linux下建站目录分配权限的经验技巧总结
<p><span><strong>前言</strong></span></p>
<p>
在网上搜索网站文件夹权限配置一般都是是： 文件夹权限最小权限755 文件最小权限644</p>
<p>
文件的可读可写可执行很容易理解，但文件夹的权限就需要好好梳理梳理啦，下面是自己的一些经验分享给大家，需要的一起来看看详细的介绍：</p>
<p>
<span><strong>前期工作</strong></span></p>
<p>
先创建一个文件夹 test</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_174888">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">mkdir</code> <code class="bash functions">test</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
在该目录下创建一个1.txt文件并写入111</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_765754">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">cat</code> <code class="bash plain">> 1.txt</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">111</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
现在退出该目录来一个一个分析改目录权限</p>
<p>
<strong>不要用root用户来创建文件夹，因为文件权限配置对root用户无效</strong></p>
<p>
<span><strong>目录的可执行权限</strong></span></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_778500">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">chmod</code> <code class="bash plain">111 </code><code class="bash functions">test</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
经过测试，此时只能<code>cd test</code>进入目录，但既无法ls列目录，也无法<code>touch 2.txt</code>一个新的文件，但<code>cat 1.txt</code>还是可以读取到内容的</p>
<p>
于是我们总结</p>
<p>
目录的可执行权限是用户可以进入或者说切换到该目录下，但无法列目录和创建新文件，能读取原来文件是属于文件的权限设置为可读</p>
<p>
<span><strong>目录的可写权限</strong></span></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_184824">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">chmod</code> <code class="bash plain">222 </code><code class="bash functions">test</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
最直观的变化是该目录颜色变深了( ps,文件赋予可执行权限时也会颜色变深）</p>
<p>
可以尝试一些我们常见的命令</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_412352">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">ls</code> <code class="bash functions">test</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash functions">cd</code> <code class="bash functions">test</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash functions">cat</code> <code class="bash functions">test</code><code class="bash plain">/1</code><code class="bash plain">.txt</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash functions">touch</code> <code class="bash functions">test</code><code class="bash plain">/2</code><code class="bash plain">.txt</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
结果是什么都不能做</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_682095">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">ls</code> <code class="bash functions">test</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash functions">ls</code><code class="bash plain">: cannot </code><code class="bash functions">open</code> <code class="bash plain">directory </code><code class="bash functions">test</code><code class="bash plain">: Permission denied</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">cd</code> <code class="bash functions">test</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash functions">bash</code><code class="bash plain">: </code><code class="bash functions">cd</code><code class="bash plain">: </code><code class="bash functions">test</code><code class="bash plain">: Permission denied</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">cat</code> <code class="bash functions">test</code><code class="bash plain">/1</code><code class="bash plain">.txt</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash functions">cat</code><code class="bash plain">: </code><code class="bash functions">test</code><code class="bash plain">/1</code><code class="bash plain">.txt: Permission denied</code>
</div>
<div class="line number7 index6 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">touch</code> <code class="bash functions">test</code><code class="bash plain">/2</code><code class="bash plain">.txt</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash functions">touch</code><code class="bash plain">: cannot </code><code class="bash functions">touch</code> <code class="bash plain">‘</code><code class="bash functions">test</code><code class="bash plain">/2</code><code class="bash plain">.txt': Permission denied</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
现在我们在给改目录加上可执行权限</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_754524">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">chmod</code> <code class="bash plain">333 </code><code class="bash functions">test</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
发现，除了不能正常ls列目录外，其余<code>cd touch cat</code>都可以执行，因此得出总结</p>
<p>
linux 文件夹想要创建文件，必须要有可写可执行权限，即权限大小为333，如果只给写权限，什么都干不了</p>
<p>
<span><strong>目录的可读权限</strong></span></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_933378">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash functions">chmod</code> <code class="bash plain">444 </code><code class="bash functions">test</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_685727">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">ls</code> <code class="bash functions">test</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash functions">ls</code><code class="bash plain">: cannot access </code><code class="bash functions">test</code><code class="bash plain">/1</code><code class="bash plain">.txt: Permission denied</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash functions">ls</code><code class="bash plain">: cannot access </code><code class="bash functions">test</code><code class="bash plain">/2</code><code class="bash plain">.txt: Permission denied</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain">1.txt 2.txt</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">cd</code> <code class="bash functions">test</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash functions">bash</code><code class="bash plain">: </code><code class="bash functions">cd</code><code class="bash plain">: </code><code class="bash functions">test</code><code class="bash plain">: Permission denied</code>
</div>
<div class="line number7 index6 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">cat</code> <code class="bash functions">test</code><code class="bash plain">/1</code><code class="bash plain">.txt</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash functions">cat</code><code class="bash plain">: </code><code class="bash functions">test</code><code class="bash plain">/1</code><code class="bash plain">.txt: Permission denied</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<span><strong>总结： </strong></span>目录的可读权限可以列目录</p>
<p>
网站只有可读权限只能列目录，其他cd cat都无法执行，那么如果网站设置555的权限是什么呢</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_101553">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">chmod</code> <code class="bash plain">555 </code><code class="bash functions">test</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~$ </code><code class="bash functions">cd</code> <code class="bash functions">test</code><code class="bash plain">/</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~</code><code class="bash plain">/test</code><code class="bash plain">$ </code><code class="bash functions">ls</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain">1.txt 2.txt</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">ubuntu@VM-8-81-ubuntu:~</code><code class="bash plain">/test</code><code class="bash plain">$ </code><code class="bash functions">touch</code> <code class="bash plain">3,txt</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash functions">touch</code><code class="bash plain">: cannot </code><code class="bash functions">touch</code> <code class="bash plain">‘3,txt': Permission denied</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
可以看到，除了touch命令无法创建新文件外，其他命令还是都可以执行的</p>
<p>
到了这里，自然容易推出666权限的文件夹是可读可写但无可执行权限，无法进入该目录，但有了可读可写，基本权限也都有了，777权限即为文件夹的最大权限了</p>
<p>
在回过头分析文章第一句话，建站时文件夹的最低权限是755，文件最低权限为644</p>
<p>
这里有一个用户权限分配问题</p>
<p>
chmod修改权限时，每一文件或目录的访问权限都有三组，每组用三位表示，分别为文件属主的读、写和执行权限；与属主同组的用户的读、写和执行权限；系统中其他用户的读、写和执行权限</p>
<p>
文件夹权限7和文件权限6都是给linux管理用户分配的，apache默认给访问网站的用户为www普通用户，因此文件的权限755即普通用户只能有查看和浏览网站的权限，但无创建文件或者上传文件的权限，一般如果需要某个特殊文件夹比如upload或者tmp文件夹存储一些临时文件，需要设置文件夹权限为777，文件权限644即只能查看但不能修改</p>
<p>
<span><strong>总结</strong></span></p>
<p>
以上就是这文章的全部内容了，希望本文的内容对大家的学习或者工作能带来一定的帮助，如有疑问大家可以留言交流，谢谢大家对的支持。</p>
<p>
原文链接：http://www.blogsir.com.cn/safe/244.html</p>
頁:
[1]