Hosting Operations
Read-only, can be slowGroup Writable Files by Owning Group
You need to see which groups can modify files under an application tree.
Command
find /srv/www/example -type f -perm -0020 -printf '%g %M %p\n' 2>/dev/null | sortBefore you run this
System impact: Read-only. Can create load on large logs, directories, filesystems, or process tables.
When not to use it: Do not treat group-writable as bad by itself; runtime directories often need it.
Expected output
Group names, modes, and paths for group-writable files.
System impact
Read-only, can be slow. Nothing changes. The command groups writable files by their owning group.
Scope this to the smallest useful path or service on busy systems.
Recovery / rollback: no state is changed.
When to use it
Use when service groups, deploy groups, or shared upload directories are under review.
When not to use it
Do not treat group-writable as bad by itself; runtime directories often need it.
next steps
Related commands
Find Release Files Writable Outside the Owner
A release file that someone besides the owner can modify deserves a second look.
find /srv/www/example/releases/current -type f -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Find Runtime Directories Writable Outside the Owner
Runtime directories often need writes, but the write boundary should be visible.
find /srv/www/example/shared/storage /srv/www/example/shared/uploads -type d -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Find Upload Files Writable Outside the Owner
Uploads are supposed to be writable at the edge, not writable forever by everyone.
find /srv/www/example/shared/uploads -type f -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Audit a Symlink Permission Chain
A symlink can make the path you audited different from the file the app opens.
find /srv/www/example -type l -printf '%p -> %l\n' -exec namei -l {} \; 2>/dev/null
Find Writable Directories Missing the Sticky Bit
A writable log directory is not the same thing as a safe shared directory.
find /srv/www/example -type d -perm -0002 ! -perm -1000 -printf '%m %u:%g %p\n' 2>/dev/null | sort
Study mapping
Use this as independent command practice: read the notes, predict the output, then compare it with the example before using a real shell.
Independent study support only. No affiliation, endorsement, exam dumps, or real exam questions.