Web file download has group permission Read & Write

So you download a file and it isn't readable, is that correct?

No, everything is ok with the file. The file owner can read the file. His permission is Read and Write. That is fine.

The group permission is also Read and Write which appears to be a security weakness. I would expect the group permission to be Read Only by default.

Please comment. Thanks.

Can you give the output of:

ls -la

for one of the files to give an example.

Thanks

Hello ,

and what groups you have ? Who can manipulate groups and users inside them ? Who belongs to groups with write permissions ?

You and Root. Some applications maybe , cuz needed to have write access on files.

The Others (group) what permissions have ? The Others are dangerous. If they have write access too , then something is going wrong.

Thanks

xxx@yyy:~/Downloads$ ls -la pa_e_Q212_SHrpt.pdf
-rw-rw-r-- 1 xxx xxx 325577 Sep 7 18:06 pa_e_Q212_SHrpt.pdf
xxx@yyy:~/Downloads$

If any other user, from my group, from another group, from anywhere, can write to my file by default then I consider that a security weakness.

That is just like Windows, a free for all.

You consider that as ok???

Please comment. Thanks.

Thanks NikTh, that solved my question.

The file is readable by all. You may be able to tweak it so that new files are not readable by all.