DEV Community

Python.Coding
Python.Coding

Posted on

How to Manage Linux File Permissions for Web Servers with chmod and chown

#linux #bash #webdev #sysadmin

Incorrect file permissions on Linux web servers are one of the most common causes of 403 Forbidden errors and server security vulnerabilities. If your web server process (such as NGINX or Apache) cannot read your website files, it cannot serve them to users. Conversely, if file permissions are set too loosely, unauthorized users can modify your code.

In this hands-on tutorial, you will learn how to configure proper user ownership and file permissions for a Linux web directory using chown and chmod.

Prerequisites

To follow this guide, you will need:

  • A system running Linux (such as Arch Linux, Ubuntu, or Debian).
  • Basic familiarity with command-line terminal navigation.
  • Root or sudo administrative privileges.

Step 1: Understand Ownership and the Web User

On Linux, every file and directory is assigned an owner and a group. Web servers like Apache and NGINX usually run under a dedicated system user (such as www-data or nginx).

To check the current ownership of your web directory (typically /var/www/html), open your terminal and run:

ls -ld /var/www/html
Enter fullscreen mode Exit fullscreen mode

Output: 

drwxr-xr-x 2 root root 4096 Sep 16 10:00 /var/www/html
Enter fullscreen mode Exit fullscreen mode

If the owner is set to root, your regular user account won't be able to edit website files without using sudo.

Step 2: Set Group Ownership with chown

To allow your user account to edit files while giving the web server read access, assign your regular user as the owner and the web server group (www-data) as the group owner:

sudo chown -R $USER:www-data /var/www/html
Enter fullscreen mode Exit fullscreen mode
  • -R: Applies the ownership change recursively to all files and subdirectories.
  • $USER: Environment variable representing your logged-in username.
  • www-data: The web server group name.

Verify the update:

ls -ld /var/www/html
Enter fullscreen mode Exit fullscreen mode

Output: 

drwxr-xr-x 2 luky www-data 4096 Sep 16 10:05 /var/www/html
Enter fullscreen mode Exit fullscreen mode

Step 3: Configure Secure File and Directory Permissions with chmod

Linux permissions determine what the Owner (u), Group (g), and Others (o) can do:

  • Read (4)
  • Write (2)
  • Execute (1)

For web directories, standard security best practices dictate:

  • Directories: 755 (rwxr-xr-x) so the web server can enter and read folders.
  • Files: 644 (rw-r--r--) so files can be read, but executable code cannot be run unnecessarily.

Run these two commands to apply secure permissions across all folders and files separately:

# Set directory permissions to 755
sudo find /var/www/html -type d -exec chmod 755 {} +

# Set file permissions to 644
sudo find /var/www/html -type f -exec chmod 644 {} +
Enter fullscreen mode Exit fullscreen mode

Step 4: Verify the New Permissions Setup

Create a sample index.html file inside /var/www/html to test write access:

echo "<h1>Linux Permission Test Successful</h1>" > /var/www/html/index.html
Enter fullscreen mode Exit fullscreen mode

Check the file details:

ls -l /var/www/html/index.html
Enter fullscreen mode Exit fullscreen mode

Result: 

-rw-r--r-- 1 luky www-data 43 Sep 16 10:10 /var/www/html/index.html
Enter fullscreen mode Exit fullscreen mode

Your regular user can now edit website contents cleanly without sudo, and your web server process retains read access while maintaining a secure permission boundary.

Conclusion

By using chown to structure group ownership and combining find with chmod to separate directory and file permissions, you establish a secure, maintainable Linux web environment.

Top comments (0)