From owner-freebsd-bugs Tue Mar 25 7:20:22 2003 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B0EF437B401 for ; Tue, 25 Mar 2003 07:20:19 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5738643F93 for ; Tue, 25 Mar 2003 07:20:19 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id h2PFKENS038864 for ; Tue, 25 Mar 2003 07:20:14 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id h2PFKE89038863; Tue, 25 Mar 2003 07:20:14 -0800 (PST) Date: Tue, 25 Mar 2003 07:20:14 -0800 (PST) Message-Id: <200303251520.h2PFKE89038863@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Peter Pentchev Subject: Re: bin/48784: No way to disable directory listings in ftpd Reply-To: Peter Pentchev X-Spam-Status: No, hits=0.0 required=5.0 tests=none version=2.50 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp) Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR bin/48784; it has been noted by GNATS. From: Peter Pentchev To: Jeremy Prior Cc: bug-followup@FreeBSD.org Subject: Re: bin/48784: No way to disable directory listings in ftpd Date: Tue, 25 Mar 2003 17:12:48 +0200 On Tue, Mar 25, 2003 at 05:30:17AM -0800, Jeremy Prior wrote: > On Thu, 2003-03-20 at 17:07, Yar Tikhiy wrote: > > Thanks for your bug report, but have you considered removing > > "r" bits from a directory's permissions in order to prohibit > > listing the directory? > > I considered it, but discounted it for three reasons: > > 1. The ftpd shares its directory tree with a webserver. (The idea > is that the users can access the same content either by ftp:// > or http://); How will turning off the 'r' bit harm HTTP functionality, except for disallowing directory listings? Or do you *want* to allow directory listings via HTTP, but not FTP? :) > 2. I can't trust people adding content to the site to remember to > do this; and A matter of policy, I think.. or it could be automated. > 3. One patch fixes both of these problems I tend to agree with Yar here that while this patch may seem useful, it is not, strictly speaking, needed - its functionality can indeed be achieved by other means (turning off read permission). G'luck, Peter -- Peter Pentchev roam@ringlet.net roam@sbnd.net roam@FreeBSD.org PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint FDBA FD79 C26F 3C51 C95E DF9E ED18 B68D 1619 4553 The rest of this sentence is written in Thailand, on To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message