Anyway to change the owner of uploaded files? about tusd

[Acconut]

However I found that the uploaded files are owned as root

This indicates that you are running tusd under the root user which is generally not recommended because if the software contains a vulnerability which could be used for remote code execution, the attacker would gain root access. One approach is to run tusd with the same user as apache is running, so the files which are created for the uploads, will be owned by the apache user.

Is it possible to change the owner or permission once tusd received the file?

Alternatively, you can use the undocumented hook feature. To do this create a file called .hook/post-finish with following content:

#!/usr/bin/env bash

user="USER_WHO_SHOULD_OWN_UPLOADS"
dir="PATH_TO_UPLOADS"
chown "$user" "${dir}/${TUS_ID}.bin"

Then execute tusd with the --hook-dir=.hooks flag and the uploaded files should now be owned be the specified user.

[kevin-netsrik]

thanks for your quick response!! since I am running the binary, I have choose to run the process by apache!!
many thanks!!!!