iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
If Pure-FTPd returns permission denied for SITE CHMOD, check the daemon policy first, then Unix ownership, mode bits, and traversal rights on every parent directory. Finally, distinguish repairing an existing file from setting permissions on future uploads: Pure-FTPd’s -U option affects creation masks, not objects that already exist.
What a Pure-FTPd chmod error actually means
A Pure-FTPd account can upload a file and still be unable to change its mode. Uploading normally requires write access to a directory; changing a file’s mode requires authorization on that file and permission to reach it through the directory tree. Pure-FTPd can also disable the FTP SITE CHMOD command for every account, including authenticated users.
There are four separate checks:
- Daemon policy: the server may have been started with
-R, which disallows users from using CHMOD. - Object authorization: Unix ownership and the file’s mode bits determine whether the account may change it.
- Path traversal: the account needs execute permission on every parent directory in the path.
- Timing:
chmodchanges an existing object, while-Ucontrols the mask used when later uploads and directories are created.
Work through those checks in that order. Changing a directory to world-writable will not solve a daemon policy block, and changing an upload mask will not repair a file that is already present.
Quick diagnosis checklist
- Find the Pure-FTPd startup command or service configuration and look for
-R. - Confirm the exact path as the FTP user sees it inside the chroot, and identify the account that owns the session.
- As an administrator, inspect the target and each parent directory with
stat,ls -ld, ornamei -l. - Verify that the user owns the file, belongs to its group with suitable group permissions, or has another explicitly authorized arrangement.
- Check that every parent directory grants the user execute (traverse) permission.
- Apply the narrowest ownership or mode correction needed, then retry
SITE CHMOD. - If the problem concerns files uploaded in the future, review Pure-FTPd’s
-Umasks instead of repeatedly changing old files.
1. Check whether Pure-FTPd has disabled SITE CHMOD
What the -R option does
Pure-FTPd documents -R as: “Disallow users (even non-anonymous ones) usage of the CHMOD command.” When this option is active, an account cannot use the FTP command regardless of ownership or otherwise correct Unix mode bits. The failure is therefore expected behavior, not a filesystem defect.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
How to verify the running policy
Inspect the command line used by the running daemon or the service definition that launches it. Depending on the distribution, this may be a systemd unit, an arguments file, or a wrapper script. Look specifically for -R among the Pure-FTPd options. Do not rely only on a client preference: a client can send SITE CHMOD, but the server decides whether to accept it.
How to change the policy safely
If users should be allowed to change modes on files they own, remove -R from the daemon’s configuration and restart or reload Pure-FTPd using your operating system’s normal service procedure. Make the change only after deciding which accounts need this capability. If the service is intentionally preventing permission changes, leave the option enabled and manage modes from an administrative shell instead.
After changing the policy, reconnect the FTP session. Existing sessions may retain the old server process or configuration, so a fresh login is a useful verification step.
2. Confirm the account and the path Pure-FTPd is using
Chroot paths are not shell paths
FTP users commonly operate inside a chroot or virtual home. A path such as /incoming/report.txt in the FTP client may correspond to a completely different absolute path on the host. Ask the administrator to map the FTP home to the real filesystem location before changing anything.
Use the account from the failed FTP session when checking ownership. A successful upload by one account does not prove that another account can run SITE CHMOD on the same file.
Confirm the exact target
Watch for case differences, symbolic links, and a directory with a similar name. From a privileged shell, inspect the resolved path rather than assuming that the client display is the host path:
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
namei -l /srv/ftp/customer/incoming/report.txt
stat /srv/ftp/customer/incoming/report.txt
ls -ld /srv/ftp/customer /srv/ftp/customer/incoming
namei -l displays each component of the path and is particularly useful for finding a parent directory that blocks traversal. stat shows the owner, group, numeric mode, and timestamps of the target itself.
3. Inspect ownership and Unix mode bits
The target file
For ordinary Unix permissions, the owner of a file can change its mode. A group member can do so only when the service and operating-system rules make that account the authorized owner; merely being able to read or write the file is not a blanket right to run chmod. The administrator should verify the numeric UID and GID, not just a similarly named login.
Inspect a target with:
ls -l /srv/ftp/customer/incoming/report.txt
stat -c 'owner=%U (%u) group=%G (%g) mode=%A (%a)' /srv/ftp/customer/incoming/report.txt
If the file belongs to a different account, decide whether ownership should be transferred, whether a shared-group design is more appropriate, or whether the owner should perform the change. Do not give every FTP account unrestricted write access merely to make CHMOD succeed.
Every parent directory
To access a file, the account needs execute permission on each directory component. Execute on a directory means “traverse”; it is distinct from read permission, which controls listing names. A user may therefore see a file through an FTP interface yet still fail when a parent directory lacks the necessary execute bit on the effective owner, group, or other class.
Review the complete chain:
namei -l /srv/ftp/customer/incoming/report.txt
For a directory shown as drwxr-x---, only its owner and group can traverse it. If the FTP account is neither, a mode change on a file below that directory cannot work, even when the file itself is owned by the account.
4. Correct permissions without opening the whole tree
Fix ownership when ownership is wrong
An administrator can assign the file to the account that is intended to manage it:
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
chown ftpuser:ftpgroup /srv/ftp/customer/incoming/report.txt
Use the real login and group names for your installation. Apply recursive ownership changes only after verifying the complete path; a mistaken chown -R can alter system files or files belonging to other accounts.
Grant traversal on a parent directory
If the directory is deliberately shared, grant only the required class of users execute permission. For example, adding group traversal while preserving existing bits can be done with:
Recommended Free Tools
chmod g+x /srv/ftp/customer/incoming
That command does not grant the group permission to list or create files. Add group read or write only when the directory’s workflow requires it, and verify the group membership separately.
Change the existing file’s mode
Once the daemon allows CHMOD and the account is authorized, an administrator can repair an existing mode directly:
chmod 640 /srv/ftp/customer/incoming/report.txt
Use the mode that matches the purpose of the file. A private document might need 600; a file intended for owner and group access might use 640. Avoid using 777 as a diagnostic shortcut: it grants write access to every class and can create a security problem without addressing a Pure-FTPd policy block.
5. Test SITE CHMOD from the FTP session
After correcting the relevant layer, reconnect as the affected account and run the client command for the file’s FTP-visible path:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
SITE CHMOD 640 incoming/report.txt
The exact syntax is client-dependent, but the FTP protocol command is SITE CHMOD <mode> <path>. Use a disposable test file first. A successful server reply confirms that the command was accepted; verify the resulting mode with stat on the host because the client may display a cached directory listing.
If the response still says permission denied, record the complete numeric FTP reply and recheck the four layers rather than changing unrelated directories. A policy refusal, an authorization failure, and a blocked parent path can look similar in a graphical client.
6. Set permissions for future uploads with -U
Why chmod on one file does not fix later uploads
Changing an existing file’s mode has no effect on the creation mask used for the next upload. Pure-FTPd’s -U option controls the masks applied when new files and directories are created. Configure that option when the recurring problem is “every new upload has the wrong permissions.”
Documented defaults
Current Pure-FTPd project documentation and the Debian pure-ftpd(8) manual document default creation masks of 133 for files and 022 for directories. These are masks, not final modes. The final result also depends on the base mode requested by the uploading client or application.
Free tools Windows power users keep installed
One-click scans. No signup required.
A private-upload example
The Debian manual describes -U 177:077 as making new files readable only by the user and new directories accessible only to the user. Configure it in the same startup-argument location where the daemon’s other options are defined:
-U 177:077
After changing the option, restart or reload the service according to the distribution’s procedure, then upload a disposable file and inspect it. Do not infer the result from the mask alone: test both a file and a directory because they use separate values.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Choosing a mask
Use a less restrictive mask only when a real workflow needs group or public access. A shared publishing directory may require group-readable files and group-traversable directories; a private account normally should not create world-readable content. Record the intended access classes before changing the daemon-wide setting, because -U affects all sessions governed by that Pure-FTPd instance unless your deployment separates them.
7. Handle shared writable directories with the sticky bit
Why deletion is a separate issue
On Unix, deleting a file is controlled primarily by the parent directory’s write and execute permissions. The directory owner can generally delete entries in that directory even when another user owns the files. That behavior often surprises administrators who are trying to let several FTP users upload without letting them remove one another’s files.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Use a sticky directory for a public drop area
The Pure-FTPd FAQ recommends setting the sticky bit on a shared public directory:
chmod 1777 public
The leading 1 is the sticky bit. The remaining 777 grants read, write, and execute to owner, group, and others; the sticky bit then restricts deletion and renaming to the file owner, directory owner, or an administrator. This is appropriate only when a world-writable drop area is intentional. For most private multi-user trees, a dedicated group with narrower directory modes is safer.
The sticky bit does not grant permission to run SITE CHMOD on files owned by another account, and it does not override the -R daemon policy.
8. Account for Pure-FTPd’s home-directory safety restrictions
Pure-FTPd advertises safety protections for user home directories. As a result, an account may be able to change modes on ordinary files it owns while being prevented from applying dangerous modes to the home-directory root. This is an intentional guard, not evidence that the file’s ownership is wrong.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Test the operation on a file inside the home rather than on the home root itself. If the requirement is to change the root directory’s mode, perform that change administratively and preserve the restrictions expected by the FTP service. Do not weaken the home directory just to make a client command return success.
Common failure patterns and the correct fix
| Observed situation | Likely layer | Appropriate action |
|---|---|---|
| Every account receives a CHMOD refusal, including owners of their own files. | Pure-FTPd policy | Check for -R. Remove it only if user-controlled CHMOD is an intentional service feature, then restart and reconnect. |
| The account can upload but cannot change a file created by another account. | Ownership or authorization | Inspect UID/GID and choose a deliberate owner, group, or administrative workflow. Do not make the entire tree world-writable. |
| The file is owned by the account, but the operation fails below a protected directory. | Parent traversal | Use namei -l and grant the needed execute permission on each parent to the correct user or group. |
| An existing file was fixed, but the next upload has the old mode. | Creation mask | Review -U; chmod on the old object cannot change future uploads. |
| Users can upload to a public directory and remove each other’s files. | Directory deletion semantics | Use a deliberately designed shared directory and consider chmod 1777 public when a public drop area is required. |
| CHMOD works on files but not on the home-directory root. | Pure-FTPd safety restriction | Leave the protected root in its safe state and make any exceptional change from an administrator account. |
Security practices for enabling user CHMOD
- Scope the capability: enable SITE CHMOD only when users have a real need to manage their own file modes.
- Keep ownership meaningful: align FTP accounts, filesystem UIDs, and groups so the account managing a file is predictable.
- Preserve traversal boundaries: grant execute permission on the minimum parent directories needed for the workflow.
- Prefer groups to “other” permissions: shared access is easier to audit when it is granted through a dedicated group rather than mode
777. - Separate public drop zones: use a dedicated directory and understand sticky-bit behavior instead of making an entire home tree writable.
- Test masks with disposable objects:
-Uvalues interact with requested base modes, so inspect the actual file and directory modes after a test upload. - Protect the service root: retain Pure-FTPd’s home-directory safety behavior unless an administrator has a documented reason to change it.
A repeatable administrator workflow
- Capture the failure: note the FTP account, FTP-visible path, command issued, and complete server response.
- Map the path: identify the host filesystem path behind the user’s chroot or virtual home.
- Check policy: verify whether the running Pure-FTPd command includes
-R. - Inspect the chain: run
namei -l,stat, andls -ldfor the target and parents. - Choose one narrow correction: fix ownership, group membership, a parent execute bit, or the target mode—whichever check failed.
- Retest as the same account: reconnect and run
SITE CHMODon a disposable file. - Address recurrence: if only new uploads are wrong, configure and test
-Urather than adding a recurring manual chmod job. - Review exposure: confirm that the resulting permissions do not expose private files or permit unwanted deletion.
Key distinction: daemon policy versus Unix permission
Pure-FTPd’s documentation says the server supports the SITE CHMOD extension so a user can change the permissions of the user’s own files. That statement assumes the feature has not been disabled with -R, the account is authorized for the target, and the path is traversable. Treat those as separate prerequisites. A successful upload proves only that the account could write to that directory at that moment; it does not prove that CHMOD is enabled or that the account owns every object there.
Once those prerequisites are satisfied, use ordinary Unix administration principles: correct the owner or group, grant the minimum required mode bits, preserve parent-directory boundaries, and configure -U only for the permissions that future uploads should receive.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →
