I configured my
vsftpd to allow virtual users to upload file. However I wanted all uploaded files to not be downloadable, thus depriving a potential attacker the usefulness of storing his nefarious files.
So I put in my
file_open_mode=0777 anon_umask=0577 local_umask=0577
I figured that one of the
*_umask=0577 is superfluous, but it seems to be harmless, and it cover all my bases.
However, when I upload a file, it gets a:
-rw------ (0600) permission instead of
The questions are: Why? and How to fix this?.
Incidentally, my current configuration seem to do the correct thing, that is to allow only uploads, and disallow download of uploaded files, but I don't understand why.
Just to complete the picture, I also use:
virtual_use_local_privs=NO guest_enable=YES guest_username=my_ftp_user chown_uploads=YES chown_username=my_ftp_user
that works fine, and is there to help me enforce global ftp quota.