470
r--rwx---
-r--rwx---
chmod 470 — the r--rwx--- permission
470 is r--rwx---. The owner gets r, and everyone else is shut out.
Who can do what
Three rows for owner, group and others; three columns for read, write and execute. On a folder that last one means the right to go inside.
| Read | Write | Execute | |
|---|---|---|---|
| Owner4 | ✓ | · | · |
| Group7 | ✓ | ✓ | ✓ |
| Others0 | · | · | · |
On a folder the execute bit means going inside. With read but no execute you can list the names yet open nothing in it.
- Symbolic
- r--rwx---
- ls -l (file)
- -r--rwx---
- ls -l (directory)
- dr--rwx---
- chmod symbolic form
- chmod u=r,g=rwx,o=
- Command
- chmod 470 <file>
- Binary
- 100111000
- Decimal
- 312
- umask (directory)
- 307
- umask (file)
- Not reachable — new files never start with the execute bit
One digit away
How to read this
- Read is 4, write 2, execute 1; add them for one digit. 7 is 4+2+1, 5 is 4+1.
- The digits are owner, group, others, left to right.
- umask is what gets taken away: from 777 for directories, from 666 for files.
- Special bits (setuid 4000, setgid 2000, sticky 1000) add a fourth digit in front — /tmp is 1777.
Frequently asked questions
Q. What does chmod 470 mean?
It is r--rwx---. ls -l shows a file as -r--rwx--- and a directory as dr--rwx---.
Q. How is 470 written in rwx form?
It is the same as chmod u=r,g=rwx,o=.
Q. What can other people do with 470?
Nothing. Only the owner and the group get in.
Q. Which umask produces 470?
307 for directories. For files it cannot be reached by umask alone, since new files never carry the execute bit.