[scponly] scponly and umask

Kaleb Pederson kaleb.pederson at gmail.com
Tue Mar 31 13:01:24 EDT 2009


On Tue, Mar 31, 2009 at 9:47 AM, Ken <kbingham at booksurge.com> wrote:
> No, the sftpfilecontrol directives given in sshd_config do not have any
> effect on the env vars of normal shell or scponly shell. Both have the
> values:
>> SFTP_UMASK=""
>> SFTP_PERMIT_CHMOD="1"
>> SFTP_PERMIT_CHOWN="1"

I'm glad to know that they are the same both way.  However, that
wasn't the question I was trying to get at.  If you change the shell
of a test user to bash/sh, do the chmod and chown restrictions take
effect?

--Kaleb

> Ken Bingham
> SysAdmin, Booksurge
> (843) 760-8038 EST
>
>
>
> Kaleb Pederson wrote:
>> Thanks.
>>
>> Does it work correctly in a normal shell (e.g. disallow the users from
> issuing chmod/chown)?
>>
>> In looking at the patch, with SFTP_PERMIT_CH{MOD,OWN}=1, it should
> indeed allow the users to change owner and permissions, so I expect it
> will allow the users to issue chmod/chown commands.
>>
>> --Kaleb



More information about the scponly mailing list