382

I have a git checkout. All the file permissions are different than what git thinks they should be therefore they all show up as modified.

Without touching the content of the files (just want to modify the permissions) how do I set all the files permissions to what git thinks they should be?

1

13 Answers 13

748

Git keeps track of filepermission and exposes permission changes when creating patches using git diff -p. So all we need is:

  1. create a reverse patch
  2. include only the permission changes
  3. apply the patch to our working copy

As a one-liner (run from the repository's root directory):

git diff -p -R --no-ext-diff --no-color --diff-filter=M \
    | grep -E "^(diff|(old|new) mode)" --color=never  \
    | git apply

you can also add it as an alias to your git config...

git config --global --add alias.permission-reset '!git diff -p -R --no-ext-diff --no-color --diff-filter=M | grep -E "^(diff|(old|new) mode)" --color=never | git apply'

...and you can invoke it via:

git permission-reset

Note, if you shell is bash, make sure to use ' instead of " quotes around the !git, otherwise it gets substituted with the last git command you ran.

Thx to @Mixologic for pointing out that by simply using -R on git diff, the cumbersome sed command is no longer required.

28
  • 3
    I'm in OS X, this is not working. I've identified the problem is in the git apply. It doesn't apply the file permissions changes.
    – oblitum
    Aug 28, 2012 at 21:36
  • 20
    Oh, it worked, I was trying to apply from a directory different than the repository root. git apply only works there.
    – oblitum
    Aug 28, 2012 at 22:06
  • 6
    Is there some reason you wouldnt just do "git diff -p -R" instead of doing the sed's to make it reverse?
    – Mixologic
    Jun 17, 2013 at 18:34
  • 7
    @RobQuist my local changes weren't removed when using muhqu's command
    – fvdnabee
    Mar 13, 2014 at 15:33
  • 31
    I'm getting fatal: unrecognized input
    – Tieme
    Apr 30, 2015 at 9:22
187

Try git config core.fileMode false

From the git config man page:

core.fileMode

If false, the executable bit differences between the index and the working copy are ignored; useful on broken filesystems like FAT. See git-update-index(1).

The default is true, except git-clone(1) or git-init(1) will probe and set core.fileMode false if appropriate when the repository is created.

4
  • Thanks, this is what I ended up doing. Very used to cvs not tracking permissions so this works. Mar 26, 2010 at 14:39
  • 3
    @shovas: I am glad this helped. I experienced a similar issue when sharing repos between Linux and Windows. BTW: if this answered your question, please mark the response as correct. Mar 26, 2010 at 16:50
  • Is it possible that git checkout origin/master sets file permissions committed to the server to my local working copy? Because whenever I build V8 for ArangoDB, the file permissions are changed so that access is denied to the entire build folder (even with elevated rights; Windows 7+ that is). I need to fix all local file permissions before I can continue the build process. Can core.filemode false fix that too? I suspect git to set Linux permissions on my Windows machine. The build scripts might just preserve them and apply the same permissions to newly created files...
    – CodeManX
    Aug 17, 2015 at 17:04
  • Im wondering if there's any downside to setting filemode to false !
    – kevoroid
    Feb 19, 2020 at 4:57
10

Git doesn't store file permissions other than executable scripts. Consider using something like git-cache-meta to save file ownership and permissions.

Git can only store two types of modes: 755 (executable) and 644 (not executable). If your file was 444 git would store it has 644.

4
  • 20
    Sorry, but this is incorrect. Git does, indeed, track permissions.
    – Will
    Apr 5, 2013 at 19:24
  • 4
    It's roughly accurate, see git.wiki.kernel.org/index.php/ContentLimitations. The exact permissions that get set appear to based on the server & possibly the client umask as well as a config setting, see stackoverflow.com/a/12735291/125150. Jan 9, 2014 at 13:19
  • 20
    @Will no, it doesn't. Can't believe your comment got so many upvotes.
    – eis
    Feb 22, 2017 at 6:45
  • 2
    @Will, this is roughly correct. Per the docs ...a mode of 100644, which means it’s a normal file. Other options are 100755, which means it’s an executable file; and 120000, which specifies a symbolic link. The mode is taken from normal UNIX modes but is much less flexible — these three modes are the only ones that are valid for files (blobs) in Git (although other modes are used for directories and submodules).
    – esmail
    Dec 4, 2019 at 17:35
10
git diff -p \
| grep -E '^(diff|old mode|new mode)' \
| sed -e 's/^old/NEW/;s/^new/old/;s/^NEW/new/' \
| git apply

will work in most cases but if you have external diff tools like meld installed you have to add --no-ext-diff

git diff --no-ext-diff -p \
    | grep -E '^(diff|old mode|new mode)' \
    | sed -e 's/^old/NEW/;s/^new/old/;s/^NEW/new/' \
    | git apply

was needed in my situation

0
4

Thanks @muhqu for his great answer. In my case not all changes files had permissions changed which prevented the command to work.

$ git diff -p -R --no-ext-diff --no-color | grep -E "^(diff|(old|new) mode)" --color=never
diff --git b/file1 a/file1
diff --git b/file2 a/file2
old mode 100755
new mode 100644
$ git diff -p -R --no-ext-diff --no-color | grep -E "^(diff|(old|new) mode)" --color=never | git apply
warning: file1 has type 100644, expected 100755

The patch would then stop and files would be left untouched.

In case some people have similar problem I solved this by tweaking the command to grep only files with permission changed:

grep -E "^old mode (100644|100755)" -B1 -A1

or for the git alias

git config --global --add alias.permission-reset '!git diff -p -R --no-ext-diff --no-color | grep -E "^old mode (100644|100755)" -B1 -A1 --color=never | git apply'
3

i know this is old, but i came from google and i didn't find an answer

i have a simple solution if you have no change you want to keep :

git config core.fileMode true
git reset --hard HEAD
0
1

I run into a similar problem, someone added the executable flag to all the files on the server, however I also had local modified files besides the ones with the broken permissions. However, since the only permission git tracks is the executable flag, this pipeline fixed the problem for me:

git status | grep 'modified:' | awk '{print $3}' | xargs chmod a-x

Basically the command runs git status, filters the files reported as modifier, extracts their path via awk, and removes the executable flag.

1
  • In general grep + awk can preferably be simplified to just awk (e.g. awk '/modified/{print $3}'), although this solution will not properly handle spaces in file names. Fortunately there is a native git equivalent that does: git ls-files -m -z | xargs -0 chmod a-x.
    – hlovdal
    Dec 26, 2021 at 22:45
1

If you are using the accepted answer, using git apply

git diff -p -R --no-ext-diff --no-color --diff-filter=M \
    | grep -E "^(diff|(old|new) mode)" --color=never  \
    | git apply

Make sure to use With Git 2.45 (Q2 2024), batch 1, "git apply"(man) on a filesystem without filemode support have learned to take a hint from what is in the index for the path, even when not working with the "--index" or "--cached" option, when checking the executable bit match what is required by the preimage in the patch.

See commit 45b6251, commit 01aff0a (26 Dec 2023) by Junio C Hamano (gitster).
See commit 0482c32 (26 Dec 2023) by Chandra Pratap (Pratapchandradeo).
(Merged by Junio C Hamano -- gitster -- in commit cf47fb7, 26 Feb 2024)

apply: ignore working tree filemode when !core.filemode

Signed-off-by: Chandra Pratap
Reviewed-by: Johannes Schindelin

When applying a patch that adds an executable file, git apply(man) ignores the core.fileMode setting (core.fileMode in git config(man) specifies whether the executable bit on files in the working tree should be honored or not) resulting in warnings like:

warning: script.sh has type 100644, expected 100755  

even when core.fileMode is set to false, which is undesired.
This is extra true for systems like Windows.

Fix this by inferring the correct file mode from either the existing index entry, and when it is unavailable, assuming that the file mode was OK by pretending it had the mode that the preimage wants to see, when core.filemode is set to false.

0

git diff -p used in muhqu's answer may not show all discrepancies.

  • saw this in Cygwin for files I didn't own
  • mode changes are ignored completely if core.filemode is false (which is the default for MSysGit)

This code reads the metadata directly instead:

(set -o errexit pipefail nounset;
git ls-tree HEAD -z | while read -r -d $'\0' mask type blob path
do
    if [ "$type" != "blob" ]; then continue; fi;
    case "$mask" in
    #do not touch other bits
    100644) chmod a-x "$path";;
    100755) chmod a+x "$path";;
    *) echo "invalid: $mask $type $blob\t$path" >&2; false;;
    esac
done)

A non-production-grade one-liner (replaces masks entirely):

git ls-tree HEAD | perl -ne '/^10(0\d{3}) blob \S+\t(.+)$/ && { system "chmod",$1,$2 || die }'

(Credit for "$'\0'" goes to http://transnum.blogspot.ru/2008/11/bashs-read-built-in-supports-0-as.html)

0

You could also try a pre/post checkout hook might do the trick.

See: Customizing Git - Git Hooks

0

I use git from cygwin on Windows, the git apply solution doesn't work for me. Here is my solution, run chmod on every file to reset its permissions.

#!/bin/bash
IFS=$'\n'
for c in `git diff -p |sed -n '/diff --git/{N;s/diff --git//g;s/\n/ /g;s# a/.* b/##g;s/old mode //g;s/\(.*\) 100\(.*\)/chmod \2 \1/g;p}'`
do
        eval $c
done
unset IFS

-2

The easiest thing to do is to just change the permissions back. As @kroger noted git only tracks executable bits. So you probably just need to run chmod -x filename to fix it (or +x if that's what's needed.

2
  • Here's an example from git show: diff --git a/OpenWatch/src/org/ale/openwatch/fb/FBUtils.java b/OpenWatch/src/org/ale/openwatch/fb/FBUtils.java index cd6fa6a..e5b0935 100644 That bit in bold there is the file permissions.
    – Conrado
    Jul 31, 2013 at 17:28
  • This seemed easiest to me, too. Unfortunately, I encountered the same problem as Conrado - I could not change permission from 100644 to 100755. I don't think you deserve a downvote; Git should be down voted. It is so broken in so many ways at so many different levels...
    – jww
    Dec 10, 2016 at 3:55
-3

The etckeeper tool can handle permissions and with:

etckeeper init -d /mydir

You can use it for other dirs than /etc.

Install by using your package manager or get sources from above link.

1
  • 5
    What does it set permissions to? If it doesn't read Git metadata or invoke Git, it doesn't do what the OP requested. Mar 26, 2017 at 7:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.