Default Permissions

[Jayson Hurd_2]

What governs the default permissions for a new file created under a given directory? I have a place where a group ftps files, however the permissions are 640. Others need to read the file. I'd rather not add any of the others to the group owner. Is there a way to make it so new files created in that directory are, say, 644?

[Manish Srivastava · Accepted solution]

Hi,

You can set the umask to 122.

manish.

[Jayson Hurd_2]

Is umask specific to a particular login or can you set a umask on a directory?

[Anupam Anshu_1]

umask command is responsible for it. You can set umask as follows:

-----------------------------------------
$ umask # current umask value
00
$ umask 022 # this will make files to be created with 644 permission
$ umask # Check the new umask value.
022
-----------------------------------------

HTH,

Anshu

[Anupam Anshu_1]

You can set the umask even for the directories. umask value would determine with what permissions your files and directories would get created.

if you have umask value set to 000, then the directory would be created with permission 777 (ls -l output would show drwxrwxrwx for the directory created).

You can set different umask values and try the same.

Cheers,

Anshu

[John Carr_2]

Hi

set the umask in the login profile which ftp uses when transferring the files.

John

[Abdul Rahiman]

I think the umask is for a specific user.
So, if different users are trying to put files, the permissions may be different.
What you want to do is probably setup a script to change the permissions the way you wanted and run via cron frequently.

[Jeff_Traigle]

umask is per login session. If it's set in /etc/profile, it will be set the same for all users. It can be set on a per user basis by including it in $HOME/.profile.

[John Carr_2]

Hi

umask 022 removes write permission for group and other (files normally created with mode 777 become mode 755; files created with mode 666 become mode 644).

umask is session specific not directory specific umask is recognized and executed by the shell.

John.

[Abdul Rahiman]

Jayson,

You can use the "site umask" subcommand on ftp to change the umask during a ftp session.

Try this in your ftp session before transferring files,
ftp> site umask 022

HTH,
Abdul.

[Jayson Hurd_2]

The problem I'm having is that I'm using ftpaccess to govern the files that are written since users are ftp-ing the files up. The profile does not apply to ftp-ing...

[Bruno Ganino]

For permission 644 you must set umask to 122 into profile.
Bruno

[Jose Mosquera]

Hi,

For can set up an a generic ftp mask. Configure this feature in your /etc/inetd.conf file:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a -u

Where -u determine the file permission for any ftp incoming file.

For additional info: "man ftpd"

Rgds.

[Jayson Hurd_2]

Your suggestions worked for shelled users. For it to work on guest ftp accessed accounts, I had to edit the 'upload' section of the /etc/ftpd/ftpaccess file. Thanks everyone!!