[scponly] Change default permissions for uploaded files

[Ralf Durkee]

There is an sftp patch to the sftp-server allows you to control the umask 
which controls the default permissions. This is independent of 
scp-only.  http://sftplogging.sourceforge.net/

To be complete you'd also have to eliminate usage of chmod, chown, chgrp 
which it also provides.  Of course if they don't have shell access, then 
they shouldn't be able to run executables in their home directory anyway.

-- Ralf Durkee, CISSP, GSEC, GCIH
Principal Consultant
585-624-9551
http://rd1.net


At 03:57 PM 7/6/2004 -0700, Todd Bushnell wrote:
>content-class: urn:content-classes:message
>Content-Type: multipart/alternative;
>         boundary="----_=_NextPart_001_01C463AC.955B438C"
>
>I m trying to amend the server config such that I can control the 
>permissions of all uploaded files.  Unfortunately, I ve been unable to do 
>this using umask settings in the .bashrc and can t find any other way to 
>accomplish my goal.  I m trying to lock this down such that users can t 
>install executable files into their home directory and freely run 
>them.  Is this possible with scponly?
>
>Todd Michael Bushnell
>
>Senior Network & Systems Engineer
>
>DemandTec, Inc.
>
>1 Circle Star Way, Suite 200
>
>San Carlos, CA  94070
>
>tel  650-226-4708
>
>fax 650-556-1190
>
>todd.bushnell at demandtec.com
>
>www.demandtec.com
>
>_______________________________________________
>scponly mailing list
>scponly at lists.ccs.neu.edu
>https://lists.ccs.neu.edu/bin/listinfo/scponly