File permissions

[Qwerty-Space]

Hello,

Whenever the server saves the world all files are set with 600 minecraft minecraft permissions. This means that users of the minecraft group cannot make any changes.

Is this deliberate, is there a config option I missed, or is this a bug?

And is there a way around this?

[Qwerty-Space]

The way I've gotten around this is by giving all directories the setgid bit with: find /srv/minecraft/servername -type d -exec chmod g+s {} \;. I then set the permissions for all files and directories to include rw permission for the minecraft group. Then I set the ACL settings for every directory to include rwx permissions for the minecraft group with: setfacl -Rdm "g:minecraft:rwx /srv/minecraft/servername. Now every file created includes the rw permissions for the minecraft group.

I believe this works... I haven't 100% confirmed it yet.

[Infinidoge]

Strange. This might be an issue with Minecraft itself, as the parent directory is created with the correct permissions and we don't change said permissions later. This is at minimum an oversight, not really sure how it occurs as (to my knowledge) the permissions have generally been correct for my worlds. That said, mine have likely been chmoded at some point, so I can't say conclusively.

[Qwerty-Space]

I have to chmod them regularly, otherwise some of the files end up as 600. I've only noticed this with the dat files (level.dat, and playerdata dat files), but it's not affected region files.

Even after my "fix", I'm still having the issue with these files.

[Qwerty-Space]

I believe this is an issue with openjdk:

https://github.com/openjdk/jdk/blob/c0665efd4f7f43c567393570ba6872838debd77f/src/java.base/share/classes/java/nio/file/TempFileHelper.java#L67

https://github.com/openjdk/jdk/blob/c0665efd4f7f43c567393570ba6872838debd77f/src/java.base/unix/classes/sun/nio/fs/UnixFileModeAttribute.java#L69

[Qwerty-Space]

Java creates the file in a temporary location with restricted permissions, then copies the file