---
name: "chflagsat"
section: "2"
platform: "freebsd"
package: "base"
version: "16.0-CURRENT-20261027-61c70dc16a79"
release: "FreeBSD 16.0-CURRENT (2026-10-27)"
platforms: ["freebsd"]
url: "https://new.carta.tech/chflags/2"
---

# chflagsat(2)

set file flags

Part of [chflags(2)](/chflags/2.md).

## NAME

**chflags**, **lchflags**, **fchflags**, **chflagsat** – set file flags

## LIBRARY

Standard C Library (libc, -lc)

## SYNOPSIS

**#include \<sys/stat.h\>**

**#include \<unistd.h\>**

*int*\

**chflags**(*const char \*path*, *unsigned long flags*);

*int*\

**lchflags**(*const char \*path*, *unsigned long flags*);

*int*\

**fchflags**(*int fd*, *unsigned long flags*);

*int*\

**chflagsat**(*int fd*, *const char \*path*, *unsigned long flags*, *int atflag*);

## DESCRIPTION

The file whose name is given by *path* or referenced by the descriptor *fd* has its flags changed to *flags*.

The **lchflags**() system call is like **chflags**() except in the case where the named file is a symbolic link, in which case **lchflags**() will change the flags of the link itself, rather than the file it points to.

The **chflagsat**() is equivalent to either **chflags**() or **lchflags**() depending on the *atflag* except in the case where *path* specifies a relative path. In this case the file to be changed is determined relative to the directory associated with the file descriptor *fd* instead of the current working directory. The values for the *atflag* are constructed by a bitwise-inclusive OR of flags from the following list, defined in ⟨fcntl.h⟩:

- AT\_SYMLINK\_NOFOLLOW

  If *path* names a symbolic link, then the flags of the symbolic link are changed.

- AT\_RESOLVE\_BENEATH

  Only walk paths below the directory specified by the *fd* descriptor. See the description of the O\_RESOLVE\_BENEATH flag in the [open(2)](/open/2.md) manual page.

- AT\_EMPTY\_PATH

  If the *path* argument is an empty string, operate on the file or directory referenced by the descriptor *fd*. If *fd* is equal to AT\_FDCWD, operate on the current working directory.

If **chflagsat**() is passed the special value AT\_FDCWD in the *fd* parameter, the current working directory is used. If also *atflag* is zero, the behavior is identical to a call to **chflags**().

The flags specified are formed by *or*'ing the following values

- SF\_APPEND

  The file may only be appended to.

- SF\_ARCHIVED

  The file has been archived. This flag means the opposite of the DOS, Windows and CIFS FILE\_ATTRIBUTE\_ARCHIVE attribute. This flag has been deprecated, and may be removed in a future release.

- SF\_IMMUTABLE

  The file may not be changed.

- SF\_NOUNLINK

  The file may not be renamed or deleted.

- SF\_SNAPSHOT

  The file is a snapshot file.

- UF\_APPEND

  The file may only be appended to.

- UF\_ARCHIVE

  The file needs to be archived. This flag has the same meaning as the DOS, Windows and CIFS FILE\_ATTRIBUTE\_ARCHIVE attribute. Filesystems in FreeBSD may or may not have special handling for this flag. For instance, ZFS tracks changes to files and will set this bit when a file is updated. UFS only stores the flag, and relies on the application to change it when needed.

- UF\_HIDDEN

  The file may be hidden from directory listings at the application's discretion. The file has the DOS, Windows and CIFS FILE\_ATTRIBUTE\_HIDDEN attribute.

- UF\_IMMUTABLE

  The file may not be changed.

- UF\_NODUMP

  Do not dump the file.

- UF\_NOUNLINK

  The file may not be renamed or deleted.

- UF\_OFFLINE

  The file is offline, or has the Windows and CIFS FILE\_ATTRIBUTE\_OFFLINE attribute. Filesystems in FreeBSD store and display this flag, but do not provide any special handling when it is set.

- UF\_OPAQUE

  The directory is opaque when viewed through a union stack.

- UF\_READONLY

  The file is read only, and may not be written or appended. Filesystems may use this flag to maintain compatibility with the DOS, Windows and CIFS FILE\_ATTRIBUTE\_READONLY attribute.

- UF\_REPARSE

  The file contains a Windows reparse point and has the Windows and CIFS FILE\_ATTRIBUTE\_REPARSE\_POINT attribute.

- UF\_SPARSE

  The file has the Windows FILE\_ATTRIBUTE\_SPARSE\_FILE attribute. This may also be used by a filesystem to indicate a sparse file.

- UF\_SYSTEM

  The file has the DOS, Windows and CIFS FILE\_ATTRIBUTE\_SYSTEM attribute. Filesystems in FreeBSD may store and display this flag, but do not provide any special handling when it is set.

If one of SF\_IMMUTABLE, SF\_APPEND, or SF\_NOUNLINK is set a non-super-user cannot change any flags and even the super-user can change flags only if securelevel is 0. (See [init(8)](/init/8.md) for details.)

The UF\_IMMUTABLE, UF\_APPEND, UF\_NOUNLINK, UF\_NODUMP, and UF\_OPAQUE flags may be set or unset by either the owner of a file or the super-user.

The SF\_IMMUTABLE, SF\_APPEND, SF\_NOUNLINK, and SF\_ARCHIVED flags may only be set or unset by the super-user. Attempts to toggle these flags by non-super-users are rejected. These flags may be set at any time, but normally may only be unset when the system is in single-user mode. (See [init(8)](/init/8.md) for details.)

The implementation of all flags is filesystem-dependent. See the description of the UF\_ARCHIVE flag above for one example of the differences in behavior. Care should be exercised when writing applications to account for support or lack of support of these flags in various filesystems.

The SF\_SNAPSHOT flag is maintained by the system and cannot be toggled.

## RETURN VALUES

The **chflags()** function returns the value 0 if successful; otherwise the value -1 is returned and the global variable errno is set to indicate the error.

## ERRORS

The **chflags**() system call will fail if:

- \[ENOTDIR\]

  A component of the path prefix is not a directory.

- \[ENAMETOOLONG\]

  A component of a pathname exceeded 255 characters, or an entire path name exceeded 1023 characters.

- \[ENOENT\]

  The named file does not exist.

- \[EACCES\]

  Search permission is denied for a component of the path prefix.

- \[ELOOP\]

  Too many symbolic links were encountered in translating the pathname.

- \[EPERM\]

  The effective user ID does not match the owner of the file and the effective user ID is not the super-user.

- \[EPERM\]

  One of SF\_IMMUTABLE, SF\_APPEND, or SF\_NOUNLINK is set and the user is either not the super-user or securelevel is greater than 0.

- \[EPERM\]

  A non-super-user attempted to toggle one of SF\_ARCHIVED, SF\_IMMUTABLE, SF\_APPEND, or SF\_NOUNLINK.

- \[EPERM\]

  An attempt was made to toggle the SF\_SNAPSHOT flag.

- \[EROFS\]

  The named file resides on a read-only file system.

- \[EFAULT\]

  The *path* argument points outside the process's allocated address space.

- \[EIO\]

  An I/O error occurred while reading from or writing to the file system.

- \[EINTEGRITY\]

  Corrupted data was detected while reading from the file system.

- \[EOPNOTSUPP\]

  The underlying file system does not support file flags, or does not support all of the flags set in *flags*.

The **fchflags**() system call will fail if:

- \[EBADF\]

  The descriptor is not valid.

- \[EINVAL\]

  The *fd* argument refers to a socket, not to a file.

- \[EPERM\]

  The effective user ID does not match the owner of the file and the effective user ID is not the super-user.

- \[EPERM\]

  One of SF\_IMMUTABLE, SF\_APPEND, or SF\_NOUNLINK is set and the user is either not the super-user or securelevel is greater than 0.

- \[EPERM\]

  A non-super-user attempted to toggle one of SF\_ARCHIVED, SF\_IMMUTABLE, SF\_APPEND, or SF\_NOUNLINK.

- \[EPERM\]

  An attempt was made to toggle the SF\_SNAPSHOT flag.

- \[EROFS\]

  The file resides on a read-only file system.

- \[EIO\]

  An I/O error occurred while reading from or writing to the file system.

- \[EINTEGRITY\]

  Corrupted data was detected while reading from the file system.

- \[EOPNOTSUPP\]

  The underlying file system does not support file flags, or does not support all of the flags set in *flags*.

- \[ENOTCAPABLE\]

  *path* is an absolute path, or contained a ".." component leading to a directory outside of the directory hierarchy specified by *fd*, and the process is in capability mode or the AT\_RESOLVE\_BENEATH flag was specified.

## SEE ALSO

[chflags(1)](/chflags/1.md), [fflagstostr(3)](/fflagstostr/3.md), [strtofflags(3)](/strtofflags/3.md), [init(8)](/init/8.md), [mount\_unionfs(8)](/mount_unionfs/8.md)

## HISTORY

The **chflags**() and **fchflags**() system calls first appeared in 4.4BSD. The **lchflags**() system call first appeared in FreeBSD 5.0. The **chflagsat**() system call first appeared in FreeBSD 10.0.
