[Bug 1584] umask setting in sshd

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=1584


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au


--- Comment #3 from Darren Tucker <dtucker at zip.com.au> 2009-08-20 23:24:50 EST ---
(In reply to comment #2)
> On certain uploadservers we would like users to have a umask 002 by
> default. so that uploaded files from, say, windows will have group
> write permission. These users are often collaborating with others and
> have no clue about permissions.

So you're talking about the umask of the eventual user's shell?  or an
sftp-only session?  Can you set it in whatever shell startup you have?

The reason for the change was that the sshd server itself could also
create world writeable files when started with a permissive umask (eg
the sshd.pid file).

If it is sftp and you're using the external sftp server you could work
around it by pointing "Subsystem sftp" in sshd_config to a shell
wrapper that just sets the umask and execs the real sftp-server.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.