5

I've got a vsftp server running. Here's what I want to do :

2 developpers are given the access through an ftp client to a web directory. They write the files they want. Then they refresh the pages (F5) and the web server gives them the new pages.

Here's what I did :

  1. Create a group (name it
    allaccessgroup
    ).
  2. create
    user1
    which belongs to this group and
    user2
    which also belongs to this group
  3. create a directory
    /var/www/newsite
  4. chgrp allaccessgroup /var/www/newsite
  5. chown apache /var/www/newsite
  6. chmod 570 /var/www/newsite

This way : apache can read, and only read the php files and all user1 and user2 are given the rights to do what they want.

The problem is that I want user1 and user2 to upload their files. When they are uploaded the files permissions are allaccessgroup / user1 or allaccessgroup / user2, and I want the permissions allaccessgroup / apache.

I'm looking for a way to change the ownnership automatically as soon as the files are uploaded. I've read some stuff like this : create a php file then call once the upload is done :

$complete = $complete.exec("ssh root@host -i /path/to/pulic/key chmod 0700 /Users/".$shortname."/Private/\n");

I don't like calling "exec" this would mean grant the "exec" access to php... Any other idea welcome !

By the way :

I've been looking to the vsftp config file :

chown_uploads=YES chown_username=apache

but this is for for uploaded anonymous files to be owned by a different user, not for a specific user

Any other idea welcome !

Thanks !

4 Answers 4

2

Take a look at the local_umask directive inside the vsftpd.conf

1
  • I've not found a good solution so I changed to o+rw (others). Now everyne, including apache, is authorized to read the file whereas the ownership is still user1 (or user2). This is not exactly what I wanted, but anyway it works so I let it like that (m$oft way \o/... private joke) Jun 3, 2009 at 14:02
1

Another option is to look at sticky bits if the two belongs to the same group, but it is not their primary group. chmod g+s /var/www/newsite This way, all new files created in the directory will have the group ownership of the parent. Haven't checked sub-directories though, but you can test that.

1
  • No need to change system configs - best solution IMHO. Feb 5, 2020 at 18:38
0

file_open_mode = The permissions with which uploaded files are created. Umasks are applied on top of this value. You may wish to change to 0777 if you want uploaded files to be executable.

Default: 0666 
0

This is slightly offtopic, but VSFTP ships with the anonymous user enabled, just so you know.

http://www.standalone-sysadmin.com/blog/2008/11/default-vsftpd-on-centos-is-dumb/

Just letting you know in case you didn't test that.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .