The tag has no usage guidance.

learn more… | top users | synonyms

28
votes
8answers
35k views

How to setup ssh's umask for all type of connections

I've been searching for a way to setup OpenSSH's umask to 0027 in a consistent way across all connection types. By connection types I'm referring to: sftp scp ssh hostname ssh hostname program ...
11
votes
5answers
6k views

Specify default group and permissions for new files in a certain directory

I have a certain directory in which there is a project shared by multiple users. These users use SSH to gain access to this directory and modify/create files. This project should only be writeable to ...
11
votes
2answers
16k views

How do I set default permissions for SFTP for an Ubuntu Server?

We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)? I'm also using setgid (chmod g+s) so that ...
10
votes
2answers
19k views

How do I set default umask in apache on debian?

I need files created by apache2 to have umask 002, i.e. group rw, by default. I've tried putting umask 002 in /etc/apache2/envvars and although this script does get executed as part of apache start ...
10
votes
4answers
12k views

How to get full control of umask/PAM/permissions?

// Updated Feb 8 - Outstanding issues in brief: How to umask directories differently from files? How to umask on Nautilus copy/paste? How to set umask for SSHFS? OUR SITUATION Several people from ...
7
votes
1answer
6k views

Does OpenSSH SFTP server use umask or preserve client side permissions after put command (chrooted environment)?

I know this question has been already discussed, but by reading the posts I could not figure the answers, because some said "yes umask can work", and others say "OpenSSH put command always preserve ...
7
votes
3answers
10k views

Ways to set umask on Ubuntu for daemon processes

I have an http daemon server process (yaws) that I would like to have server write any new files with a umask of 002, so that another user in the same group can modify, move, or delete files created ...
7
votes
3answers
10k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
4
votes
2answers
31k views

Default owner/permissions of created files via VSFTPD

How do I set the default values of directories and files created to be 775 ? My understanding is that I need to modify the umask on VSFTPD, but how do I know what to change it to?
4
votes
1answer
1k views

Howto force umask 002 for all software?

I have added umask 002 to /etc/profile, but software like git and apache still sets files to 755 instead of 775. Is there a way to force umask 002 for all programs on a machine?
4
votes
2answers
1k views

How can I change the umask for a user when he logs on to an alternate group?

I want the umask to be more permissive for users when they switch to a non-default group. Just to demonstrate what I mean: $ id uid=500(beamin) gid=500(beamin) groups=10(wheel) $ umask 0022 $ sg ...
3
votes
2answers
6k views

Setting umask for all users

I'm trying to set the default umask to 002 for all users including root on my CentOS box. According to this and other answers, this can be achieved by editing /etc/profile. However the comments at ...
3
votes
2answers
3k views

How can I give default group write permission to a file created by www-data?

our apache runs as www-data:psacln if this line is run; <?php file_put_contents("./file.txt",""); then apache creates this file without write permission to the group, -rw-r--r-- 1 www-data ...
3
votes
1answer
3k views

Setting umask for www-data user (run via sudo) on Ubuntu 10.04 LTS

I run apache as user www-data on Ubuntu 10_04 LTS. I've got /etc/apache2/envvar setup with 'umask 002' so that any new files/dirs created by the daemon have group write permissions enabled. At times, ...
3
votes
1answer
1k views

Increasing permissiveness/permissions for umask + openssh + chrooted SFTP server using internal-sftp

The suggestion found at these links works for me: How to setup ssh's umask for all type of connections http://ubuntuforums.org/showthread.php?t=1107974#5 Summary: Use PAM to inject the umask, ...
2
votes
3answers
1k views

rsync pull disregards my umask, why?

My umask is 0002. So when I rsync -r me@remote:new ., why aren't the results group-writable? drwxrwsr-x 10 root developers 4096 Aug 22 12:55 . drwxrwsr-x 12 root developers 4096 Jul 14 ...
2
votes
1answer
1k views

SFTP-server uploaded files having wrong rights

I have been trying to figure out what is wrong with the file rights. When I am uploading files using FileZilla all the files get rights -rw-r--r--. I would want them to have -rwxr-xr-x. I have tried ...
2
votes
3answers
2k views

How to set umask for php-fpm in Fedora

I cannot find where to set umask (to set proper permissions to files created by php scripts) in Fedora 19. (specifically, I want new files to have the permissions 664)
2
votes
2answers
308 views

Why is umask a AND NOT mask operation

Why is umask a $perms AND NOT $mask and not simply $perms AND $mask instead? In other words why is there a NOT in there; why doesn't wasn't it implemented as an and mask? As an example, 666 and 700, ...
2
votes
3answers
2k views

Conflicts between ACLs and umask

I have a directory which can be read and written by a couple of unix groups. This is achieved by using ACLs. Let's assume I did it like this: mkdir /tmp/test setfacl -d -m g:group1:rwx /tmp/test ...
2
votes
1answer
981 views

Helping changing FTPD default umask

Default umask when logging in through FTP is 027 . I want to change this to 002 so a process with the same group can consume an uploaded file. Man 'ftpd' page says pass -u 002 to the ftpd command. ...
2
votes
1answer
3k views

How to set default group permission in Ubuntu for www-data (apache's user)?

I have not been able to set a umask for www-data (apache's user). I tried to put umask 002, like in many other examples I found, in /etc/init.d/apache2 script, or in /etc/apache2/envvars.... Then I ...
2
votes
1answer
65 views

Any way for openssl to generate private key with 400 (-r--------) permissions from the start?

I use openssl to generate private keys and CSRs in a script. The script needs to generate the key first, then call chmod 400 whatever.key to change the permissions of the private key to something ...
2
votes
3answers
6k views

umask for www-data user running PHP on Ubuntu

Setting up a new webserver in Ubuntu 14.04 and trying to wrangle file permissions for PHP generated files. By default, all the directories and files in /var/www are owned/grouped to www-admin. ...
2
votes
2answers
220 views

umask in Ubuntu Server 10

This is on a test machine, not production. I included the following in a user's .bashrc: umask 000 I relogged in. When I go to create a file in my home directory, say using vi test.txt, the file ...
2
votes
1answer
4k views

Set default umask for everything in Debian Squeese, included sftp

How can I change the umask for ssh and sftp in debian squeeze. I have changed the umask from 022 to 002 in /etc/profile and /etc/login.defs and modified Subsystem sftp /usr/lib/openssh/sftp-...
2
votes
1answer
555 views

Proper Way of Setting Umask For php-fpm on Debian/Ubuntu

I'd like to set umask to 002 for the php-fpm process. I'm reading here and here that on Ubuntu/Debian it is supposed to be done by modifying the init script. I'm having doubts however that this is ...
2
votes
1answer
2k views

Setting default file permissions in shared directory using ACL and umask

We have a Linux box running Ubuntu 10.04. It's primary function is a web server and it is configured with (I think) a conventional LAMP stack. Developers have access to a common directory "dev" which ...
2
votes
1answer
57 views

Should usergroups be enabled?

All our users are managed with a central LDAP. When my predecessor in managing the infrastructure created the ldap he decided against creating usergroups (meaning groups of the same name and GID as ...
2
votes
1answer
255 views

Is it possible to avoid umask 0002?

Is it possible to give an automatic ability to modify files(folders and all recursively) created by one user to another within one specified folder (let's say "shared") on the basis of both users ...
1
vote
2answers
208 views

umask seems to vary by user

I've got a development Ubuntu system for which I have several users: myself (with full sudo) and about 5 other users. (I've set up the system so everything in this respect is still at its default ...
1
vote
1answer
1k views

vsftpd seems to disreguard umask

I configured my vsftpd to allow virtual users to upload file. However I wanted all uploaded files to not be downloadable, thus depriving a potential attacker the usefulness of storing his nefarious ...
1
vote
1answer
425 views

Modifying umask for all users not functioning

I have modified /etc/login.defs and set the umask to 002 but it fails to be changed when I exit or logout and log back in. My bashrc file does NOT contain any umask settings. from /etc/login.defs # ...
1
vote
1answer
246 views

All users of a group can edit each others files (Linux)

I want anyone in group www-data to have write access to /var/www. For example, if 'a' and 'b' are in group www-data and 'a' creates a file in /var/www - then 'b' will be able to edit it. The problem ...
1
vote
2answers
2k views

Setting per-directory umask using ACLs

We want to mimic the behavior of a system-wide 002 umask on a certain directory foo, in order to ensure the following result: All sub-directories created underneath foo will have 775 permissions All ...
1
vote
1answer
2k views

What is the best place to put umask setting for php-fpm in Centos 6?

For the following two places of php-fpm init configuration on Centos 6, which one do you think is the most suitable to put in, for example, umask = 077 ? /etc/init.d/php-fpm OR /etc/sysconfig/php-...
1
vote
1answer
1k views

CentOS - Apache - Is it possible to add umask directive to httpd.conf or vhost.conf file?

Yesterday, I was finally able to get my apache process to write files to a directory by setting the umask to 002 in the /etc/sysconfig/httpd script, but I was wondering if it's possible to set this ...
1
vote
3answers
670 views

Apache 2.2 umask in FreeBSD

I have Apache 2.2 running under FreeBSD 7 (and 8). It runs with the system default umask of 022, and I need it to be 002 so that www group members can make changes without having to chase it with ...
1
vote
2answers
5k views

Apache umask 002 not changing permissions

I have used [root ~]$ echo "umask 002" >> /etc/sysconfig/httpd [root ~]$ service httpd restart restarted apache many times but whenever i install something from script the directories are ...
1
vote
0answers
55 views

nginx passenger, setting the umask

I was wondering how to set the umask for nginx or passenger or both processes. A search seems to only bring up Apache. Any help would be very much appreciated! (This is on Debian.)
1
vote
0answers
20 views

openssh sftp server file permissions not being set by umask (but folder perms are)

I am running the openssh sftp server like so: Subsystem sftp /usr/libexec/openssh/sftp-server -u 002 And the folders I upload via sftp get these permissions: drwxrwxr-x 12 developer staff ...
1
vote
1answer
318 views

Debian - File Permissions and umask

This might be a noob question, but here goes ^^: I've just set up a debian wheezy server, and Installed laravel on it. Anyway, I'm having some trouble both as to what the file permissions should be, ...
1
vote
1answer
208 views

Proper way to set default permissions

I have Debian Squeeze server with set of users. All users must be able to work with shared files. So what I did is to set to all of these users same main group (e.g. editors) Then put files into /...
1
vote
1answer
2k views

NFSv3 + ACL: mask is gone on clients

I'm sharing a NFS folder among a user group. The default umask on the clients is 0700, and this is a problem because newly created files won't be readable/writable by another users. So, I'm using ...
1
vote
0answers
698 views

CentOS 6 + OpenSSH 5.3 + umask are not working for me

I've been trying to set umask 002 to my sftp users, I already tried setting the umask in the following files: /etc/ssh/sshd_config: Subsystem sftp /usr/libexec/openssh/sftp-server #...
1
vote
1answer
238 views

Changing default permssion on ubuntu 10.4 server

I have a a Joomla CMS which is a PHP script that needs to write new files and directories, I changed the umask value and I ended up re-installing the system :-s. Can you please guide me step by step ...
0
votes
2answers
3k views

Understanding Permissions with ProFTPD (Especially Group Write)

I have proftpd running under user proftpd. I have a new virtual server in ProFTPD called "example.com" pointing to /var/www/example.com. I have chowned the /var/www/example.com folder with user "...
0
votes
1answer
516 views

umask in RHEL 6

How can one set the executable bit on files using umask? According to documentation, a umask of 000 should work, but in practice this only works on directories. Also open to other methods of ...
0
votes
2answers
2k views

Setting umask 002 for the apache, lighttpd, … didn't work?

I'm trying to make the files that created by webserver (Apache, lighttpd, ...) can be writable by the ftp users. Adding apache to nobody group and the vise versa. umask 002 for ftp works fine. But the ...
0
votes
2answers
867 views

In Linux, how do I umask differently for files and directories?

I wish to have something in my .bashrc that will mask the file permissions as 022 (resulting in new files having permission rwxr--r--) and the directory permissions as 066 (resulting in new ...