Date: Thu, 4 Jan 2001 10:32:36 -0500 (EST) From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu> To: "Portwood, Jason" <JPortwood@strategicit.net> Cc: "'freebsd-security@FreeBSD.ORG'" <freebsd-security@FreeBSD.ORG> Subject: ftpd and anonymous setup Message-ID: <200101041532.KAA59487@khavrinen.lcs.mit.edu> In-Reply-To: <6381A6A8826BD31199500090279CAFBA24F41A@exchange.strategicit.net> References: <6381A6A8826BD31199500090279CAFBA24F41A@exchange.strategicit.net>
next in thread | previous in thread | raw e-mail | index | archive | help
<<On Thu, 4 Jan 2001 10:29:53 -0500 , "Portwood, Jason" <JPortwood@strategicit.net> said: > I chose 773 to allow someone to be assigned to the group to control the > contents of that > directory. > That will allow files to be uploaded and not be viewable. Doesn't help -- the WaReZ d00dz are perfectly capable of telling their 31337 co-conspirators the name under which they have uploaded the file. The only solution is an ftpd configuration option (like in wuftpd) which creates files under a different user id and a mode which is not readable by the kiddies. A useful addition to ftpd would be an option to disable all operations which would modify the filesystem. -GAWollman To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200101041532.KAA59487>