From owner-freebsd-questions@FreeBSD.ORG  Mon Sep 27 19:07:49 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CA477106566B
	for <freebsd-questions@freebsd.org>;
	Mon, 27 Sep 2010 19:07:49 +0000 (UTC)
	(envelope-from jrisom@gmail.com)
Received: from mail-yx0-f182.google.com (mail-yx0-f182.google.com
	[209.85.213.182])
	by mx1.freebsd.org (Postfix) with ESMTP id 809258FC12
	for <freebsd-questions@freebsd.org>;
	Mon, 27 Sep 2010 19:07:49 +0000 (UTC)
Received: by yxn35 with SMTP id 35so2020945yxn.13
	for <freebsd-questions@freebsd.org>;
	Mon, 27 Sep 2010 12:07:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from
	:user-agent:mime-version:to:subject:references:in-reply-to
	:content-type:content-transfer-encoding;
	bh=gfxq5qQDFPpdL+pdk3RW6cqhyPXik0orRdoBN2rlu2M=;
	b=wDWoc67cHgXZwczPatCa56Z3rR4398JwC8KqUf/7TOc+D9l4zUeGgbfS8aRJtvlwlW
	L0MWBCgEPdZwLihGR0s9FSa6D6xE8GLi8msiyZmud4GXDa2o6iQ7MkbftdVZYGTbxiKS
	HEZDgGFAvpAGTgtBn0lhAX6m69dto6lc6iZ5s=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:user-agent:mime-version:to:subject:references
	:in-reply-to:content-type:content-transfer-encoding;
	b=SLr82OAtXdDQYDWTkBk1PfHm2+daZkbPGUOYONMV5w/IWjEtEjcFMYrMwZmuK9HBZy
	+JL8jM+ZT+Bk5N1EyLEiSPX0sFaBWMSaML89oL3Y+O7csHid8oMEHEd7BDe13Gm+63f3
	FF4g/+4MitCpMVIAZR2L8RpCmLQXfVoflT0Qg=
Received: by 10.100.210.6 with SMTP id i6mr6306915ang.143.1285614468606;
	Mon, 27 Sep 2010 12:07:48 -0700 (PDT)
Received: from [192.168.1.3] (c-24-14-170-47.hsd1.il.comcast.net
	[24.14.170.47])
	by mx.google.com with ESMTPS id t24sm6758468ano.12.2010.09.27.12.07.47
	(version=SSLv3 cipher=RC4-MD5); Mon, 27 Sep 2010 12:07:47 -0700 (PDT)
Message-ID: <4CA0EB84.3040802@gmail.com>
Date: Mon, 27 Sep 2010 14:07:48 -0500
From: Joshua Isom <jrisom@gmail.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US;
	rv:1.9.2.9) Gecko/20100915 Thunderbird/3.1.4
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
References: <AANLkTimctuy2WBzKiAO8tYEfRJW_J9N4Ejjdxc+csHKC@mail.gmail.com>
In-Reply-To: <AANLkTimctuy2WBzKiAO8tYEfRJW_J9N4Ejjdxc+csHKC@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Prevent symbolic links in pure-ftp!
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Sep 2010 19:07:49 -0000

On 9/27/2010 12:00 PM, Phan Quoc Hien wrote:
> hi!
>
> How to prevent symbolic links in pure-ftp for security issuse?
>
> User can access outsite chroot by create symlink: ln -s / abc =>  and user
>> can change dir to /
>>
>
> Anyone can solve this problem?
> Thanks.
>

man 8 jail

Jails limit file system access, device access, and kernel access.