From owner-freebsd-isp  Tue Jul 22 11:54:40 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id LAA19240
          for isp-outgoing; Tue, 22 Jul 1997 11:54:40 -0700 (PDT)
Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id LAA19232
          for <isp@FreeBSD.ORG>; Tue, 22 Jul 1997 11:54:35 -0700 (PDT)
Received: (from daemon@localhost)
	by alpo.whistle.com (8.8.5/8.8.5) id LAA25486;
	Tue, 22 Jul 1997 11:42:42 -0700 (PDT)
Received: from current1.whistle.com(207.76.205.22)
 via SMTP by alpo.whistle.com, id smtpd025483; Tue Jul 22 18:42:37 1997
Message-ID: <33D4FEAD.3F54BC7E@whistle.com>
Date: Tue, 22 Jul 1997 11:40:45 -0700
From: Julian Elischer <julian@whistle.com>
Organization: Whistle Communications
X-Mailer: Mozilla 3.0Gold (X11; I; FreeBSD 2.2-CURRENT i386)
MIME-Version: 1.0
To: Dan Busarow <dan@dpcsys.com>
CC: Rick Morel <rmorel@morelr.com>, isp@FreeBSD.ORG
Subject: Re: FTP Problem
References: <Pine.UW2.3.95.970722100001.13349D-100000@cedb>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Dan Busarow wrote:
> 
> On Tue, 22 Jul 1997, Rick Morel wrote:
> > I'm running Wu-FTP and can't seem to find any real info, except for the
> > statement that it adds security.
> >
> > Anonymous FTP is fine. Here's my problem. Users can see anything on the
> 
> Since you say that anon ftp is fine I'll assume that you mean users
> with an account on the machine can see everything when they
> connect via ftp.
> 
> If these are supposed to be ftp only accounts then put all the users
> in group ftp and then in ftpaccess add a line
> 
> guestgroup      ftp
> 
> Make sure you add -a to the ftpd entry in /etc/inetd.conf
> 
> Dan
> --
>  Dan Busarow                                                  714 443 4172
>  DPC Systems / Beach.Net                                    dan@dpcsys.com
>  Dana Point, California  83 09 EF 59 E0 11 89 B4   8D 09 DB FD E1 DD 0C 82

wu-ftpd can allow you to confine users to their own directory
using a 'chroot'
see teh section that mentions putting a "/./"
in their /etc/passwd entry..


a home dir of /usr/home/./fred
will chroot to /usr/home before cd-ing to fred.

a home dir of /usr/home/fred/./ will chroot to /usr/home/fred/. 
then cd to / (in the chroot area

etc.