SUMMARY: File Permission setting and ftp

From: Tuan-Eng Tan (tetan@uwin.siu.edu)
Date: Wed Sep 02 1998 - 11:48:14 CDT


Hi all,

Thanks for the following people of supply the suggestions:

Daniel Ellis <dellis@frycomm.com>
Jochen Bern <bern@TI.Uni-Trier.DE>
"Kevin P. Inscoe" <kinscoe@convergys.com>
Bill Crane <bill.crane@equifax.com>

In general, most of them suggest intalling the wu-ftpd which allow the
user to umask during the ftp session.

Tan.

--------------------------------------------------------------------------
From: Daniel Ellis <dellis@frycomm.com>

When ftping a file, the files are created with respect to the umask with
which the ftpd was started(unless you have wu-ftpd which is IMHO a much
better ftp package). The way to set this to something you desire is to
write a wrapper that gets run from /etc/inetd.conf and sets the umask
before firing off the real ftpd. There are some summaries available on
this subject in the Sun Managers' archives. The real answer is to get
wu-ftpd; it is much more configurable and secure.

Date: Tue, 1 Sep 1998 22:09:08 +0200 (MET DST)
From: Jochen Bern <bern@TI.Uni-Trier.DE>

No. An ftpd doesn't CARE what the user's shell is (apart from looking
it up in /etc/shells), much less execute it, or any of its dotfiles.

A plain vanilla OS ftpd inherits its umask from inetd, which, in turn,
inherits it from the boot scripts - which is why it's a good idea to
add a "umask 022" to the beginning of all boot scripts. :-} wu-ftpd
has the umask to set configured in the setups, but at least it imple-
ments a couple nonstandard commands ... :

| penthesilea:/home/TI/bern% ftp penthesilea
| Connected to ti.Uni-Trier.DE.
| 220 penthesilea FTP server (Version wu-2.4AVS(1) Wed Oct 29 19:16:26 MET 1997) ready.
[...]
| ftp> quote help
| 214-The following commands are recognized (* =>'s unimplemented).
| USER PORT STOR MSAM* RNTO NLST MKD CDUP
| PASS PASV APPE MRSQ* ABOR SITE XMKD XCUP
| ACCT* TYPE MLFL* MRCP* DELE SYST RMD STOU
| SMNT* STRU MAIL* ALLO CWD STAT XRMD SIZE
| REIN* MODE MSND* REST XCWD HELP PWD MDTM
| QUIT RETR MSOM* RNFR LIST NOOP XPWD
| 214 Direct comments to ftp-bugs@penthesilea.
| ftp> quote help site
| 214-The following SITE commands are recognized (* =>'s unimplemented).
| UMASK CHMOD GROUP NEWER INDEX ALIAS GROUPS
| IDLE HELP GPASS MINFO EXEC CDPATH
| 214 Direct comments to ftp-bugs@penthesilea.
| ftp> quote site umask
| 200 Current UMASK is 002
| ftp> quote site umask 022
| 200 UMASK set to 022 (was 002)

Date: Tue, 01 Sep 1998 16:07:18 -0400
From: "Kevin P. Inscoe" <kinscoe@convergys.com>

I had this problem in AIX (I do not know how to fix in Solaris) but
ended up using ftp> site umask 002. You can also set the ftpd to be
running umask 002 but I do not know if you want that for security
reasons.

Date: Tue, 1 Sep 1998 13:24:04 -0400 (EDT)
From: Bill Crane <bill.crane@equifax.com>

If it happens on a put, then the file permissions are controlled by
the owner of the ftp daemon (is this root?). You could modify roots
umask, but this may not be desirable.

There is a way around this problem if you're running WU FTP, as you
can specify the umask to be used on the FTP definition in inetd.conf.
If you're using the native Solaris FTP, I'm not sure if there is
an easy work around.



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:12:48 CDT