setgid bit

Is there a way to alter the setgid bit with WinSCP?

I have a directory on the server (say "fruit") with permissions rwxrwsr-x (2775).
I use pscp -r to copy a directory from my computer (say "apples") into the "fruit" directory on the server.
The folder fruit/apples gets permissions rwxrwsr-x (2775) - this is good and normal.

If I instead use WinSCP to drag the apples directory across into the fruit directory on the server, the apples directory gets permissions rwxrwxr-x (775) - this is bad.

If I am in the fruit folder on the server and I click the "create folder" button in WinSCP then the folder I create gets the correct permissions (2775).

I think the problem with the drag is that WinSCP sets the permissions and doesn't have the facility to set the gid permission so it just sets it to off. I tried not setting permissions but I experienced the same problem that someone else reported - WinSCP sets the permissions whether you like it or not!
If you add a setgid box this problem could be resolved. If you know a way to fix it now, please let me know...

Thanks,
Fletch

Please post a log file showing uploading of file with "set permissions" turned off and subsequent directory load. Are you using latest version of WinSCP (2.3)?

# Yes I'm using version 2.3. I'll update to the new one but I thought I'd do this for you first...

Here are some parts of the log. I shortened some of the dirs to the important files.

Basically I copied the folder "temp" into folder "www4". When the options window came up I unticked user R and W permissions and then unticked the "set permissions" box but then it set the permissions anyway as you see.
I have tried doing this by going to the options window and unticking set permissions before trying to transfer but it doesn't change anything.
The other point that WinSCP chooses 0175 for the permissions, I have no ability to choose the first number (the 0, I want it to be 2!).
If either of the problems was fixed it would be fine.

Thanks a lot for your help, I can see you are doing a fair bit of support on this forum!!


. --------------------------------------------------------------------------
. WinSCP Version 2.3.0 (Build 146)
. Login time: Sunday, 29 June 2003 11:11:35 PM
. ------------------------------------------------------------------------
. User name: fletch (Password: Yes, Key file: No)
. SSH protocol version: 2; Compression: No
-------------------------------
. Following groups found:
. fletch
. Acc-DATA_RW
. Acc-WEBDATA
-------------------------
. Listing current directory.
> ls -la ; echo "WinSCP: this is end-of-file:$?"
< total 100
------------------------------
www2
< drwxrwsr-x 15 root Acc-WEBD 4096 Jun 29 23:21 www4
< drwxrwsr-x 16 root Acc-WEBD 4096 Jan 29 00:56 wwwit
< WinSCP: this is end-of-file:0
. Listing file "/opt/ARCserve/httpd/".
> ls -lad "/opt/ARCserve/httpd/" ; echo "WinSCP: this is end-of-file:$?"
< drwxrwxr-x 9 root apache 4096 Nov 21 2002 /opt/ARCserve/httpd/
< WinSCP: this is end-of-file:0
. Changing directory to "www4".
> cd "www4" ; echo "WinSCP: this is end-of-file:$?"
< WinSCP: this is end-of-file:0
. Getting current directory name.
> pwd ; echo "WinSCP: this is end-of-file:$?"
< /home/fletch/web/www4
< WinSCP: this is end-of-file:0
. Listing current directory.
> ls -la ; echo "WinSCP: this is end-of-file:$?"
< total 176
< drwxrwsr-x 15 root Acc-WEBD 4096 Jun 29 23:21 .
< drwxrwxr-x 18 marty apache 4096 May 23 15:13 ..
< -rwxrwsr-x 1 vy Acc-WEBD 1480 Apr 8 04:58 TMP92oncczm1c.htm
< -rwxrwsr-x 1 vy Acc-WEBD 217 Apr 8 04:19 Untitled-1.htm
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jul 3 2002 aboutus
< -rwxrwsr-x 1 vy Acc-WEBD 527 Jan 26 2002 acts238.htm
< drwxrwsr-x 3 vy Acc-WEBD 4096 Apr 8 02:35 buttons
< -rwxrwsr-x 1 vy Acc-WEBD 548 Feb 16 12:28 construction-f.htm
< -rwxrwsr-x 1 vy Acc-WEBD 525 Feb 16 12:31 construction-nl.htm
< -rwxrwsr-x 1 vy Acc-WEBD 603 Feb 16 12:30 construction-pl.htm
< -rwxrwsr-x 1 vy Acc-WEBD 1637 Feb 16 12:25 construction-ru.htm
< -rwxrwsr-x 1 vy Acc-WEBD 629 Feb 16 12:27 construction-sw.htm
< -rwxrwsr-x 1 vy Acc-WEBD 631 Apr 8 05:04 construction.htm
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jun 23 2002 contactus
< drwxrwsr-x 4 vy Acc-WEBD 4096 May 23 14:58 de
< -rwxrwsr-x 1 vy Acc-WEBD 646 Jun 13 2002 disclaimer.htm
< drwxrwsr-x 5 vy Acc-WEBD 4096 Jul 2 2002 faq
< drwxrwsr-x 3 vy Acc-WEBD 4096 Jul 1 2002 images
< -rwxrwsr-x 1 vy Acc-WEBD 10853 Apr 1 09:11 index-main.htm
< -rwxrwsr-x 1 vy Acc-WEBD 11468 Apr 8 04:59 index-menu.htm
< -rwxrwsr-x 1 vy Acc-WEBD 1480 Apr 8 05:03 index.htm
< -rwxrwsr-x 1 vy Acc-WEBD 10780 Jun 20 2002 index2.htm
< -rwxrwsr-x 1 vy Acc-WEBD 11275 Jun 20 2002 index2f.htm
< drwxrwsr-x 4 vy Acc-WEBD 4096 Feb 18 15:43 music
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jun 30 2002 navibar
< -rwxrwsr-x 1 vy Acc-WEBD 12252 Apr 8 05:04 notes.js
< drwxrwsr-x 2 vy Acc-WEBD 4096 May 23 14:53 sresources
< -rwxrwsr-x 1 vy Acc-WEBD 1121 Jun 22 2002 style.css
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jul 3 2002 sus
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jun 24 2002 templates
< -rwxrwsr-x 1 vy Acc-WEBD 5 Feb 18 16:28 test1.txt
< drwxrwsr-x 4 vy Acc-WEBD 4096 Jul 3 2002 testimonies
< -rwxrwsr-x 1 vy Acc-WEBD 943 Apr 8 04:23 text1.swf
< drwxrwsr-x 2 armin Acc-WEBD 4096 Jun 22 08:24 webbuilder
< WinSCP: this is end-of-file:0
. Copying 1 files/directories to remote directory "/home/fletch/web/www4/"
. PrTime: No; PrRO: No; Rght: --xrwxr-x; PrR: No
. FnCs: N; TM: M; AscM: *.*htm*; *.txt; *.php*; *.cgi; *.c; *.cpp; *.h; *.pas; *.bas; *.tex
> echo "WinSCP: this is begin-of-file" ; scp -r -d -t "/home/fletch/web/www4" ; echo "WinSCP: this is end-of-file:$?"
< WinSCP: this is begin-of-file
. SCP remote side confirmation (0)
. File: "C:\Documents and Settings\Fletch\My Documents\temp"
. Entering directory "C:\Documents and Settings\Fletch\My Documents\temp".
> D0175 0 temp
. SCP remote side confirmation (0)
. File: "C:\Documents and Settings\Fletch\My Documents\temp\Copy of Nasdf.txt"
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Copy of Nasdf.txt" to remote directory started.
. Ascii transfer mode selected.
> C0175 0 Copy of Nasdf.txt
. SCP remote side confirmation (0)
. Sending ASCII data (0d bytes)
. Sending NULL.
. SCP remote side confirmation (0)
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Copy of Nasdf.txt" to remote directory finished.
. File: "C:\Documents and Settings\Fletch\My Documents\temp\Copy of Newd.txt"
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Copy of Newd.txt" to remote directory started.
. Ascii transfer mode selected.
> C0175 0 Copy of Newd.txt
. SCP remote side confirmation (0)
. Sending ASCII data (0d bytes)
. Sending NULL.
. SCP remote side confirmation (0)
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Copy of Newd.txt" to remote directory finished.
. File: "C:\Documents and Settings\Fletch\My Documents\temp\elfletc"
. Entering directory "C:\Documents and Settings\Fletch\My Documents\temp\elfletc".
> D0175 0 elfletc
. SCP remote side confirmation (0)
. File: "C:\Documents and Settings\Fletch\My Documents\temp\elfletc\Neasdf.txt"
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\elfletc\Neasdf.txt" to remote directory started.
. Ascii transfer mode selected.
> C0175 0 Neasdf.txt
. SCP remote side confirmation (0)
. Sending ASCII data (0d bytes)
. Sending NULL.
. SCP remote side confirmation (0)
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\elfletc\Neasdf.txt" to remote directory finished.
. Leaving directory "C:\Documents and Settings\Fletch\My Documents\temp\elfletc".
> E
. SCP remote side confirmation (0)
. File: "C:\Documents and Settings\Fletch\My Documents\temp\Nasdf.txt"
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Nasdf.txt" to remote directory started.
. Ascii transfer mode selected.
> C0175 0 Nasdf.txt
. SCP remote side confirmation (0)
. Sending ASCII data (0d bytes)
. Sending NULL.
. SCP remote side confirmation (0)
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Nasdf.txt" to remote directory finished.
. File: "C:\Documents and Settings\Fletch\My Documents\temp\Newd.txt"
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Newd.txt" to remote directory started.
. Ascii transfer mode selected.
> C0175 0 Newd.txt
. SCP remote side confirmation (0)
. Sending ASCII data (0d bytes)
. Sending NULL.
. SCP remote side confirmation (0)
. Copying "C:\Documents and Settings\Fletch\My Documents\temp\Newd.txt" to remote directory finished.
. Leaving directory "C:\Documents and Settings\Fletch\My Documents\temp".
> E
. SCP remote side confirmation (0)
> E
. SCP remote side confirmation (0)
< WinSCP: this is end-of-file:0
. Listing current directory.
> ls -la ; echo "WinSCP: this is end-of-file:$?"
< total 180
< drwxrwsr-x 16 root Acc-WEBD 4096 Jun 29 23:23 .
< drwxrwxr-x 18 marty apache 4096 May 23 15:13 ..
< -rwxrwsr-x 1 vy Acc-WEBD 1480 Apr 8 04:58 TMP92oncczm1c.htm
< -rwxrwsr-x 1 vy Acc-WEBD 217 Apr 8 04:19 Untitled-1.htm
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jul 3 2002 aboutus
< -rwxrwsr-x 1 vy Acc-WEBD 527 Jan 26 2002 acts238.htm
< drwxrwsr-x 3 vy Acc-WEBD 4096 Apr 8 02:35 buttons
< -rwxrwsr-x 1 vy Acc-WEBD 548 Feb 16 12:28 construction-f.htm
< -rwxrwsr-x 1 vy Acc-WEBD 525 Feb 16 12:31 construction-nl.htm
< -rwxrwsr-x 1 vy Acc-WEBD 603 Feb 16 12:30 construction-pl.htm
< -rwxrwsr-x 1 vy Acc-WEBD 1637 Feb 16 12:25 construction-ru.htm
< -rwxrwsr-x 1 vy Acc-WEBD 629 Feb 16 12:27 construction-sw.htm
< -rwxrwsr-x 1 vy Acc-WEBD 631 Apr 8 05:04 construction.htm
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jun 23 2002 contactus
< drwxrwsr-x 4 vy Acc-WEBD 4096 May 23 14:58 de
< -rwxrwsr-x 1 vy Acc-WEBD 646 Jun 13 2002 disclaimer.htm
< drwxrwsr-x 5 vy Acc-WEBD 4096 Jul 2 2002 faq
< drwxrwsr-x 3 vy Acc-WEBD 4096 Jul 1 2002 images
< -rwxrwsr-x 1 vy Acc-WEBD 10853 Apr 1 09:11 index-main.htm
< -rwxrwsr-x 1 vy Acc-WEBD 11468 Apr 8 04:59 index-menu.htm
< -rwxrwsr-x 1 vy Acc-WEBD 1480 Apr 8 05:03 index.htm
< -rwxrwsr-x 1 vy Acc-WEBD 10780 Jun 20 2002 index2.htm
< -rwxrwsr-x 1 vy Acc-WEBD 11275 Jun 20 2002 index2f.htm
< drwxrwsr-x 4 vy Acc-WEBD 4096 Feb 18 15:43 music
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jun 30 2002 navibar
< -rwxrwsr-x 1 vy Acc-WEBD 12252 Apr 8 05:04 notes.js
< drwxrwsr-x 2 vy Acc-WEBD 4096 May 23 14:53 sresources
< -rwxrwsr-x 1 vy Acc-WEBD 1121 Jun 22 2002 style.css
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jul 3 2002 sus
< d--xrwxr-x 3 fletch Acc-WEBD 4096 Jun 29 23:23 temp
< drwxrwsr-x 2 vy Acc-WEBD 4096 Jun 24 2002 templates
< -rwxrwsr-x 1 vy Acc-WEBD 5 Feb 18 16:28 test1.txt
< drwxrwsr-x 4 vy Acc-WEBD 4096 Jul 3 2002 testimonies
< -rwxrwsr-x 1 vy Acc-WEBD 943 Apr 8 04:23 text1.swf
< drwxrwsr-x 2 armin Acc-WEBD 4096 Jun 22 08:24 webbuilder
< WinSCP: this is end-of-file:0

By the way just to let you know, I just got version 3.0 Beta and I still have the same problem. :?:
Thanks!

From you log I may see, that WinSCP correctly does not add -p parameter to scp command. It means that permissions should not be set. At least is works so for me. There is nothing more I can do with it with SCP protocol. Please try SFTP with 3.0 beta. Permissions handling is completelly different with SFTP, so it might work for you.

martin wrote:

From you log I may see, that WinSCP correctly does not add -p parameter to scp command. It means that permissions should not be set.

Yes I had a play around and I see what you mean with the -p, but the problem comes after the copy in another line. Note last line in the following excerpt (where I had "set permissions" unticked):

echo "WinSCP: this is begin-of-file" ; scp -r -d -t "/home/fletch/web/www4" ; echo "WinSCP: this is end-of-file:$?"
WinSCP: this is begin-of-file
SCP remote side confirmation (0)
File: "C:\Documents and Settings\Fletch\My Documents\temptest"
Entering directory "C:\Documents and Settings\Fletch\My Documents\temptest".
D0425 0 temptest

That last line is the crucial one which sets the permissions, you see it for every copy in the log file above also. The number always represents the numerical value of the permissions I have ticked in the box, even though "set permissions" is not ticked.
Do you see what I mean?

Anonymous wrote:

That last line is the crucial one which sets the permissions, you see it for every copy in the log file above also. The number always represents the numerical value of the permissions I have ticked in the box, even though "set permissions" is not ticked.
Do you see what I mean?

Yes I do. The fact is that for all host I have access to, the permission in mentioned line are ignored unless -p parameter is given. I cannot omit them anyway, they are required by protocol. So because I must specify there something, I put there selected permissions. I still do not see any solution.
BTW: Have you tried SFTP?

To be honest I spent like 30 mins trying to figure out how to select SFTP! I went through every options window except the first one... But have now tried it. YES it fixes the problem, thanks. Will do some testing and see how it performs, it seems to have a few problems when you try to do things without permissions - see the log below it might interest you.

I would actually quite like to continue using SCP as I know it works nicely. We can forget about the set permissions thing anyway because my problem would also be solved by providing a way to set the setgid bit, for example let us use numeric permissions and then I would have no problem (I would use 2775). Do you think you could please provide this feature at some stage?

--------------------
Log from an SFTP session FYI

. Deleting file "temptest".
. Listing directory "/var/www/html/www4/temptest".
> Type: SSH_FXP_OPENDIR, Size: 36, Number: 18955
< Type: SSH_FXP_HANDLE, Size: 13, Number: 18955
> Type: SSH_FXP_READDIR, Size: 13, Number: 19212
< Type: SSH_FXP_STATUS, Size: 28, Number: 19212
. Listing file "temptest/..".
> Type: SSH_FXP_LSTAT, Size: 39, Number: 19463
< Type: SSH_FXP_STATUS, Size: 34, Number: 19463
. Error status: 3, Message: 19463, Server: Permission denied, Language: ?
> Type: SSH_FXP_CLOSE, Size: 13, Number: 19716
< Type: SSH_FXP_STATUS, Size: 24, Number: 19716
. Asking user:
. Error listing directory "temptest". ("Server returned empty listing for directory 'temptest'.")
. Getting current directory name.
. Listing directory "/var/www/html/www4".
> Type: SSH_FXP_OPENDIR, Size: 27, Number: 19979
< Type: SSH_FXP_HANDLE, Size: 13, Number: 19979
> Type: SSH_FXP_READDIR, Size: 13, Number: 20236
< Type: SSH_FXP_NAME, Size: 3957, Number: 20236
> Type: SSH_FXP_READDIR, Size: 13, Number: 20492
< Type: SSH_FXP_STATUS, Size: 28, Number: 20492
> Type: SSH_FXP_CLOSE, Size: 13, Number: 20740
< Type: SSH_FXP_STATUS, Size: 24, Number: 20740
. Copying 1 files/directories to remote directory "/var/www/html/www4/"
. PrTime: No; PrRO: No; Rght: ----w-r-x; PrR: Yes; FnCs: N; Resume: S (512000)
. TM: M; AscM: *.*htm*; *.txt; *.php*; *.cgi; *.c; *.cpp; *.h; *.pas; *.bas; *.tex
. File: "C:\Documents and Settings\Fletch\My Documents\temptest"
> Type: SSH_FXP_OPENDIR, Size: 37, Number: 21003
< Type: SSH_FXP_STATUS, Size: 29, Number: 21003
. Error status: 2, Message: 21003, Server: No such file, Language: ?
. Creating directory "/var/www/html/www4/temptest/".
> Type: SSH_FXP_REALPATH, Size: 37, Number: 21520
< Type: SSH_FXP_STATUS, Size: 29, Number: 21520
. Error status: 2, Message: 21520, Server: No such file, Language: ?
> Type: SSH_FXP_REALPATH, Size: 36, Number: 21776
< Type: SSH_FXP_STATUS, Size: 29, Number: 21776
. Error status: 2, Message: 21776, Server: No such file, Language: ?
> Type: SSH_FXP_MKDIR, Size: 45, Number: 21262
< Type: SSH_FXP_STATUS, Size: 24, Number: 21262
. Listing directory "/var/www/html/www4".
> Type: SSH_FXP_OPENDIR, Size: 27, Number: 22027
< Type: SSH_FXP_HANDLE, Size: 13, Number: 22027
> Type: SSH_FXP_READDIR, Size: 13, Number: 22284
< Type: SSH_FXP_NAME, Size: 4072, Number: 22284
> Type: SSH_FXP_READDIR, Size: 13, Number: 22540
< Type: SSH_FXP_STATUS, Size: 28, Number: 22540
> Type: SSH_FXP_CLOSE, Size: 13, Number: 22788
< Type: SSH_FXP_STATUS, Size: 24, Number: 22788
. Deleting file "temptest".
. Listing directory "/var/www/html/www4/temptest".
> Type: SSH_FXP_OPENDIR, Size: 36, Number: 23051
< Type: SSH_FXP_STATUS, Size: 34, Number: 23051
. Error status: 3, Message: 23051, Server: Permission denied, Language: ?
. Asking user:
. Error listing directory "temptest". ("Permission denied.
. Error code: 3
. Error message from server: Permission denied (?)
. Request code: 11")
. Asking user:
. Error deleting file 'temptest'. (EAccessViolation)
. Listing directory "/var/www/html/www4".
> Type: SSH_FXP_OPENDIR, Size: 27, Number: 23307
< Type: SSH_FXP_HANDLE, Size: 13, Number: 23307
> Type: SSH_FXP_READDIR, Size: 13, Number: 23564
< Type: SSH_FXP_NAME, Size: 4072, Number: 23564
> Type: SSH_FXP_READDIR, Size: 13, Number: 23820
< Type: SSH_FXP_STATUS, Size: 28, Number: 23820
> Type: SSH_FXP_CLOSE, Size: 13, Number: 24068
< Type: SSH_FXP_STATUS, Size: 24, Number: 24068
. Getting current directory name.
. Listing directory "/var/www/html/www4".
> Type: SSH_FXP_OPENDIR, Size: 27, Number: 24331
< Type: SSH_FXP_HANDLE, Size: 13, Number: 24331
> Type: SSH_FXP_READDIR, Size: 13, Number: 24588
* (EAccessViolation) Access violation at address 0050FB97 in module 'WinSCP3.exe'. Read of address 203A4F4E
* (EAccessViolation) Access violation at address 0050FB97 in module 'WinSCP3.exe'. Read of address 203A4F4E
* (EAccessViolation) Access violation at address 0050FB97 in module 'WinSCP3.exe'. Read of address 203A4F4E
---------------------
WinSCP then died

Fletch wrote:

Will do some testing and see how it performs, it seems to have a few problems when you try to do things without permissions

Let me know, I'm interested.

for example let us use numeric permissions and then I would have no problem (I would use 2775). Do you think you could please provide this feature at some stage?

Well, I may try to implement it.

Ok thanks for your help I'll keep an eye out for future versions. That's it for me, one last comment that might interest you is that the setting permissions problems we discussed above were experienced on a fully updated Redhat 7.3 box.
See you.

martin wrote:

The fact is that for all host I have access to, the permission in mentioned line are ignored unless -p parameter is given. I cannot omit them anyway, they are required by protocol. So because I must specify there something, I put there selected permissions. I still do not see any solution.

I would like to add a vote for this feature. I have this problem in a shared directory where all directories have the gid bit set to force the same group. In WinSCP (with the latest version, 3.5.5), when a new directory is created, it respects the setgid bit and creates the expected permissions. But, when an existing directory is copied over from Windows, the setgid bit is dropped, which causes users to create files with their primary group. This prevents other users from accessing/sharing these files.

Please consider adding support for the setuid/setgid bits, and/or full numeric (4-digit octal) chmod permissions.

Thanks,
Alan

ADobkin wrote:

But, when an existing directory is copied over from Windows, the setgid bit is dropped, which causes users to create files with their primary group.

Just tip (I haven't tried): Does it work when you use SFTP protocol and uncheck "set permissions" option on upload dialog?

Yes, it does. Thanks for the tip. I guess I will use SFTP for now then. Any chance of getting it to work with SCP also?

Thanks,
Alan

ADobkin wrote:

Yes, it does. Thanks for the tip. I guess I will use SFTP for now then. Any chance of getting it to work with SCP also?

If you do not have "set permissions" checked set, WinSCP does not send specific permissions to server (be it SCP of SFTP). However it seems that most of the SCP servers overwrites the permissions using some default sessions in such case. So I do not think I can do anything with it.

What I meant was, for SCP, could you add a "setuid/setgid" checkbox to the "set permissions" option? Also, could you add a four-digit octal field so they could be set numerically? (I noticed that there is an octal field in the properties window for individual files, but it is only 3-digits.)

ADobkin wrote:

What I meant was, for SCP, could you add a "setuid/setgid" checkbox to the "set permissions" option? Also, could you add a four-digit octal field so they could be set numerically? (I noticed that there is an octal field in the properties window for individual files, but it is only 3-digits.)

I'll try to improve this in the next release.