Your message dated Sat, 04 Apr 2009 16:37:54 -0700
with message-id <[email protected]>
and subject line Re: Bug#496691: umask value in rssh.conf is not applied
correctly
has caused the Debian Bug report #496691,
regarding umask value in rssh.conf is not applied correctly
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
496691: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496691
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rssh
Version: 2.3.2-2
Severity: important
my umask=007 in my rssh.conf.
my chroot jail is setup to offer ONLY SFTP;
when a user uploads a new file, instead of having mode=660, as one would
expect from this umask setting, it is set mode=640.
I have not fully explored the extent of this bug, and don't know if this
is a security risk. (ie: creating a file with mode more lax than the
umask setting).
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages rssh depends on:
ii debconf [debconf-2.0] 1.5.11etch2 Debian configuration management sy
ii libc6 2.3.6.ds1-13etch7 GNU C Library: Shared libraries
ii openssh-server 1:4.3p2-9etch2 Secure shell server, an rshd repla
rssh recommends no packages.
-- debconf information:
* rssh/secnote:
rssh/update-10:
rssh/update-config-pre-2.2:
rssh/chroot_helper_setuid: false
--- End Message ---
--- Begin Message ---
Russ Allbery <[email protected]> writes:
> Bob Goldberg <[email protected]> writes:
>> my umask=007 in my rssh.conf.
>> my chroot jail is setup to offer ONLY SFTP;
>> when a user uploads a new file, instead of having mode=660, as one would
>> expect from this umask setting, it is set mode=640.
> umask is a mask, not something that sets the permissions. The user can
> always upload something with more restrictive permissions than the
> umask.
I should have closed this a while back -- sorry about leaving it open.
The above is the explanation. I don't think there's a way in sftp to
force permissions to a particular value; rssh only lets you set a default
umask which masks away some permissions.
--
Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/>
--- End Message ---
