CentOS - Jul 2017 - vfstp and renaiming of files with ftp client

Hi,

I have a vsftp server and two users for up and download.

If user Alice uploads a file, the owner is set to Alice as expected
"-rw-r--r-- alice ftpuploadgroup"

Now Bob can login to the same folder and is able to rename the uploaded
file.

Bob can also rename an uploaded folder, but can't rename a file in that
folder ....

I'm confused, as I don't get why this is possible at all.

Some vsftp magic? :)

Can someone explain that to me?

    Thanks and regards . G?tz

> 
> I have a vsftp server and two users for up and download.
> 
> If user Alice uploads a file, the owner is set to Alice as expected
> "-rw-r--r-- alice ftpuploadgroup"
> 
> Now Bob can login to the same folder and is able to rename the uploaded
> file.
> 
> Bob can also rename an uploaded folder, but can't rename a file in that
> folder ....
> 
> I'm confused, as I don't get why this is possible at all.
> 
What are the permissions and ownership on the directory the uploads go
in? If its group is 'ftpuploadgroup' and has group write permissions
than any member of that group can rename files in that directory. If a
user creates a directory, then that will have rwxr-xr-x permissions so
they won't be able to rename files within that directory.

P.

Am 13.07.17 um 14:46 schrieb Pete Biggs:
>> I have a vsftp server and two users for up and download.
>>
>> If user Alice uploads a file, the owner is set to Alice as expected
>> "-rw-r--r-- alice ftpuploadgroup"
>>
>> Now Bob can login to the same folder and is able to rename the uploaded
>> file.
>>
>> Bob can also rename an uploaded folder, but can't rename a file in
that
>> folder ....
>>
>> I'm confused, as I don't get why this is possible at all.
>>
> What are the permissions and ownership on the directory the uploads go
> in? If its group is 'ftpuploadgroup' and has group write
permissions
> than any member of that group can rename files in that directory. If a
> user creates a directory, then that will have rwxr-xr-x permissions so
> they won't be able to rename files within that directory.
The permissions for the upload folder are drwx-wx--- and the owner is
Bob group is ftpuploadgroup

Alice is member of that group, but should only drop files in.

The files are ownd by Alice, and I'm bit iritated, taht Bob can rename
tham ... as Bob only has read permision (from the group)

The files in a subfolder have the same permissions and Bob cant change
tham...


    Thanks for your feedback . /G