Unable to Modify Files via SFTP on SCZ720M3 and Later Using User Mode Access

Asset ID:	1-72-2001045.1
Update Date:	2017-08-08
Keywords:

Solution Type Problem Resolution Sure

Solution 2001045.1 : Unable to Modify Files via SFTP on SCZ720M3 and Later Using User Mode Access

Applies to:

Acme Packet 6100 - Version S-Cz7.2.0 and later
Acme Packet 4500 - Version S-Cz7.2.0 and later
Acme Packet 6300 - Version S-Cz7.2.0 and later
Acme Packet 4600 - Version S-Cz7.2.0 and later
Acme Packet 3820 - Version S-Cz7.3.0 and later
Acme Packet 4500
Acme Packet 3820
Acme Packet 6300
Acme Packet 6100
Acme Packet 4600

Symptoms

Customers have reported an issue with SFTP permission when logging into an Oracle Communications Session Border Controller (SBC).

The user can login, viewing and list files, but cannot modify or upload files, receiving the error "Permission denied".

This issue happens when using the "user" account to login.

For example:

sftp> rm nnSCX640m6.xz
Removing /code/images/nnSCX640m6.xz
Couldn't delete file: Permission denied

Changes

This problem is noted to have started upon installation of the SCZ720M3 maintenance release.

Cause

This is a deliberate security modification introduce in the SCZ720M3 maintenance release.

Solution

The user-level account now has read-only access on the filesystem. In order to SFTP files onto an Oracle Communications Session Border Controller's filesystem, you must log in with a superuser-level account.

This is a known security behavior modification introduced in SCZ720M3.

Please make sure you SFTP the SBC using the Superuser mode (Admin account), as the User mode will not be able to modify files. The Behavioral Change has been listed in the SCZ720M3 maintenance release guide:

http://docs.oracle.com/cd/E55601_01/doc/sbc_scz720_maintenancerelease.pdf

References

<BUG:20755577> - SFTP USER "USER" HAVE NO PERMISSION TO CHANGE/COPY ANY PATH OR FILE

Attachments

This solution has no attachment