Understanding umask - Default permission calculation

Learning Objectives

By the end of this lab exercise, you will be able to:

1. Understand what umask is and how it affects file creation

2. Display and interpret current umask values

3. Calculate effective permissions using umask values

4. Modify umask settings temporarily and permanently

5. Understand the difference between umask for files vs directories

6. Configure umask for enhanced security in different scenarios

7. Troubleshoot permission issues related to umask misconfiguration

Key Concepts Covered

• umask Definition: User file creation mask concept

• Permission Calculation: How umask subtracts from maximum permissions

• Default Permissions: System defaults for files (666) and directories (777)

• Octal vs Symbolic umask: Different ways to express umask values

• Security Implications: How umask affects system security

• Inheritance: How umask values are inherited by child processes

Theory Background

What is umask? umask (user file creation mask) is a command and a system setting that determines the default permissions assigned to newly created files and directories. It works by "masking" or removing permissions from the maximum allowable permissions.

Default Maximum Permissions:

• Files: 666 (rw-rw-rw-)

• Directories: 777 (rwxrwxrwx)

How umask Works: umask uses subtraction logic:

• Effective Permission = Maximum Permission - umask Value

• umask 022 on a file: 666 - 022 = 644 (rw-r--r--)

• umask 022 on a directory: 777 - 022 = 755 (rwxr-xr-x)

Common umask Values:

• 022: Standard for most users (owner: full, group/others: read-only)

• 002: Group collaboration (owner/group: full, others: read-only)

• 077: High security (owner: full, group/others: no access)

• 000: No restrictions (not recommended for security)