Set umask for certain sftp users

[Richard Ross]

Thought I would be able to perform the following .. Any other ideas how I can do this? I basically want to create a drop box .. write only access without list or read capabilities to their home directory

I added the following line to /opt/ssh/etc/sshd_config

Match User hqdata
SftpUmask 757

/sbin/init.d/secsh start
/opt/ssh/etc/sshd_config line 171: Directive 'SftpUmask' is not allowed within a Match block
EXIT CODE: 255

ssh -V
OpenSSH_5.0p1+sftpfilecontrol-v1.2-hpn13v1, OpenSSL 0.9.7m 23 Feb 2007
HP-UX Secure Shell-A.05.00.012, HP-UX Secure Shell version

Appreciate any help
Richard

[Steven E. Protter]

Shalom,

Either the ssh version needs update or you should set this in the actual user profiles.

SEP

[Richard Ross]

Sorry .. should have been umask 507

[Richard Ross]

Steven .. I don't believe that sftp will source .profile .kshrc or .netrc .. so I'm not sure which profile you are referring to .. Also, the man page for sshd_config says that sftpumask is not valid the Match parameter, so I doubt that upgrading ssh will do anything as well ..

Thanks