Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 May 2001 10:25:31 +0300
From:      Peter Pentchev <roam@orbitel.bg>
To:        "Gounder, Sami [IBM GSA]" <Sami.Gounder@team.telstra.com>
Cc:        Igor Podlesny <poige@morning.ru>, "'freebsd-security@FreeBSD.org'" <freebsd-security@FreeBSD.ORG>
Subject:   Re: Preventing FTP user accessing other directories
Message-ID:  <20010509102531.A3400@ringworld.oblivion.bg>
In-Reply-To: <6693506465.20010509152531@morning.ru>; from poige@morning.ru on Wed, May 09, 2001 at 03:25:31PM %2B0700
References:  <695D40B5EDD1D3118AB900508B08E9C8020EA60C@NTMSG0084> <6693506465.20010509152531@morning.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, May 09, 2001 at 03:25:31PM +0700, Igor Podlesny wrote:
> 
> are  you  aware  of  CHROOT capabilities? lots of FTP daemons can lock
> user  inside  chrooted  area... ProFTPd also allows easy configuration
> similar to Apache syntax rules for every dir and so on.
> 
> > We need to setup FTP for users to copy files from our UNIX box. Is there a
> > way to restrict each user to a directory and sub-directories below it
> > without removing OTHERS permission everywhere else?

If you're using the FTP server that comes with FreeBSD (/usr/libexec/ftpd),
do 'man ftpd' and look for 'chroot' or '/etc/ftpchroot'.

G'luck,
Peter

-- 
Do you think anybody has ever had *precisely this thought* before?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010509102531.A3400>