Mount a directory elsewhere with changed permissions.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Martin Pärtel e0aba6935e Released 1.17.0. 1 month ago
releasescript updated repo URL 2 months ago
src Reverted change in 1.16.0 that made direct_io the default. 1 month ago
tests Revert "Skip test if unshare was not possible" 2 months ago
vagrant Removed trusty64 Vagrantfile. 2 months ago
.gitignore Gitignored .idea and .vscode 2 years ago
.travis.yml Switched Travis env to Xenial (from Trusty). 3 years ago
COPYING Initial commit to git. 11 years ago
ChangeLog Released 1.17.0. 1 month ago Added Vagrant test runner, initially running some Ubuntus and CentOSes. 6 years ago Mentioned in readme. 1 month ago
TODO Initial commit to git. 11 years ago Remove ./configure's --enable-debug. 6 years ago Released 1.17.0. 1 month ago Fixed 8 months ago


bindfs -

bindfs is a FUSE filesystem for mirroring a directory to another directory, similarly to mount --bind. The permissions of the mirrored directory can be altered in various ways.

Some things bindfs can be used for:

  • Making a directory read-only.
  • Making all executables non-executable.
  • Sharing a directory with a list of users (or groups).
  • Modifying permission bits using rules with chmod-like syntax.
  • Changing the permissions with which files are created.

Non-root users can use almost all features, but most interesting use-cases need user_allow_other to be defined in /etc/fuse.conf.


FUSE 2.8.0 or above is required. FUSE 3 is supported. When using FUSE 3, libfuse 3.10.2 or newer is recommended to avoid a bug with readdir, though it only seems to affect a few applications.

Download a release or clone this repository.

Then compile and install as usual:

./  # Only needed if you cloned the repo.
make install

If you want the mounts made by non-root users to be visible to other users, you may have to add the line user_allow_other to /etc/fuse.conf.

On some systems, you may have to add your user to the fuse group.


See the bindfs --help or the man-page for instructions and examples.

MacOS note

The following extra options may be useful under osxfuse:

-o local,allow_other,extended_security,noappledouble

See for details.

Test suite

Build Status

Bindfs comes with a (somewhat brittle and messy) test suite. Some tests must be run as root, and some tests only work as non-root.

You can run run the tests with ./ It requires Ruby and sudo, and it uses valgrind if installed.

Vagrant test runner

There is also a set of Vagrant configs for running the test suite on a variety of systems. Run them with vagrant/test.rb (add --help for extra options).

You can destroy all bindfs Vagrant machines (but not the downloaded images) with make vagrant-clean.


GNU General Public License version 2 or any later version. See the file COPYING.