From owner-freebsd-bugs  Thu Sep 20  9:40:13 2001
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id CEB0237B418
	for <freebsd-bugs@hub.freebsd.org>; Thu, 20 Sep 2001 09:40:01 -0700 (PDT)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f8KGe1p96153;
	Thu, 20 Sep 2001 09:40:01 -0700 (PDT)
	(envelope-from gnats)
Received: from agora.rdrop.com (agora.rdrop.com [199.26.172.34])
	by hub.freebsd.org (Postfix) with ESMTP id D865C37B414
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 20 Sep 2001 09:35:39 -0700 (PDT)
Received: (from alan@localhost)
	by agora.rdrop.com (8.11.4/8.11.4) id f8KGZdt61764;
	Thu, 20 Sep 2001 09:35:39 -0700 (PDT)
	(envelope-from alan)
Message-Id: <200109201635.f8KGZdt61764@agora.rdrop.com>
Date: Thu, 20 Sep 2001 09:35:39 -0700 (PDT)
From: Alan Batie <alan@agora.rdrop.com>
Reply-To: Alan Batie <alan@agora.rdrop.com>
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.113
Subject: misc/30690: Bad advice in ftpd man page
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org


>Number:         30690
>Category:       misc
>Synopsis:       Bad advice in ftpd man page
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Sep 20 09:40:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     Alan Batie
>Release:        FreeBSD 4.3-STABLE i386
>Organization:
RainDrop Laboratories
>Environment:
System: FreeBSD agora.rdrop.com 4.3-STABLE FreeBSD 4.3-STABLE #3: Wed Sep 5 13:36:38 PDT 2001 root@aggie.rdrop.com:/usr/src/freebsd/sys/compile/AGORA i386


>Description:
	The ftpd man page, in the section on setting up an anonymous
	ftp server, recommends setting ~ftp/pub world writable.  This
	is a good way to end up with a disk full of warez:

	    ~ftp/pub  Make this directory mode 777 and owned by ``ftp''.
                      Guests can then place files which are to be accessible
                      via the anonymous account in this directory.

>How-To-Repeat:
	
>Fix:

        Change to read (or something similar):

	    ~ftp/pub  Make this directory mode 755 and owned by ``ftp''.
		      Place the files you want to share in here with
		      mode 644.  If you want local users to be able to
		      publish files here, create subdirectories for them,
		      owned by their account and group and mode 755.
		      Be sure to warn them not to make anything writeable 
		      by "world", or your disk will end up getting filled
		      with "warez" (illegal copies of software).
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message