Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Sep 1999 12:51:00 +0300
From:      Anand Buddhdev <arb@anand.org>
To:        "Francis A. Vidal" <francis@usls.edu>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: restricted FTP-only user
Message-ID:  <19990908125100.C15080@africaonline.co.ke>
In-Reply-To: <Pine.LNX.4.10.9909081722220.487-100000@atlas.usls.edu>; from Francis A. Vidal on Wed, Sep 08, 1999 at 05:29:30PM %2B0800
References:  <19990908115527.J14237@africaonline.co.ke> <Pine.LNX.4.10.9909081722220.487-100000@atlas.usls.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Sep 08, 1999 at 05:29:30PM +0800, Francis A. Vidal wrote:

> > Create the account, and make its home directory the DocumentRoot of your
> > webserver. Then put the account name in the file /etc/ftpchroot. Also,
> > give this account a shell like /sbin/nologin, and make sure
> > /sbin/nologin has an entry in /etc/shells (to allow FTP logins).
> 
> aha, now i know. what i did is to create a login class in /etc/login.conf
> and changed the shell for ftp-users, which worked, but i like your
> suggestion. btw, will chrooting allow him to traverse symbolic links to
> directories?

He will be able to see the link, but he should not be able to fetch the
file it points to.

-- 
See complete headers for more info


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990908125100.C15080>