z/OS UNIX Permissions

Utilities

z/OS UNIX Permissions

Permission bits, z/OS extended attributes and the commands to apply them

Paste an ls -l / ls -lE line (optional)

File or directory

Recursive (-R): the directory and everything in it

	Read	Write	Execute
Owner	Owner: Read	Owner: Write	Owner: Execute
Group	Group: Read	Group: Write	Group: Execute
Others	Others: Read	Others: Write	Others: Execute

Special bits

setuid

Executable: runs with the owner's UID

setgid

Executable: runs with the file group's GID

sticky

Directory: only a file's owner can delete it. Executable (z/OS): loaded from the MVS search order (STEPLIB, LPA, LNKLST) if a module with that name exists

Octal

Symbolic

Owner: read, write and execute · Group: read and execute · Others: read and execute

APF authorized (a)

Runs APF authorized, like a module in an APF library · BPX.FILEATTR.APF

Program controlled (p)

Trusted program: required by servers that run with BPX.DAEMON / program security · BPX.FILEATTR.PROGCTL

Shared address space (s)

Can run in a shared address space (_BPX_SHAREAS)

Shared library (l)

Loaded into the system shared library region · BPX.FILEATTR.SHARELIB

Owner (chown)

Group (chgrp)

User who runs the commands (for RACF)

Commands

Ready to copy: interactive shell (OMVS / SSH), batch job or RACF

755

chmod 755 <path>
ls -lE <path>