File attribute
File attributes are a type of meta-data that describe and may modify how files and/or directories in a filesystem behave. Typical file attributes may, for example, indicate or specify whether a file is visible, modifiable, compressed, or encrypted. The availability of most file attributes depends on support by the underlying filesystem
where attribute data must be stored along with other control structures. Each attribute can have one of two states: set and cleared. Attributes are considered distinct from other metadata, such as dates and times, filename extensions or file system permissions. In addition to files, folders, volumes and other file system objects may have attributes.
DOS and Windows
Traditionally, in DOS and Microsoft Windows, files and folders accepted four attributes:- Archive : When set, it indicates that the hosting file has changed since the last backup operation. Windows' file system sets this attribute on any file that has changed. Backup software then has the duty of clearing it upon a successful full or incremental backup.
- Hidden : When set, indicates that the hosting file is hidden. MS-DOS commands like
dir
and Windows apps like File Explorer do not show hidden files by default, unless asked to do so. - System : When set, indicates that the hosting file is a critical system file that is necessary for the computer to operate properly. MS-DOS and Microsoft Windows use it to mark important system files. MS-DOS commands like
dir
and Windows apps like File Explorer do not show system files by default even when hidden files are shown, unless asked to do so. - Read-only : When set, indicates that a file should not be altered. Upon opening the file, file system API usually does not grant write permission to the requesting application, unless the application explicitly requests it. Read-only attributes on folders are usually ignored, being used for another purpose.
- Compressed : When set, Windows compresses the hosting file upon storage. For more information, see.
- Encrypted : When set, Windows encrypts the hosting file upon storage to prevent unauthorized access. For more information, see.
- Not Content-Indexed : When set, Indexing Service or Windows Search do not include the hosting file in their indexing operation.
- Directory : The entry is a subdirectory, containing file and directory entries of its own.
- Reparse Point : The file or directory has an associated re-parse point, or is a symbolic link.
- Not Indexed : The file is not indexed on the host device.
- Offline : The file data is physically moved to offline storage.
- Sparse : The file is a sparse file, i.e., its contents are partially empty and non-contiguous.
- Temporary : The file is used for temporary storage.
attrib
command in cmd.exe and command.com can be used to change and display the four traditional file attributes. File Explorer in Windows can show the seven mentioned attributes but cannot set or clear the System attribute. Windows PowerShell, which has become a component of Windows 7 and later, features two commands that can read and write attributes: Get-ItemProperty
and Set-ItemProperty
. To change an attribute on a file on Windows NT, the user must have appropriate file system permissions known as Write Attributes and Write Extended Attributes.Unix and POSIX
In Unix and Unix-like systems, including POSIX-conforming systems, each file has a 'mode' containing 9 bit flags controlling read, write and execute permission for each of the file's owner, group and all other users plus the setuid and setgid bit flags and a 'sticky' bit flag.The mode also specifies the file type.
4.4BSD and derivatives
In 4.4BSD and 4.4BSD-Lite, files and directories accepted four attributes that could be set by the owner of the file or the superuser and two attributes that could only be set by the superuser :- No-dump: When set, it indicates that the file or directory should not be saved during a backup operation.
- Immutable: When set, indicates that the file or directory should not be altered. Attempts to open the file for writing, create a file within the directory, remove a file from the directory, rename a file within the directory, rename the file or directory, or remove the file or directory will fail with a permissions error.
- Append-only: When set, indicates that the file should only be appended to.
- Opaque: When set on a directory, indicates that the directory is opaque when viewed through a union stack.
- No-unlink: When set, indicates that the file or directory should not be renamed or removed. Attempts to rename or remove the file or directory will fail with a permissions error.
- No-archive: When set, indicates that the file or directory should not be archived.
- Snapshot: When set, indicates that the file or directory is a snapshot file. This attribute is maintained by the system, and cannot be set, even by the super-user.
- No-history: When set, indicates that history should not be retained for the file or directory.
- Swapcache: When set, indicates that clean filesystem data for the file, or for the directory and everything underneath the directory, should be cached in swap space on a solid-state drive.
- Swapcache: When set, indicates that clean filesystem data for the file, or for the directory and everything underneath the directory, should not be cached in swap space on a solid-state drive.
- Archived: When set, indicates that the file or directory may be archived.
- Archived: When set, indicates that the file or directory is archived.
- Hidden: When set, indicates that the file or directory should not, by default, be displayed in the GUI; ls will display it, however.
- Restricted: When set, indicates that the file or directory will be protected by System Integrity Protection
- Compressed: Read-only attribute for files compressed using HFS+ Compression
chflags
and ls
commands can be used to change and display file attributes. To change a "user" attribute on a file in 4.4BSD-derived operating systems, the user must be the owner of the file or the superuser; to change a "system" attribute, the user must be the superuser.Linux
The Linux operating system can support a wide range of file attributes that can be listed by thelsattr
command and modified, where possible, by the chattr
command.Programs can examine and alter attributes using ioctl operations.
Many Linux file systems support only a limited set of attributes, and none of them support every attribute that
chattr
can change. File systems that support at least some attributes include ext4, XFS and btrfs.Attribute | flag | option | Semantics and rationale |
No atime updates | A | +A,-A | record is not modified when file is read/accessed. |
Append-only | a | +a,-a | Writing to file only allowed in append mode. |
Immutable | i | +i,-i | Prevents any change to file's contents or metadata: file/directory cannot be written to, deleted, renamed, or hard-linked. |
No dump | d | +d,-d | File is skipped by the program |
Secure deletion | s | +s,-s | Requests that, when deleted, all file data blocks are filled with zeroes. |
Synchronous updates | S | +S,-S | Changes are written synchronously to the underlying filesystem storage medium; equivalent to 'sync' mount option for affected files. |