home blog portfolio outsider art github

What file permissions does mv need?

By Ian Fisher, 20 November 2024 Subscribe

What Unix file permissions are required for mv path/to/src/file path/to/dest?

Neither I nor ChatGPT nor any of the dozen programmers I asked could give a completely correct answer off the top of their heads.

If you'd like, take a moment to think about it for yourself. Otherwise, scroll down to see the answer.

1. +w on src and dest
2. +x on every directory named in path/to/src and path/to/dest, including the implicit current directory for relative paths
3. If file is a directory, +w on file
4. If src has the sticky bit set, then you must be either the owner of file or the owner of src
5. If src and dest are on different filesystems, then +r on file

Commentary:

• Many thought you needed permissions on f itself, but – aside from the edge cases #3 and #5 – you do not, because renaming a file does not require either reading or altering its contents, only the contents of the source and target directories (hence #1).
• Quite a few people had a vague idea that execute permissions had some special meaning for directories, but only a couple specifically knew that they are needed to access paths within that directory, and no one mentioned that you need execute not just on src and dest but also all the other directories in the path.
• No one remembered #3. Admittedly, it's a bit of an ad hoc requirement that only exists because a directory has a special .. entry that points to its parent, which must be updated if a directory is moved.
• #4 sounds like arcana, but it applies to at least one very well-known directory: /tmp. The sticky bit is intended for shared directories so that a user cannot interfere with others' files – hence the ownership permissions required.
• Likewise, #5 applies to /tmp, which is typically mounted as its own filesystem. The rename syscall doesn't work across filesystems, so the mv command emulates it by reading the source file, unlinking it from the source directory, and recreating it in the target directory. Because it has to read the contents of the file, +r permissions are necessary.

Further reading

• man 2 rename covers the first three requirements under EACCES in the "Errors" section.
• man 7 path_resolution describes the Linux path resolution process.
• "against /tmp" covers the meaning of the sticky bit.
• Sections 4.5 and 4.15 of Advanced Programming in the Unix Environment cover Unix file permissions and rename, respectively. ∎