Reading permissions
Each class — owner (u), group (g), others (o) — gets three bits: read = 4, write = 2, execute = 1. Add them per class to get one octal digit: rwx = 7, r-x = 5, r-- = 4. So 755 is rwxr-xr-x.
Common modes
644rw-r--r--— regular files, web content755rwxr-xr-x— directories, scripts and binaries600rw-------— private keys (~/.ssh/id_ed25519), credentials700rwx------—~/.sshdirectory1777rwxrwxrwt—/tmp: anyone can write, only owners can delete2775rwxrwsr-x— shared team directory: new files inherit the group
Special bits
setuid runs an executable with the owner's privileges (e.g. /usr/bin/passwd) — a classic privilege-escalation target, audit them with find / -perm -4000. setgid on a directory makes new files inherit its group. The sticky bit on a directory lets only a file's owner delete it. Avoid 777: world-writable files are almost always a mistake.