openssh bugs - Sep 2006 - [Bug 1229] No way to set default umask for SFTP server

http://bugzilla.mindrot.org/show_bug.cgi?id=1229

           Summary: No way to set default umask for SFTP server
           Product: Portable OpenSSH
           Version: 4.3p2
          Platform: Other
        OS/Version: Mac OS X
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: sftp-server
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: alouv at apple.com


There is no way to set a default umask for the SFTP server.

Steps to Reproduce:

1. Enable SFTP server.
2. Connect using command-line sftp client.
3. Put a file to the server.
4. ls -l, and you'll see that the file has not been created
group-writable.

Expected Results

There should either be some way to configure the server so that the
default umask will be as desired, such as 0002, or the file should take
the umask and group id from the enclosing parent folder.  This is a
must if multiple developers are to use SFTP to work on the same set of
files in the web server, for example. 

Actual Results:  The server always creates files with its own umask,
the default of which cannot be changed.

Workaround:   Use FTP instead, and risk having your passwords stolen.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1229





------- Comment #1 from dtucker at zip.com.au  2006-10-03 19:21 -------
(In reply to comment #0)
> There is no way to set a default umask for the SFTP server.
[...]
> Workaround:   Use FTP instead, and risk having your passwords stolen.
Another workaround: sftp-server inherits it umask from the shell (since
it's run via "sh -c") so you can set it in /etc/profile or
equivalent.

That said, since sftp-server understands arguments these days then
adding one for umask might be a reasonable idea.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.