From owner-freebsd-security Fri Oct 12 10:47:39 2001 Delivered-To: freebsd-security@freebsd.org Received: from pcbtech.ru (servak.pcbtech.ru [195.54.223.248]) by hub.freebsd.org (Postfix) with SMTP id DDCF037B403 for ; Fri, 12 Oct 2001 10:47:34 -0700 (PDT) Received: (qmail 10929 invoked from network); 12 Oct 2001 17:47:32 -0000 Received: from 134.inforser.ru (HELO indian) (195.54.220.134) by servak.pcbtech.ru with SMTP; 12 Oct 2001 17:47:32 -0000 Message-ID: <001301c15345$f64a2e30$86dc36c3@indian> From: "iNDiAN" To: "Dave" Cc: References: Subject: Re: Only an ftp account Date: Fri, 12 Oct 2001 21:47:26 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > How would I be able to give an account to someone where they can only > login and use FTP? Shell interpeters, sendmail, and virtually all the > other parts of the system should not be at their disposal. what ftp daemon? it depends. but in general -- user w/o shell would be accepted by, for expamle ProFTPd. Obvious he/she has no way to login. > How does one accomplish the creation of such a 'ftp-locked' account? > > I've heard some discussion about jails, but man jail(1) and jail(2) only > talk about freezing a process, so I think this might not be the solution I > need. jails are just too much powerfull techniquez. In case of just ftp-only account you don't need it. "JH said once -- everybody stay cool. He didn't reproduced it 'cause there's no need. That's enough -- his life is a picture." Oleg PCB Technology, Moscow, Russia To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message