Understanding Special Permission Sticky Bit in Linux

Now there are few permissions which are used in Linux and are referred as special permission due to SUID and SGID in their respective link their different functionality in terms of their usage. You can find details about
 

Sticky Bit

This special permission becomes very useful in most the cases. This is used when you are the owner of a particular file and you have give full permission to that file for all others but still you don't want any one of them to delete that file apart from the user and group owner. In that case sticky bit plays a very important role as once you assign this permission to some file or directory no one else apart from the user and group owner will be able to delete that file or directory.
Before showing you any example let me give you some helpful and important tips.
Sticky Bit can be assigned using two ways
1. Octal (1)
2. Symbolic (t)
 

Octal (1) Method

If you want to use octal method then this is the syntax which you need to follow

# chmod 1XXX /dirname

Here 1 means assigning sticky bit and XXX means the permission to be applied
For example:

# chmod 1775 /statusupdate

Here I am assigning full permission to user and group owner and read and execute permission to others including a sticky bit given by 1 at the beginning of permission.
 

Symbolic (t) Method

If you want to assign sticky bit using symbolic way then this will be the syntax

# chmod +t /dirname

For example

# chmod o+t /statusupdate

Here I am not meshing with any other existing permission instead additionally I am assigning a sticky bit permissions for all others for statusupdate directory
Let me show you some practical example.
 

Examples

I have 2 users namely user1 and user2. A common directory is assigned to both of them by the root to put up their status update at the end of the day in this directory. Now being a root I will assign sticky bit to the main directory along with any sub directories if there is any.

# mkdir /statusupdate
# chmod 1777 /statusupdate
user1 statusupdate
$ cd /statusupdate
$ mkdir mywork
$ chmod 1777 mywork
$ ls -l
total 4
drwxrwxrwt. 2 user1 user1 4096 Oct 17 07:04 mywork

Now as in my case for the demo purpose I have given full permission to mywork directory which I don't think most will do but this is just an example. Now as you see addition (t) option is visible marked in red color in the permission section for others.
Now log in as user2
It seems user2 is not so friendly with user1 and wants to delete his statusdata to create his impression on the boss. Lets see if he can do that

$ cd /statusupdate
$ ls -l
total 4
drwxrwxrwt. 2 deepak deepak 4096 Oct 17 07:04 mywork
$ rm -rf mywork
rm: cannot remove `mywork': Operation not permitted

Ooops the operation is not permitted. So it seems user2 will have to honestly work hard to create an impression over his boss.
So this is how sticky bit works the same could have been done using symbolic way as well.
 

Removing sticky bit

# chmod 0775 /statusupdate
# ls -l
drwxrwxr-x.   3 root root  4096 Oct 17 07:07 statusupdate

The same can be done in symbolic way using the below command

# chmod -t /statusupdate
IMPORTANT NOTE:

Many a times you will observe a capital (T) at the others permission section instead of small (t) now you do not have to get confused regarding this as both of them signify sticky bit but with a little difference that if others have executable permission on them then after applying sticky bit you will get small (t) but if others do not have executable permission then others will get capital (T).

Let me show you with the help of one example
Before applying Sticky Bit with executable permission

# chmod 775 /statusupdate
# ls -l
drwxrwxr-x.   3 root root  4096 Oct 17 07:07 statusupdate

After Sticky Bit with executable permission

# chmod 1775 /statusupdate
# ls -l
drwxrwxr-t.   3 root root  4096 Oct 17 07:07 statusupdate

Now as you see a small (t) since the directory had executable permission
Before applying sticky bit without executable permission

# chmod 774 /statusupdate
# ls -l
drwxrwxr--.   3 root root  4096 Oct 17 07:07 statusupdate

After Sticky Bit without executable permission

# chmod 1774 /statusupdate
# ls -l
drwxrwxr-T.   3 root root  4096 Oct 17 07:07 statusupdate

So I hope I cleared my point on all the possible cases with sticky bit.
Now in case you want to search all the files and directories with sticky bit permission

# find / -perm +1000

where 1000 signifies files or dir having sticky bit as per the octal value we use. Now again you can use additional switch with find command like -type d or f to search more accurately.