From owner-freebsd-security Fri Sep 8 15:21:52 2000 Delivered-To: freebsd-security@freebsd.org Received: from rocket.coresync.net (ns1.coresync.net [64.71.131.2]) by hub.freebsd.org (Postfix) with SMTP id 95F5737B50F for ; Fri, 8 Sep 2000 15:21:49 -0700 (PDT) Received: (qmail 1290 invoked by uid 1117); 8 Sep 2000 22:12:52 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 8 Sep 2000 22:12:52 -0000 Date: Fri, 8 Sep 2000 15:12:52 -0700 (PDT) From: "Jonathan M. Slivko" To: Brett Glass Cc: freebsd-security@FreeBSD.ORG Subject: Re: Home Directories -- in the point of security? In-Reply-To: <4.3.2.7.2.20000908161720.04680100@localhost> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Well, i'm not running this box as an ISP. I'm running this as a box for myself and a few of my friends. So, I have more than enough space to run all of what I need without having to put quotas on anything. -- Jonathan M. Slivko ---- Jonathan M. Slivko Technical Support: CoreSync Corparation NSI ID: JSR730 Want a reliable shells? check us out at http://www.coresync.net! ---- On Fri, 8 Sep 2000, Brett Glass wrote: > Symlink a ~/Web subdirectory into the user's directory and make that one > world-readable. If updating Web pages is the only reason users use FTP, > chroot them into their Web directories when they connect via FTP. Put > quotas on the Web subdirectories, too. Some folks don't realize just > how big their uncompressed (or badly compressed) images are. > > --Brett > > At 03:12 PM 9/8/2000, Jonathan M. Slivko wrote: > > >What chmod value should I use when modifying home directories to allow for > >a personal website on a webserver without comprimsing security of the > >files from other users, even reading the files is out of the question > >entirely. > > > >---- > >Jonathan M. Slivko > >Technical Support: CoreSync Corparation > >NSI ID: JSR730 > > > >Want a reliable shells? check us out at > >http://www.coresync.net! > >---- > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-security" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message