my umask doesnt work when doing scp

[Jhingan]

When i create teh files locallay on teh system then the umask works perfectly fine. However when i scp the files from a differnt server then the files doesnt stick to the default permission i have set on destination.

i have already tried numerous workaround like:

http://jeff.robbins.ws/articles/setting-the-umask-for-sftp-transactions

http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-pam_umask.html

here is the example

Source
[ajhingan@station1 ajhingan]$ umask
0027

[ajhingan@station1 ajhingan]$ ls –ltr abc
-rw-r----- 1 ajhingan ajhingan 0 Jun 25 07:13 abc

Destination

[ajhingan@station2 ~]$ scp ajhingan@station1:/home/ajhingan/abc .

[ajhingan@station2 ~]$ umask
0002

[ajhingan@station2 ~]$ ls -ltr
total 0
-rw-r----- 1 ajhingan ajhingan 0 Jun 25 07:14 abc

Any help will really be greatly appreciable

[Ivan Ferreira]

Your problem is that scp always tries to mantain the permissions of the file. In this case, you will always get the permissions of the original file and your local umask won't take effect. This is a scp "feature" or limitation in your case.

You could try something like:

ssh ajhingan@station1 dd if=/home/ajhingan/abc | dd of=abc

This will copy the file to the local host and the umask will be applied to the file permissions.

[Wilfred Chau_1]

did you try the -p flag?

scp -p ajhingan@station1:/home/ajhingan/abc .

it should perserve the permission set on station1.

[Jhingan]

Thanks Ivan & Wilfred for your solutions but unfortunately none of thm going to help me in my case as the source is not defined. The file can come from any one of the thousands of servers but the good part is that the user will remain the same. So the only thing left is to make changes at the destination where we can mandate a umask of 0002 for that particular user. Any thoughts?

[Jhingan]

does anyone has a solution to my problem??

[Jhingan]

I am trying to use
sftpfilecontrol (http://sftpfilecontrol.sourceforge.net/) to manage the
umask on a per-user basis. However, I can't get it to work too

[Steven Schweda]

> I am trying to use [...]

Not a useful description of what you did.

> [...] I can't get it to work too

Not a useful description of what happened
when you did it.

Did you notice that "scp" and "sftp" are
spelled differently?

[Jhingan]

Sorry if i wasnt too much descriptive in my previous post. This is what i tried

I integrated a sftpfilecontrol patch v1.3 with my openssh 5.1p1 and build an rpm for that. I can now see my sshd_config file is showing me the Umask changed option.

[root@station1 SPECS]# nc localhost 22
SSH-2.0-OpenSSH_5.1p1+sftpfilecontrol-v1.3

[root@station1 ~]# cat /etc/ssh/sshd_config | grep -i sftp
SftpUmask 0002
Subsystem sftp /usr/libexec/openssh/sftp-server

[root@station1 ~]# uname -i
i386

[root@station1 ~]# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 5.4 (Tikanga)


However i am still confused if whatever i did was to make the changes for just SFTp and not SCP? Are sftp and scp work differently? If yes then what patch should i imply for the changing UMASk for scp transactions?

[Steven Schweda]

> [...] Are sftp and scp work differently?
> [...]

They're spelled differently for a reason.

> [...] If yes then what patch should i imply
> [...]

I have no idea. I didn't even know about the
patch for SFTP.

Have you considered using SFTP instead of
SCP?

[Jhingan]

So i given a try trasnferring files using sftp. For sftp trasnactions the umask works fine but for scp the issue remains the same. Can anyone on this forum help me with setting up a defalu permission on scp transactions please?