Re: [Proftpd-user] SITE UTIME not working with group permissions

> I'm having trouble with the "SITE UTIME" command. It works perfectly on 
> user ownership, but it doesn't work on group ownership.
> 
> For example, the ftp user is:
> 
> User:  ftpuser
> Group: ftpgroup
> 
> UTIME works on a file with this ownership:
> 
> User: ftpuser
> Group: anygroup
> Permissions: 777
> 
> But UTIME gives a 555 permission denied on a file with this ownership:
> 
> User: anyuser
> Group: ftpgroup
> Permissions: 777
> 
> Does anyone know what might be wrong?

Ah yes, this does sound familiar.  We encountered the same underlying
problem for the MFMT command (which also modifies the file mod times):

  http://bugs.proftpd.org/show_bug.cgi?id=3577

Looks like a similar workaround (i.e. manually check for group
memberships, fallback to using root privs if possible) might be needed
for the SITE UTIME command.

There is one thing to check beforehand, though: does your ProFTPD have
the mod_cap module present?  If so, then Linux capabilities might also
be interfering.  Thus you might try adding the following to your
proftpd.conf:

  <IfModule mod_cap.c>
    # Disable capabilities entirely
    CapabilitiesEngine off
  </IfModule>

Or, if you want to keep the Linux capabilities restricted, but try to
allow the utimes(2) system call to succeed in cases like this:

  <IfModule mod_cap.c
    CapabilitiesEngine on
    CapabilitiesSet +CAP_FOWNER
  </IfModule>

If the above mod_cap tweaks help, please let me know -- I'll update the
mod_site_misc docs with a FAQ/example covering this case.  And if not,
I'll look into modifying its code to do what the mod_facts module does
for the MFMT command.

Cheers,
TJ

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html