Re: sshd, sftp & umask settings (ssh.com 2.4.0)

From: news.verizon.net (michael.martinez81@verizon.net)
Date: 02/11/03


From: "news.verizon.net" <michael.martinez81@verizon.net>
Date: Mon, 10 Feb 2003 23:21:52 GMT

This is a problem with openssh as well. I wrote a patch that solves these
issues (among other issues). I just posted this patch a few minutes ago. If
you're using openssh, take a look.

Mike Martinez

"Joe Husk" <joe@indiana.edu> wrote in message
news:220120031518266320%joe@indiana.edu...
> Using multiple sftp clients it appears as thought the default umask
> setting of 077 is being used when I create a directory.
>
> I found that ssh.com's sshd has a configuration option to use the umask
> setting in the .cshrc file by setting the following in
> /etcs/ssh2/sshd2_config:
>
> AllowCshrcSourcingWithSubsystems yes
>
> However, this doesn't work for those who use bash as their default
> shell. I thought maybe having a .bashrc file with the setting umask
> 022 would work, but the setting appears to be specific only to those
> using csh or tcsh.
>
> Is there any way to change the server behavior so the default is 022
> and not 077, thereby getting around the need for the limited
> configuration setting?
>
> -joe
>



Relevant Pages

  • openssh3.5p1: new functionality added, modifications done
    ... This is NOT an official or unofficial openssh announcement, patch, release ... secure ftp services for our web content developers. ... there is no server-side control over umask and file permissions. ... I'm running openssh with my patch on my servers, and am quite happy with it. ...
    (SSH)
  • SUMMARY: Trouble last after SSH + LDAP
    ... As it turned out this is an issue with OpenSSH 4.3p1. ... Did a make distclean, applied the patch, and rebuilt with no problems. ... authentication against an OpenLDAP server. ... PAM LDAP module 1.80 ...
    (SunManagers)
  • [UNIX] OpenSSH IP Restriction Bypass (adv.option, Patch Available)
    ... OpenSSH IP Restriction Bypass ... Apply the following patch. ... The information in this bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • Openssh-3.5p1 PATCH: functionality added to sftp server
    ... A Summary of this Patch is as follows. ... functionality for the sftp-server. ... uploaded files - you can either specify an overriding umask or specify no ... Specifies the available MAC algorithms. ...
    (SSH)
  • Re: AIX patch works for Openssh but not Putty
    ... >>I have applied a patch to openssh to get it working with AIX password ... If I ssh to the daemon using openssh ssh it works fine. ... > As far as I know PuTTY does not handle PASSWD_CHANGEREQ. ...
    (comp.security.ssh)