Hosting Operations
Read-only, can be slowFind Runtime Directories Writable Outside the Owner
You need to review storage, cache, log, and upload directories that are writable by group or other users.
Command
find /srv/www/example/shared/storage /srv/www/example/shared/uploads -type d -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sortBefore you run this
System impact: Read-only. Can create load on large logs, directories, filesystems, or process tables.
When not to use it: Do not treat every result as wrong; caches, uploads, and logs may intentionally allow service-group writes.
Expected output
Runtime directories with group-write or other-write permission bits.
System impact
Read-only, can be slow. Nothing changes. The command lists runtime directories writable outside the owning user.
Scope this to the smallest useful path or service on busy systems.
Recovery / rollback: no state is changed.
When to use it
Use when reviewing writable application paths before hardening or incident cleanup.
When not to use it
Do not treat every result as wrong; caches, uploads, and logs may intentionally allow service-group writes.
next steps
Related commands
Find Release Files Writable Outside the Owner
A release file that someone besides the owner can modify deserves a second look.
find /srv/www/example/releases/current -type f -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Find Upload Files Writable Outside the Owner
Uploads are supposed to be writable at the edge, not writable forever by everyone.
find /srv/www/example/shared/uploads -type f -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Group Writable Files by Owning Group
Group-writable files are not automatically wrong, but the owning group decides the risk.
find /srv/www/example -type f -perm -0020 -printf '%g %M %p\n' 2>/dev/null | sort
Find Writable Directories Missing the Sticky Bit
A writable log directory is not the same thing as a safe shared directory.
find /srv/www/example -type d -perm -0002 ! -perm -1000 -printf '%m %u:%g %p\n' 2>/dev/null | sort
Audit a Symlink Permission Chain
A symlink can make the path you audited different from the file the app opens.
find /srv/www/example -type l -printf '%p -> %l\n' -exec namei -l {} \; 2>/dev/null
Study mapping
Use this as independent command practice: read the notes, predict the output, then compare it with the example before using a real shell.
Independent study support only. No affiliation, endorsement, exam dumps, or real exam questions.