actually supports them if you get a “not supported” error.

Linux Tips & Tricks | © ngelinux.com | 9/12/2026