Permissions & Security (Chmod/Chown/ACLs/SELinux/AppArmor)

Stop fighting with setgid to keep group ownership consistent

🧩 The Challenge

Setting up a shared directory for a dev team is a total nightmare when files keep getting created with the wrong group owner. You spend half your day running chgrp recursively just because someone’s umask is being difficult.

💡 The Fix

Flip the setgid bit on the parent directory so that every new file automatically inherits the group of the directory, not the primary group of the user. It’s the easiest way to keep a team project from turning into a permission circus.

chmod g+s /path/to/shared/directory

⚙️ Why It Works

Setting this bit tells the kernel that any new entry inside that folder needs to match the group of the folder itself, regardless of who created the file. It saves you from having to audit every single file upload or save operation.

🚀 Pro-Tip: Combine this with a default ACL if you need even tighter control over permissions for new files.

Linux Tips & Tricks | © ngelinux.com | 10/7/2026