1

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp.  I've managed to set up internal-sftp of OpenSSH and lock user under web root. All the files under web root should be owned by sftp user but at the same time the web server should have read access to all these files. It works well by using ACL like

chmod -R A3+user:www:list_directory/read_data/execute:file_inherit/dir_inherit:allow htdocs/

But whenever user tries to chmod 777 directory to be web server writable, the directory loses its ACLs. Denying write_acl denies user to change even discretionary access control attributes.

Ideally user should upload content by sftp, web server should have read access and full access to 777 directories.  Any idea on how to achieve that?

Improve this question
0

On Solaris, chmod 777 is setting an absolute mode. Absolute means absolute. If you want to keep ACLs, you need to use symbolic mode.

See the man page: http://docs.oracle.com/cd/E23824_01/html/821-1461/chmod-1.html#scrolltoc

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.