mongodb & /data/db directory permissions

Question

I'm trying to run mongod with its defaults so it's using the /data/db directory. I changed the owner of the data directory

sudo chown mongodb:mongodb /data -R

Like so many others i got the following error when first running mongod.:

2017-04-11T12:32:25.932-0500 I STORAGE  [initandlisten] exception in initAndListen: 28596 Unable to determine status of lock file in the data directory /data/db: boost::filesystem::status: Permission denied: "/data/db/mongod.lock", terminating

Which makes sense but what doesn't make sense is the only way i can actually run it mongod is if i:

chmod 777 /data -R

If i

   chmod 666 /data -R

i get the same error. Since this is supposed to be the data directory why does it require execute permission.

i added my user to the mongodb group

sudo usermod -g mongodb myuser

and then i tried

chmod 770 /data -R

and its still failing even through i'm a member of the mongodb group.

Why am i messing with all this? Because i want to secure the data directory appropriately and don't want to have to run with 777 security.

So the questions are:

Why is execute permission required
Why am i unable to run it when i was a member of the mongodb group?

This sudo chown mongodb:mongodb /data -R worked ?? Why is -R flag passed after the path? — franklinsijo
– franklinsijo, Commented Apr 11, 2017 at 18:10

Ed Tyrrill · Accepted Answer · 2017-04-11 20:02:26Z

2

Directories need to have execute permission, but the files within the directories do not need execute permission. Also, as noted by @franklinsijo, -R should be the first parameter to chmod.

To fix things I would do the following:

$ sudo chmod -R 770 /data
$ sudo find /data -type f -exec chmod 660 {} \;

This will first give everything under /data execute permission, and then return all the normal files to having only read and write, but not execute.

edited Apr 11, 2017 at 20:02

answered Apr 11, 2017 at 18:36

Ed Tyrrill

531 silver badge8 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

coding4fun Over a year ago

i get the following error on the find command 'find: paths must precede expression: chmod'

Collectives™ on Stack Overflow

mongodb & /data/db directory permissions

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related