skip to content

#permissions (6)

Concepts (1)

Filesystems

The OS-layer abstraction that turns a flat block device into named, permissioned, hierarchical files — covering inodes, paths, permissions, journaling, and copy-on-write.
os storage posix permissions capabilities inode mount journaling copy-on-write web-researched

Cheat sheets (5)

takeown — Take File Ownership

Transfer ownership of files and directories to the current user or the Administrators group from an elevated command prompt — a prerequisite for modifying ACLs on system-protected paths.
takeown windows cli scripting sysadmin ntfs acl permissions ownership security reference web-researched

Claude Code Settings and Permissions

Complete settings.json schema for Claude Code — permission rules, tool allowlists/denylists, environment variables, hooks, MCP, statusline, model selection, and file precedence.
claude-code settings permissions configuration json hooks

Approvals & Sandboxing

Control what Codex CLI can do — approval policies (untrusted, on-request, never), sandbox modes (read-only, workspace-write, danger-full-access), OS-native sandbox mechanics, and --full-auto.
codex openai sandbox approvals security seatbelt bwrap seccomp permissions

permissions — chmod, chown, umask, ACLs

POSIX file permissions on Linux. Covers symbolic and octal chmod, ownership with chown, the meaning of r/w/x for files vs. directories, setuid/setgid/sticky bits, umask, ACLs, capabilities, and immutable attributes.
permissions chmod chown umask acl capabilities sysadmin security cli web-researched

Security Fundamentals — Users, Permissions, Capabilities, MAC, Sandboxing

OS-level security primitives every operator should know: users and groups, file permissions, Linux capabilities, SUID/SGID, mandatory access control (SELinux, AppArmor), sandboxing concepts, least privilege, and encryption at rest vs in transit.
security users groups permissions capabilities suid sgid selinux apparmor sandbox encryption mac sysadmin