up vote 3 down vote favorite
3
share [g+] share [fb]

We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)?

I'm also using setgid (chmod g+s) so that they inherit the proper group owner.

link|improve this question
73% accept rate
feedback

2 Answers

up vote 4 down vote accepted

In /etc/ssh/sshd_config, change the following:

Subsystem sftp /usr/lib/openssh/sftp-server

to:

Subsystem sftp /bin/sh -c 'umask 0002; exec /usr/libexec/openssh/sftp-server'

Soure: http://jeff.robbins.ws/articles/setting-the-umask-for-sftp-transactions

link|improve this answer
1  
It's better to put an exec before the final /usr/.../sftp-server, so that you won't have useless sh processes lying around. – grawity Jun 13 '10 at 20:32
Also, an umask is just a number; 0002 can be written shorter as 02. – grawity Jun 13 '10 at 20:33
I thought umask was an octal, but thanks for the exec part. – wag2639 Jun 16 '10 at 15:38
1  
Yes, umasks are octal. That doesn't mean you need three leading zeroes - one is enough. (In fact, the umask command doesn't need any leading zeroes, it always reads the argument as an octal number.) ... But on the second thought, maybe 0002 is clearer to understand. – grawity Jun 19 '10 at 20:52
feedback
up vote 0 down vote

In /etc/ssh/sshd_config, you can pass a flag and value in (-u 0002) like the following to set the umask value:

Subsystem sftp /usr/lib/openssh/sftp-server -u 0002

Append the -u 0002 to the existing Subsystem sftp line of the configuration file.

Afterwards, you will need to restart ssh for the changes to take effect:

service ssh restart
link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.