ToolZeno

Unix Permission Calculator

Calculate, convert, visualize, and generate chmod commands for Unix/Linux file permissions with real-time Octal, Symbolic, Binary, and Security risk analysis.

100% Client-Side Engine

Unix Permission Calculator & chmod Builder

Calculate, convert, and inspect Unix file permissions with real-time Octal, Symbolic, Binary, and chmod command generators.

8
Octal Notation

Example: 755, 644, 4755

Symbolic Notation

Example: rwxr-xr-x, rw-r--r--

Binary Representation
111 101 101

Bitmask (Owner Group Others)

Interactive Permission Editor

Toggle checkboxes to instantly calculate octal numbers, symbolic strings, and chmod commands.

Target Role
Read (r)Score +4
Write (w)Score +2
Execute (x)Score +1
Quick Action
Owner (u)
File creator / user
Group (g)
Assigned group members
Others (o)
All other world users

Special Permissions (Advanced Flags)

chmod Command Generator

Copy ready-to-use terminal commands for Linux, macOS, and Unix shells.

Numeric Command Syntax (Recommended)
chmod 755 filename
Symbolic Command Syntax
chmod u=rwx,g=rx,o=rx filename

Security & Best Practice Analysis

SAFE & STANDARD

Secure & Standard Configuration

Permissions follow security best practices. No dangerous access combinations detected.

Best Practice Recommendations
  • Industry standard permission for directories, CGI scripts, and CLI binaries.

Access Privileges Breakdown

Owner (User)

Applies to the specific user account that owns the file or directory.

Read (r) Allowed
Write (w) Allowed
Execute (x) Allowed

Group

Applies to all user accounts that belong to the file's assigned group.

Read (r) Allowed
Write (w) Denied
Execute (x) Allowed

Others (World)

Applies to all other users on the operating system.

Read (r) Allowed
Write (w) Denied
Execute (x) Allowed

Numeric Octal Addition Formula

Owner (User / u)
7
Symbolic: rwx
4 (Read) + 2 (Write) + 1 (Execute) = 7
Group (g)
5
Symbolic: r-x
4 (Read) + 1 (Execute) = 5
Others (World / o)
5
Symbolic: r-x
4 (Read) + 1 (Execute) = 5
Combining digits yields octal 755755

Common Use-Case Presets

Special Permissions Reference Guide

Special permissions modify standard Unix file access mechanisms. They occupy the 4th leading octal digit or replace the execute flag (x) with s, S, t, or T in symbolic notation.

SUID (Set User ID)+4000

Execute as File Owner

When an executable file with SUID is run, it executes with the permissions of the file owner (e.g. root) rather than the user invoking it.

Example: The `/usr/bin/passwd` command has SUID set so regular users can modify their password entry in `/etc/shadow`.
Command: chmod u+s file
SGID (Set Group ID)+2000

Execute as Group / Directory Inheritance

For executable files: runs with group rights of file owner. For directories: new files created inside inherit the directory's group ownership.

Example: Shared team directory `/var/www/project` configured with `chmod 2775` so all created files belong to the web team group.
Command: chmod g+s file
Sticky Bit+1000

Restricted Deletion Flag

When set on a directory, only the file owner or root user can delete or rename files inside that directory, even if others have write access.

Example: System `/tmp` and `/var/tmp` directories (`chmod 1777`), allowing all users to create temp files without deleting files belonging to other users.
Command: chmod o+t file

Operating System & Platform Comparison

Linux (Ubuntu, RHEL, Debian)

Full support for standard POSIX octal/symbolic permissions, SUID, SGID, and Sticky Bit flags. ACLs (Access Control Lists) can be viewed using getfacl and set with setfacl.

macOS & BSD Unix

Uses standard POSIX permissions in Darwin BSD terminal shell. Extended ACLs are heavily utilized by Finder and System Integrity Protection (SIP). View extended attributes using ls -le or xattr.

Windows (NTFS File System)

Windows uses NTFS Access Control Lists (ACLs) rather than Unix POSIX permissions. Commands like chmod are not natively supported in Windows CMD/PowerShell unless running inside WSL (Windows Subsystem for Linux) or Git Bash.

Understanding Unix & Linux File Permissions

In POSIX-compliant operating systems such as Linux, macOS, and BSD, access control for every file and directory is governed by a file permission mode. The operating system enforces access rules by evaluating rights assigned across three distinct target roles: the file Owner (u), the assigned Group (g), and all Others / World (o).

Permissions are expressed in two primary formats: Octal Notation (numerical values like 755 or 644) and Symbolic Notation (string sequences like rwxr-xr-x or rw-r--r--). The Toolzeno Unix Permission Calculator provides real-time conversion, security risk inspection, and executable chmod command generation.

Permission Bit Values & Octal Math

Each role contains three basic permission bits. Octal values are calculated by summing the numerical scores of active rights:

Read (r) = 4Bit 100

Grants permission to view file contents or list directory files using ls.

Write (w) = 2Bit 010

Grants permission to edit file contents, modify, create, or delete files inside directories.

Execute (x) = 1Bit 001

Grants permission to execute binaries/scripts or enter directories (traverse with cd).

Special Permissions: SUID, SGID, and Sticky Bit

In addition to standard Read/Write/Execute bits, Unix supports three special permission flags represented as a 4th leading octal digit:

  • SUID (Set User ID = 4000): Appears as s in owner execute field (e.g. rwsr-xr-x). Executes binaries under the rights of the file owner.
  • SGID (Set Group ID = 2000): Appears as s in group execute field (e.g. rwxr-sr-x). Forces newly created files inside a directory to inherit group ownership.
  • Sticky Bit (= 1000): Appears as t in others execute field (e.g. rwxrwxrwt). Ensures users can only delete or rename their own files inside world-writable directories like /tmp.

Common Unix Permission Standards

OctalSymbolicDescriptionStandard Recommendation
600rw-------Private Owner Read/WriteSSH private keys (~/.ssh/id_rsa), .env secrets
644rw-r--r--Standard Public FileHTML, CSS, JS, static web server documents
755rwxr-xr-xStandard Public DirectoryWeb directories, shell scripts, CLI binaries
700rwx------Private DirectorySSH key folders (~/.ssh), private backup stores
1777rwxrwxrwtSticky Bit Temp FolderShared system temp folders (/tmp, /var/tmp)

100% Client-Side Privacy Guarantee

Toolzeno processes all file permission calculations, conversions, and command generation locally inside your browser sandbox. No file names, server data, or permission configurations are transmitted to remote servers.

Frequently Asked Questions

Unix file permissions assign access rights for three distinct user target roles: Owner (user), Group, and Others (world). For each role, three access privileges can be granted: Read (r = 4), Write (w = 2), and Execute (x = 1). Adding the privilege scores produces an octal digit between 0 and 7 for each role.

Octal notation uses numerical digits (e.g. 755 or 644) where each digit represents the combined sum of Read (4), Write (2), and Execute (1) permissions. Symbolic notation uses a 9-character string representation (e.g. rwxr-xr-x) indicating granted privileges with letters 'r', 'w', 'x' or hyphen '-' when denied.

SUID (Set User ID, +4000) causes an executable file to run with the permissions of the file owner (e.g. root). SGID (Set Group ID, +2000) causes executables to run with group rights or directories to automatically pass group ownership down to new files. Sticky Bit (+1000) restricts file deletion in world-writable directories (like /tmp) to the file creator only.

Permission 777 (rwxrwxrwx) grants read, write, and execute permissions to everyone on the operating system. Any user, background service, or malicious script can alter, replace, or delete files in a 777 directory, posing a severe security hazard.

Numeric syntax sets exact explicit permission bits across all roles at once (e.g. chmod 755 file). Symbolic syntax modifies specific permission bits relative to existing rights (e.g. chmod u+rwx,g+rx,o+rx file or chmod o-w file). Both syntaxes are generated live by this calculator.

Yes, 100%. Toolzeno performs all permission math, conversion, validation, and command generation locally inside your browser client-side. No permission data or server inputs are ever transmitted.

Related Tools

Password Generator

Generate highly secure, custom passwords in bulk with estimated entropy analysis and complexity metrics.

Open Tool

Passphrase Generator

Generate highly secure random passphrases in bulk using Diceware, BIP-39 lists, and custom rules.

Open Tool

Random String Generator

Generate cryptographically secure random strings in bulk with customizable sets, exclusions, separators, and URL-safety constraints.

Open Tool

Secure Token Generator

Generate cryptographically secure random tokens, JWT secrets, CSRF tokens, API keys, and symmetric encryption keys client-side.

Open Tool