Following on from How to setup ssh's umask for all type of connections
Is it possible to do this on a per-user basis? Here's what I have at the minute:
/etc/pam.d/ssh
sesssion optional pam.umask.so umask=0027
Thanks.
I'm having a bit of trouble setting up postfix as a null client and have some questions.
I'll be aiming to use SMTP as this is what most web applications use as a way to connect to the email server.
The goal is to use it for email notifications from web applications and monitoring software on the machine.
- Are things like SASL and TLS needed? It sounds like encrypting the connection between my web application and the email server is uesless when they're on the same box.
- Which user should I connect to the SMTP server as? I originally used the user account I use for daily activities, but this screams bad as my login information is in the wild if my web application is ever cracked. I also tried creating a user with /usr/sbin/nologin as it's shell, but this didn't work either (I'd prefer it the user didn't have shell access).
Any other things to think about while doing this?
Permissions are something that have confused for me a while with Linux. So at the minute both my NGinx and PHP-FPM instances are running with the user and group :
www-data
Is this standard? I run into trouble when I come across file uploading.
Example, a file would be uploaded both with the user and group www-data. Now, due to how I set permissions (0440) in my web application I can't login via ssh with my normal account to download those files. This can't be changed.
I was thinking of changing my nginx and php instance to keep the group, but change them to run under my user name.
What's the correct way for handling permissions here? Thank You.