Sign in

Excessive file permissions – Server SFTP

Forum › General Inquiry

  • This topic has 1 reply, 2 voices, and was last updated 5 months, 2 weeks ago by .
Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • April 7, 2023 at 12:22 pm #9771
    Avatar photoluci

    Hello:

    When I synchronise the web files using the Server – SFTP option, the files are uploaded to host with too many permissions. By default, all HTML files, images, css, etc. are created with 666 permissions. This is unsafe. Using 644 permissions is sufficient.

    I’m looking at the program settings but I don’t see that I can change this.

     

    Thanks in advance.

    April 12, 2023 at 7:37 pm #9794
    Avatar photoTomasz Dziuda

    Hi luci,

    Thank you for reporting this. It seems that used SFTP library uses too wide permissions by default.

    I have checked and it seems that when we have implemented SFTP support their documentation does not state about such default permissions. Also we did not spot this issue, because it seems that our VPS server used for tests forces lower permissions for files (it is possible to force permissions for files uploaded via sftp/scp protocol).

    I have prepared a fix which after uploading files set their chmods to 0644 and for folders set chmods 0755. It will be available in Publii v.0.42.1 which will be probably released at nearest Monday.

    --
    Do you appreciate the support you've received today? If so, consider donating to the Publii team by clicking here; we'll be sure to use your donation to make Publii even better!

  • Author
    Posts
Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.