Dear Maintainer,

Currently when setting up a shared sftp upload space between multiple
users/logins, you can force a proper umask with the -u switch.

This requires that the file at the origin has wide-permissions to start with.
In some cases, users are not skilled enough to set the permissions to be
correct (sigh).

While this could be solved via file/dir ACLs, it is also not entirely trivial
in most environments.

https://bugzilla.redhat.com/show_bug.cgi?id=1191055
https://bugzilla.mindrot.org/show_bug.cgi?id=1844
https://superuser.com/questions/1066554/



Thank you

See the latest patch:
https://bugzilla.mindrot.org/attachment.cgi?id=2872&action=diff

Any hope this could be added to Debian custom patches in the next
release?

Dear Maintainer(s),

The V3 patch (https://bugzilla.mindrot.org/attachment.cgi?id=3096) forces permission on directories as well, builds
cleanly both with Debian 8 and 9 (openssh-server 1:7.4p1-10+deb9u1 and 1:7.6p1-2) and is a great feature IMHO.

Please integrate.

Elemér

The reason for this is: what if upstream decided to integrate some other
change that added a -m option with different semantics?  Then I, and
Debian users, would be in a sticky situation with no clear way out.

I have no particular objection to the patch, but there's no point
continuing to promote it on this bug report.

Regards,

I'd like to register a vote here. Fedora and therefore RHEL have been
shipping this patch for 6 years now:

https://src.fedoraproject.org/rpms/openssh/blob/f22/f/openssh-6.7p1-sftp-force-permission.patch

The chances of BSD either upstreaming this patch OR providing a patch
which behaves differently to this one seems to me to be quite low.