<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: File Permissions</title>
	<atom:link href="http://nixshell.wordpress.com/2007/01/25/file-permissions/feed/" rel="self" type="application/rss+xml" />
	<link>http://nixshell.wordpress.com/2007/01/25/file-permissions/</link>
	<description>UNIX / Linux Shell Hints and Tips&#160;&#160;&#160;&#160;&#160;&#160;(a http://steve-parker.org/sh/sh.shtml subproject)</description>
	<lastBuildDate>Sun, 31 Mar 2013 18:54:44 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>By: unixshell</title>
		<link>http://nixshell.wordpress.com/2007/01/25/file-permissions/#comment-12</link>
		<dc:creator><![CDATA[unixshell]]></dc:creator>
		<pubDate>Sun, 11 Feb 2007 21:24:31 +0000</pubDate>
		<guid isPermaLink="false">http://nixshell.wordpress.com/2007/01/25/file-permissions/#comment-12</guid>
		<description><![CDATA[Absolutely. The sticky bit on a directory (nomally used in /tmp): &lt;code&gt;chmod 1777 /tmp&lt;/code&gt; or &lt;code&gt;chmod a+t /tmp&lt;/code&gt;
This means that files within that directory can be deleted or renamed only by their owner. &lt;code&gt;/tmp&lt;/code&gt; is usually 1777 (-rwxrwxrwt) so that anybody can write there, but they can&#039;t rename or delete other users&#039; files.

The phrase &quot;sticky bit&quot; when talking about  a file can mean one two things; on older UNIX systems it meant that the file should not be swapped out of RAM. On modern systems (such as Linux) it refers to the &quot;&lt;code&gt;chmod u+s&lt;/code&gt;&quot; syntax, which tells the system that, although the file has been run by (say, a normal user called &quot;steve&quot;), because it is (a) owned by (typically) root and has the sticky bit set (-rwxr-sr-x), then it will actually be executed with root permissions. This is one reason why you can&#039;t &quot;donate&quot; your files to another user: &quot;steve$ chown root myfile&quot; because it could be used to escalate your privileges. With this mechanism, root must explicitly set the sticky bit on specific (trusted) binaries. The sticky bit can&#039;t be set on shell scripts.]]></description>
		<content:encoded><![CDATA[<p>Absolutely. The sticky bit on a directory (nomally used in /tmp): <code>chmod 1777 /tmp</code> or <code>chmod a+t /tmp</code><br />
This means that files within that directory can be deleted or renamed only by their owner. <code>/tmp</code> is usually 1777 (-rwxrwxrwt) so that anybody can write there, but they can&#8217;t rename or delete other users&#8217; files.</p>
<p>The phrase &#8220;sticky bit&#8221; when talking about  a file can mean one two things; on older UNIX systems it meant that the file should not be swapped out of RAM. On modern systems (such as Linux) it refers to the &#8220;<code>chmod u+s</code>&#8221; syntax, which tells the system that, although the file has been run by (say, a normal user called &#8220;steve&#8221;), because it is (a) owned by (typically) root and has the sticky bit set (-rwxr-sr-x), then it will actually be executed with root permissions. This is one reason why you can&#8217;t &#8220;donate&#8221; your files to another user: &#8220;steve$ chown root myfile&#8221; because it could be used to escalate your privileges. With this mechanism, root must explicitly set the sticky bit on specific (trusted) binaries. The sticky bit can&#8217;t be set on shell scripts.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mafr</title>
		<link>http://nixshell.wordpress.com/2007/01/25/file-permissions/#comment-11</link>
		<dc:creator><![CDATA[mafr]]></dc:creator>
		<pubDate>Sun, 11 Feb 2007 15:12:13 +0000</pubDate>
		<guid isPermaLink="false">http://nixshell.wordpress.com/2007/01/25/file-permissions/#comment-11</guid>
		<description><![CDATA[The real magic begins with things like the sticky bit (&quot;chmod 1777 directory&quot;) or the setuid and setgid bits :)]]></description>
		<content:encoded><![CDATA[<p>The real magic begins with things like the sticky bit (&#8220;chmod 1777 directory&#8221;) or the setuid and setgid bits <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
</channel>
</rss>
