The User’s Mask
Linux, like its UNIX cousin, utilizes a single variable to establish permissions
on any file created. It’s called umask, and acronym for “user mask” or
“user file creation mask.” The umask variable assigns the default permissions to
be used, on a user by user basis, when a file is created.
On the surface, the umask system looks a bit complex. By typing umask into a
console windows, you’ll see how umask is currently set for your user. Most
likely, it’s set at 022, allowing the owner read, write and execute access, the
group and all others read and execute permissions.
If you read that last paragraph closely, you’re already starting to catch on to
the seemingly tricky umask convention. It takes into account the same set of
possible users as the normal permissions structure: owner, group and world. The
difference is in how the settings are numerically represented.
umask uses the following numbers for permissions:
0 – read, write and execute
1 – read and write
2 – read and execute
3 – read only
4 – write and execute
5 – write only
6 – execute only
7 – no permissions
Now, let’s apply this to the default we noted above: 022. The first bit is the
owner bit. Set to 0, the owner will, by default, have read, write and execute
permissions on any file created with the 022 umask variable. The second bit is
the group bit. With the umask set to 2 for the group bit, anyone in the group
will be able to read and execute the file, but not write to it. In this case,
the other (or world) bit is also set to 2, granting the same permissions as the
So how do you tweak your umask settings? Simple. Enter the command umask
followed by the new default permissions:
[email protected] ~ $ umask 027
This value would set the following permissions on all files I create going
owner – read, write and execute
group – read and execute
world – no permissions; cannot read, write or execute
Remember, if you chosse to tweak this setting, it will affect the permissions on
all the files you create going forward. Don’t forget that you’re setting the
default permissions when setting umask.
It’s another fine example of the complete configurability of Linux. You didn’t
know penguins were so flexible, did you?