Inadvertently nuked my disk permission structure - why?
The shell glob .* matches .. (the parent directory) in this case unfortunately that's /:
steeldriver@t400s:/opt$ ls .*
.:
..:
bin boot cdrom dev etc home initrd.img initrd.img.old lib lib32 lib64
libx32 lost+found media mnt opt proc root run sbin snap srv swapfile sys
tmp usr var vmlinuz vmlinuz.old
For additional discussion see:
- Does “chmod 777 .* -R” chmod parent directories (..)?
- how to glob every hidden file except current and parent directory
This happened because you used:
sudo chown -R root:www-data .*
when you should have used this instead:
sudo chown -R root:www-data ./*
First, -R is recursive for all directories under the target directory.
Additionally, * will match all files and directories under the current directory. Next, .* will match all files and directories one level above the current directory.
To avoid this in the future, you can use the ls command to verify the path before you execute the chown command like in these examples:
ls -a ./*
ls -a *
ls -a .*
ls -a ../*
Another way to avoid this is to always use the full path to the directory you wish to run a command to.
Here is an example:
sudo chown -R root:www-data /opt/*
Edit:
You can use the following command to chmod all hidden files or directories directly under /opt (assuming the first character after the . that makes them hidden is a letter, a number, a dash or an underscore which should be true for most files).
for i in /opt/.[A-Za-z0-9-_]*; do sudo chmod root:www-data "/opt/$i"; done
You can verify what files this will chmod by running the following command:
ls /opt/.[A-Za-z0-9-_]*
The first part of the command: for i in /opt/.[A-Za-z0-9-_]* says that, for all the results of the glob /opt/.[A-Za-z0-9-_]* assign each result to the variable "i".
The glob here says that the first character must be . and that the next character [A-Za-z0-9-_] must be any character that is A-Z or a-z or any number 0-9 or a - or a _.
This will exclude the results . and .. which represent the current directory and the directory above the current directory and will only include hidden files and directories.
The second part of the command: do sudo chmod root:www-data "/opt/$i" says to run the command for all variables that match the current value of $i.
The third part of the command: done says that I am finished.
Additionally, you used the -R option with chmod and the -R option is recursive and will apply to all directories and files.
When you only only use the chmod command with no options, the command will only apply to the specific file or directory you gave it and will not apply recursively to directories.
Your troubles came because .* matches everything that begins with a dot. The context is the current directory, since this expression does not include a path. So, if there are any hidden files or folders like .git in the current directory, you'll match them. But (as you'll see by running ls -a in that folder), you will also match . and ..
And .., of course, is the parent directory, so chmod -R recursively targeted everything in the parent directory.