Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have an Ubuntu 12.04 server set up with ProFTPd for users to upload files. Each user has their own account and are jailed to their directory.

Normally, everything works fine, they get 644 permissions on created/uploaded files, and 755 permissions on created/uploaded folders.

The problem is, occasionally some files will get uploaded with 600 permissions (or changed after uploading, I'm not sure?), so they are not readable to anyone but the owner. Is there any way to lock/force permissions to 644 on files?

I know I can take away permissions with umask but I don't want this, I want to stop the user reducing the permissions too much, so they shouldn't be able to go below 644 (rw- r-- r--)

share|improve this question

1 Answer 1

up vote 1 down vote accepted

As far as I know you can't control ftp in the way you want, you could only limit chmod for some users entirely or allow it. There isn't a middle way. Maybe you could use auditd to monitor for changes and then take action on them, but that would be really complicated.

Edit: Limiting chmod in proftpd:

    <Limit SITE_CHMOD>
         DenyAll   
    </Limit>
share|improve this answer
    
Do you know if it's easy to disable chmod with ProFTPd? –  BT643 Oct 15 '13 at 15:15
    
Yes, you just use the limit directive: <Limit SITE_CHMOD> DenyAll </Limit> (I don't know how to format this in the comments) –  Jure1873 Oct 15 '13 at 15:16
    
Thanks! :) I would have voted your answer up too, but I can't do that until I have 15 reputation :( –  BT643 Oct 19 '13 at 17:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.