chmod sftp command and setgid/setuid bit

Damien Miller djm at mindrot.org
Wed Apr 25 10:00:18 EST 2007


On Wed, 25 Apr 2007, Peter Stuge wrote:

> On Wed, Apr 25, 2007 at 12:30:21AM +0200, Eric Noulard wrote:
> > As far as I understand sftp-server.c code is seems that
> > 
> > chmod(name, a->perm & 0777);
> > 
> > is responsible for this behavior.
> > 
> > Could you tell me if not handling setuid/setgid bits on sftp-server
> > is done on purpose?
> > Is it a feature or should it be considered a bug?
> 
> Seems like a bug..
>
> --8<-- draft-ietf-secsh-filexfer-12.txt 7.6. Permissions

We do not implement filexfer-12, we stopped chasing newer filexfer drafts
when the authors started loading NFS-like features into the protocol.

The reason for the mask is probably simple paranoia, and it could probably
be relaxed. Please file a bug at http://bugzilla.mindrot.org/

-d


More information about the openssh-unix-dev mailing list