umask of SSH

[kcw]

Hi all,
I am new to HP-UX admin and i have a question. When I telnet to a HP-UX machine (11iv2) and touch a file or create a directory, the umask is 666 and 777 respectively. However, the umask is 644 and 755 (file and directory)when i use ssh to that machine. Is there any way to config the umask for ssh so that it will become 666 and 777?? Many thanks

Best Regards
KCW

[Dennis Handly]

>touch a file or create a directory, the umask is 666 and 777 respectively.

You are confused, there is one umask and its value is the negation, 000.

>the umask is 644 and 755

So it is 022.

>become 777

So you want umask to be 000.

[kcw]

Hi Dennis
Thank you very much for your prompt and useful reply. I tried to config the umask by using the following command: "#umask 000" and it success to create a file with umask 666 and directory with 777.
However, I found that everytime I "ssh" to that machine, I still need to do "#umask 000" so that I can touch a file as 666 and directory as 777. My question is: can we set the umask so that everytime it can be umask 000 when we ssh to that machine??? Many thanks for your help

Best Regards
KCW

[Steven E. Protter]

Shalom

For security reasons SFTP and SCP for certain will not permit a umask of 777

Giving a default of full read write execute is a very bad thing to do, making it easy to compromise a machine.

I would not be surprised if openssh which is supposed to be a secure connection product will not permit this to occur.

SEP

[Kenan Erdey · Accepted solution]

Hi,

umask setting is in /etc/profile or in the .profile file in users' home directory. if you can add a line umask 000 in .profile file. But why do you want to change umask setting to this unsecure one ?

Kenan.

[Dennis Handly]

>can we set the umask so that every time it can be umask 000 when we ssh to that machine?

The first thread talks about umask and ssh. But it says SftpUmask. There may be another parm for just ssh.
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1243033
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1256138

[kcw]

Hi Kenan,
Problem solved by adding "umask 000" in .profile, many thanks. Because those machines are in trusted mode and same security inner zone, thats why the programmer would like to do the 666 and 777 for the umask value.

-> SEP and Dennis: thanks for your help, appreciate your efforts :)

Best Regards
KCW

[Sp4admin]

Hi Kcw,

Sometimes when we change the ssh2_config file we stop the sshd deamon then we do a umask 0000 at this point we restart the sshd and the umask is set correctly.

Hope this helps!
Sp,