Owner can read, write and execute. Group can read and execute. Others can do nothing.
| Read | Write | Execute | |
|---|---|---|---|
| Owner | ✓ | ✓ | ✓ |
| Group | ✓ | – | ✓ |
| Others | – | – | – |
Typical use
Programs and folders for you and your group only.
Good to know
750 (rwxr-x---) gives the owner full control, the group read and execute, and others nothing. On a folder, group members can list and enter it but not create or delete files, and others can’t even look inside. It suits app folders a service group needs to read, programs only one team should run, and private home folders, the default for new homes on Ubuntu since 21.04.
Pair it with 640 files inside to keep secrets away from other local users while a service in the group can still read them. Remember that others need x on every parent folder, so 750 on a parent blocks a web server running as a different user unless it joins the group, for example with usermod -aG appgroup www-data followed by a service restart.
Commands
| Set the mode | chmod 750 file |
|---|---|
| The same with letters | chmod u=rwx,g=rx,o= file |
| A folder and everything in it | chmod -R 750 folder |
| Only the folders inside | find folder -type d -exec chmod 750 {} + |
| How ls -l shows it | -rwxr-x--- |