Bottom Line: Do Not “Fix” ZimaOS Mount Roots With chmod 777
In 1.6.2 Beta 2, newly mounted Btrfs volumes appeared as root:root with 755, so a normal SSH user could no longer write directly to the root of /media/<volume>. That was a real beta observation. It does not automatically mean the current release is broken, and recursively loosening mount-root permissions is a risky workaround.
The Beta Changed More Than One Storage Security Path
A related 1.6.2 Beta 2 report showed app-data migration being blocked by a new security policy, and IceWhale acknowledged that specific migration failure as a known issue to be fixed. Stable 1.6.2 later shipped broader security hardening and storage fixes. So the beta period clearly contained both intentional security changes and at least one regression.
The ZimaOS 1.6.x change summary is useful historical context.
Current Public Docs Do Not Promise Non-Root Write Access to Every Mount Root
ZimaOS now treats storage as a managed service used by Files, SMB shares and Docker paths. The supported user workflow is to create folders/shares and map applications to the right path, not to rely on arbitrary shell writes to the root of every mounted disk.
The current ZimaOS storage guide and ZimaOS app path and migration guide are better current references than the beta filesystem mode alone.
If a Script Needs Write Access, Give It a Dedicated Directory
sudo mkdir -p /media/YourVolume/automation
sudo chown YOUR_USER:YOUR_GROUP /media/YourVolume/automation
sudo chmod 775 /media/YourVolume/automation
Target the directory the script actually needs. Do not recursively change the whole disk root. The chmod manual and chown manual are the upstream references.
How to Tell Policy From Regression
If Files/SMB/app access works but direct shell writes to the volume root fail, that can be consistent with a managed-permission model. If the supported Data Migration or share UI is blocked, collect the exact error and version; that is a different class of failure and should be tested against the current stable release.
