Date: Thu, 20 Sep 2001 09:35:39 -0700 (PDT) From: Alan Batie <alan@agora.rdrop.com> To: FreeBSD-gnats-submit@freebsd.org Subject: misc/30690: Bad advice in ftpd man page Message-ID: <200109201635.f8KGZdt61764@agora.rdrop.com>
next in thread | raw e-mail | index | archive | help
>Number: 30690
>Category: misc
>Synopsis: Bad advice in ftpd man page
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: doc-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Sep 20 09:40:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator: Alan Batie
>Release: FreeBSD 4.3-STABLE i386
>Organization:
RainDrop Laboratories
>Environment:
System: FreeBSD agora.rdrop.com 4.3-STABLE FreeBSD 4.3-STABLE #3: Wed Sep 5 13:36:38 PDT 2001 root@aggie.rdrop.com:/usr/src/freebsd/sys/compile/AGORA i386
>Description:
The ftpd man page, in the section on setting up an anonymous
ftp server, recommends setting ~ftp/pub world writable. This
is a good way to end up with a disk full of warez:
~ftp/pub Make this directory mode 777 and owned by ``ftp''.
Guests can then place files which are to be accessible
via the anonymous account in this directory.
>How-To-Repeat:
>Fix:
Change to read (or something similar):
~ftp/pub Make this directory mode 755 and owned by ``ftp''.
Place the files you want to share in here with
mode 644. If you want local users to be able to
publish files here, create subdirectories for them,
owned by their account and group and mode 755.
Be sure to warn them not to make anything writeable
by "world", or your disk will end up getting filled
with "warez" (illegal copies of software).
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200109201635.f8KGZdt61764>