SUMMARY: Securing FTP access

From: Ian Wojtowicz <i_at_woj.com>
Date: Wed, 25 Mar 1998 01:04:03 +0100

The original question was "Is there a way to disallow FTP users from cd'ing
out of their home directories?".

The general consensus was that I should use WU-FTPD which allows for
exactly this functionality.

Thanks to Fredy Villa, Hisham Al-Saad, Ray Bellis, Karl Majer, Steven
Johnson for their responses.

ian

------------------------------------------
From: Fredy Villa <fredyvilla_at_w3link.com>

        The ftp daemon that almost everyone uses is Wuftp. It allows you to
specify relative root directories. e.g. The users thinks they are at
root when they are at their home directory. They can't cd anywhere else.
Once you have installed wuftp let me know and I will tell you how to
restrict users.
------------------------------------------
From: "Hisham Al-Saad" <webmaster_at_internic.uob.bh>

I simply (# chmod 701 ) to any directory which i don't want users to
cd to it. When an attemp by a user to cd to any other directory, the system
will come up with a permission denied message.

Mode on directories looks like this drwx- - - - - x
------------------------------------------
From: Ray Bellis <rpb_at_community.net.uk>

You can do this with the 'guest' mode in the WU FTPD.
------------------------------------------
From: Karl Majer <majer_at_aol.net>

  Install wu-ftpd which chroots the user to their home directory.
  A faq about it is here: http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
  and should answer any questions you may have.
------------------------------------------
From: "Steven Johnson (BUS)" <johnson_at_bayflash.stpt.usf.edu>

You sure are a busy little beaver. Try Washington University's ftpd -
wu-ftpd. The users will have a home directory something like this:
/home/users/./username

The . between /users/ and /username tell wu-ftpd that this is a chroot'd
environment and that the user can only go as far back as
/home/users/username.


- - - - - - - - - - - - | - - - - - - - - - - - - - - - - - - -
ian wojtowicz | nation1 http://www.nation1.net
i_at_woj.com ICQ:7652147 | An new country for the info age, run
http://woj.com | by the people who know it best: kids
- - - - - - - - - - - - | - - - - - - - - - - - - - - - - - - -
Received on Wed Mar 25 1998 - 01:16:26 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:37 NZDT