From owner-freebsd-questions Mon Sep 15 08:40:49 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id IAA04829 for questions-outgoing; Mon, 15 Sep 1997 08:40:49 -0700 (PDT) Received: from florence.pavilion.net (florence.pavilion.net [194.242.128.25]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id IAA04822; Mon, 15 Sep 1997 08:40:39 -0700 (PDT) Received: (from joe@localhost) by florence.pavilion.net (8.8.7/8.8.7) id QAA05059; Mon, 15 Sep 1997 16:39:09 +0100 (BST) Message-ID: <19970915163909.38565@pavilion.net> Date: Mon, 15 Sep 1997 16:39:09 +0100 From: Josef Karthauser To: Susie Ward Cc: questions@FreeBSD.ORG, isp@FreeBSD.ORG Subject: Re: Hiding user directories without breaking ftp? References: <199709122324.NAA07029@caliban.dihelix.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.81 In-Reply-To: ; from Susie Ward on Fri, Sep 12, 1997 at 10:42:10PM -0500 X-NCC-RegID: uk.pavilion Sender: owner-freebsd-questions@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Or use the stock ftpd with the chroot option and INTERNAL_LS compiled in. (see man ftpd). Joe On Fri, Sep 12, 1997 at 10:42:10PM -0500, Susie Ward wrote: > Why not use wu-ftpd with the guest group, this will chroot the users into > their own home directories and they can't back out past that. I'm using > this with great success and I only hafta put /bin/ls in each users > directory. > > On Fri, 12 Sep 1997, David Langford wrote: > > I am trying to get a system so that users can't "ls" other peoples > > home directories. > > > > The current problem is that this really breaks ftpd. > > > > It doesn't affect uploading to the directory, but when a user moves to a > > subdirectory and then tries to back out, it goes all the way to the > > server root directory. > > > > > > I set the dirs up like: > > > > > > drwxr-x--x 33 root nolist /u1 > > drwxr-x--x 33 root nolist /u1/u > > drwx--x--x 3 user user /u1/u/user > > > > PWD works like this. > > > > -r-xr-sr-x 1 bin nolist /bin/pwd > > > > Since ftpd setuid's the the incoming user then the getcwd() command doesnt > > work. > > > > I would like to figure out a way for getpwd() to work but break "ls". > > > > > > Thanks, > > > > -David Langford > > sysadmin@maui.net > > > > > > -- Josef Karthauser Technical Manager Email: joe@pavilion.net Pavilion Internet plc. [Tel: +44 1273 607072 Fax: +44 1273 607073]