Why does umask 077 not allow the user to execute files/directories?
772
I'm using umask 077 ."Other" and "group" do not have any rights, but the user can't execute files/directories.
Why does umask 077 not allow the owner to execute files/directories?
When you use a umask of 077 only the user has read, write and execute permissions. The user definitely will be able to open ('execute') directories (see more on why directories have to be executable in my answer here). However, files must always be made executable by entering chmod u+x myfile; they are never automatically executable. Some more useful information on umask is given in this answer:
The likely possibility for your problems is that you have perhaps entered the value slightly incorrectly, which has resulted in a different umask, or that the value has not been permanently set. If you enter umask 077 in the terminal it will only hold good for that session of the terminal; to make it permanent for your user simply add umask 077 to your ~/.profile. The system default setting for umask is in /etc/login.defs; it used to be in /etc/profile. See also the manpage for pam_umask, which is a pam module that handles the assignment of umask.
The following examples are from a successful setting of umask 077:
1) For folder creation: mkdir doc checked with stat doc gave the correct permissions and an 'executable' folder:
A umask of 077 will give the permissions shown, but if you still have problems with permissions after setting umask 077 properly (as discussed further above) we can look into it further.
The umask value will be used to appropriately modify the default fmask for file permissions (base permission 0666) and dmask for directory/folder permissions (base permission 0777).
The effective fmask and dmask values will be calculated by deducting the umask value (Octal calculations).
So a umask 0022 would result in fmask to get a value 0644 (i.e. 0666 - 0022) while dmask would be 0755 (i.e. 0777 - 0022).
The umask 0077 prevent files from being created with any access not only to the world (indicated by the ultimate octal digit) but also your group members (indicated by the penultimate octal digit).
When you use a
umaskof 077 only the user has read, write and execute permissions. The user definitely will be able to open ('execute') directories (see more on why directories have to be executable in my answer here). However, files must always be made executable by enteringchmod u+x myfile; they are never automatically executable. Some more useful information onumaskis given in this answer:The likely possibility for your problems is that you have perhaps entered the value slightly incorrectly, which has resulted in a different umask, or that the value has not been permanently set. If you enter
umask 077in the terminal it will only hold good for that session of the terminal; to make it permanent for your user simply addumask 077to your~/.profile. The system default setting forumaskis in/etc/login.defs; it used to be in/etc/profile. See also the manpage forpam_umask, which is a pam module that handles the assignment ofumask.The following examples are from a successful setting of
umask 077:1) For folder creation:
mkdir docchecked withstat docgave the correct permissions and an 'executable' folder:2) For file creation:
touch newchecked withstat newgave the correct permissions; the file is only made executable when you usechmod +x:A
umaskof 077 will give the permissions shown, but if you still have problems with permissions after settingumask 077properly (as discussed further above) we can look into it further.The umask value will be used to appropriately modify the default fmask for file permissions (base permission 0666) and dmask for directory/folder permissions (base permission 0777).
The effective fmask and dmask values will be calculated by deducting the umask value (Octal calculations).
So a umask 0022 would result in fmask to get a value 0644 (i.e. 0666 - 0022) while dmask would be 0755 (i.e. 0777 - 0022).
The umask 0077 prevent files from being created with any access not only to the world (indicated by the ultimate octal digit) but also your group members (indicated by the penultimate octal digit).
Reference: