What chmod 544 means
| Class | Digit | Permissions |
|---|---|---|
| Owner | 5 | read and execute |
| Group | 4 | read |
| Others | 4 | read |
Check that each class has only the access it needs (principle of least privilege).
chmod 544 file.txt # one file
find /var/www -type f -exec chmod 544 {} + # all files in a treeHow octal permissions work
Each digit is the sum of read (4), write (2) and execute (1) for owner, group and others. So 7 = 4+2+1 = rwx, 5 = 4+1 = r-x, 4 = r--. An optional leading digit sets special bits: setuid (4), setgid (2) and sticky (1) — e.g. 1777 is /tmp.
Safe defaults for web servers
- Directories: 755
- Files: 644
- Secrets (.env, SSH keys): 600
- Laravel
storage/andbootstrap/cache/: 775 with the web server group — never 777.