How do I set the default values of directories and files created to be 775 ? My understanding is that I need to modify the umask on VSFTPD, but how do I know what to change it to?
Add a comment
|
2 Answers
Umask and final permissions that you need should add up to 777. Since you need 775 permissions, you need 777 - 775 = 002 as umask.
answered Nov 13, 2010 at 1:52
-
2Beware that these are octal values, so
local_umask=002may not give the expected results — you better prefix by a '0' :local_umask=0002(seeman vsftpd.conf). Jul 23, 2015 at 11:12 -
@SkippyleGrandGourou,
002is an octal value, isn't it? Why do you add another leading0?– JdamianJan 18, 2016 at 15:08 -
2Well, it may not matter for
002(can't remember my needs at the time), but it should for e.g.022(which will be treated as base 1022) vs0022. Anyway, it didn't work for me without it… Jan 18, 2016 at 16:31
In case you are wondering where to set your umask, it can be set in the vsftpd config file (/etc/vsftpd.conf) as anon_umask for anonymous access and local_umask for users.
For the mask to work properly (even without anonymous access) it seems necessary to set anon_upload_enable=YES and anon_mkdir_write_enable=YES. If these are not set, writing, reading and executing will not be allowed for groups or others on files uploaded via ftp (even though the standard privileges may be set for something else).
In your case, if you need user-authenticated access, you should set the following:
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=0002
anon_upload_enable=YES
anon_mkdir_write_enable=YES
file_open_mode=0777
Here, file_open_mode sets the default setting of files. 777 makes it readable, writeable and executable for anyone. With local_umask set to 002, this gives you 775, as you requested.
Notica that local_umask defaults to 077, disabling groups and others to access files in any way (hence it is set here).
Further reading: https://security.appspot.com/vsftpd/vsftpd_conf.html
