Skip to content
Clairos Learn

Permissions and users · Lesson 29 of 33 · 8 minutes

Directory traversal modes

Set and inspect a directory mode that supports controlled traversal.

Mastery 0/3Run itExplain itApply it
learner@clairosSimulated Linux lab
learner@clairos:~ $
↑ history · Tab complete · Ctrl+C cancel · Esc, Tab to leaveExit 0

Understand the pattern

Reasoning about read, write, and execute bits on directories helps operators explain what they know before they change anything.

mkdir
Create a directory. -p also creates missing parent directories and accepts an existing directory.

Creating a folder does not change the current directory.

chmod
Change permissions using an octal mode or a symbolic adjustment. Each rwx bit belongs to owner, group, or other.

Do not use 777 as a blanket fix. Grant the smallest access needed.

stat
Inspect a file or directory metadata record, including ownership, permissions, and size.

Metadata and file contents answer different questions.

Worked example and expected result
$ mkdir -p lab/private-reports
(no output; exit 0)

Exit status: 0. The command completed successfully in the training fixture.

$ chmod 750 lab/private-reports
(no output; exit 0)

Exit status: 0. The command completed successfully in the training fixture.

$ stat lab/private-reports
Path: /home/learner/lab/private-reports
Type: dir
Mode: drwxr-x---
Owner: learner
Group: learners
Size: 0 items

Exit status: 0. The command completed successfully in the training fixture.

Try a variation

Repeat this workflow in the sandbox with a different scratch filename. Keep the system fixtures unchanged and compare the observed output with your expectation before moving on.

Explain it

In “Directory traversal modes”, which interpretation is safe?

Apply it elsewhere

Before adapting the chmod workflow from “Directory traversal modes” to another server, what should you do?

Keep the momentum.

Complete the lab, then explain and apply the pattern.

Next: Shared group directoryTry an incident drill

Anonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.

Keep learning

  1. 01Least privilege auditReview identity, service ownership, and sensitive modes.Practice
  2. 02Shared group directoryPrepare a group-owned workspace and inspect its collaboration mode.Practice
  3. 03SSH mode matrixCompare directory and key-file modes used by an SSH account.Practice