1. Octal vs Symbolic Command Syntax
The chmod command supports two distinct syntax paradigms:
Octal / Numeric Mode
Replaces all permissions on the target file with the exact octal mask specified.
chmod 755 script.sh
chmod 644 document.txt
chmod 600 id_rsa
chmod 644 document.txt
chmod 600 id_rsa
Symbolic Mode Operators
Modifies permissions incrementally using operators: + (add), - (remove), = (set explicitly).
chmod +x script.sh
chmod u=rw,go=r file.txt
chmod g-w,o-rwx secret.key
chmod u=rw,go=r file.txt
chmod g-w,o-rwx secret.key
2. Essential Chmod Command Flags
| Flag | Name | Function |
|---|---|---|
| -R, --recursive | Recursive | Change files and directories recursively across all subfolders. |
| -v, --verbose | Verbose | Output a diagnostic message for every file processed. |
| -c, --changes | Changes Only | Like verbose, but reports only when a change is actually made. |
| -f, --silent | Quiet | Suppress most error messages (e.g. permission warnings on protected files). |
3. Real-World Production Recipes
Web Application Directory Setup (WordPress, Laravel, Node)
Safely set directories to 755 and static files to 644 without breaking folder traversal:
sudo chown -R www-data:www-data /var/www/site
sudo find /var/www/site -type d -exec chmod 755 {} +
sudo find /var/www/site -type f -exec chmod 644 {} +
sudo find /var/www/site -type d -exec chmod 755 {} +
sudo find /var/www/site -type f -exec chmod 644 {} +
Git Hooks & CI/CD Scripts
Ensure shell scripts and git hooks are executable by the owner:
chmod +x .husky/pre-commit
chmod 755 scripts/deploy.sh
chmod 755 scripts/deploy.sh
Lock Down Cloud & Server Secrets
Prevent non-owner processes from reading production API keys and database credentials:
chmod 600 .env .env.production
chmod 600 ~/.ssh/id_ed25519
chmod 700 ~/.ssh
chmod 600 ~/.ssh/id_ed25519
chmod 700 ~/.ssh