Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Mar 2003 07:20:14 -0800 (PST)
From:      Peter Pentchev <roam@ringlet.net>
To:        freebsd-bugs@FreeBSD.org
Subject:   Re: bin/48784: No way to disable directory listings in ftpd
Message-ID:  <200303251520.h2PFKE89038863@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
The following reply was made to PR bin/48784; it has been noted by GNATS.

From: Peter Pentchev <roam@ringlet.net>
To: Jeremy Prior <jez@chagford.netcraft.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: bin/48784: No way to disable directory listings in ftpd
Date: Tue, 25 Mar 2003 17:12:48 +0200

 On Tue, Mar 25, 2003 at 05:30:17AM -0800, Jeremy Prior wrote:
 >  On Thu, 2003-03-20 at 17:07, Yar Tikhiy wrote:
 >  > Thanks for your bug report, but have you considered removing
 >  > "r" bits from a directory's permissions in order to prohibit
 >  > listing the directory?
 >  
 >  I considered it, but discounted it for three reasons:
 >  
 >       1. The ftpd shares its directory tree with a webserver.  (The idea
 >          is that the users can access the same content either by ftp://
 >          or http://);
 
 How will turning off the 'r' bit harm HTTP functionality, except for
 disallowing directory listings?  Or do you *want* to allow directory
 listings via HTTP, but not FTP? :)
 
 >       2. I can't trust people adding content to the site to remember to
 >          do this; and
 
 A matter of policy, I think.. or it could be automated.
 
 >       3. One patch fixes both of these problems
 
 I tend to agree with Yar here that while this patch may seem useful,
 it is not, strictly speaking, needed - its functionality can indeed
 be achieved by other means (turning off read permission).
 
 G'luck,
 Peter
 
 -- 
 Peter Pentchev	roam@ringlet.net    roam@sbnd.net    roam@FreeBSD.org
 PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
 Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
 The rest of this sentence is written in Thailand, on

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200303251520.h2PFKE89038863>