Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 May 2001 17:37:37 -0500
From:      Mike Meyer <mwm@mired.org>
To:        Nathan Vidican <webmaster@wmptl.com>
Cc:        questions@freebsd.org
Subject:   Re: restricting ftp access
Message-ID:  <15095.9137.554752.798356@guru.mired.org>
In-Reply-To: <1692265@toto.iv>

next in thread | previous in thread | raw e-mail | index | archive | help
Nathan Vidican <webmaster@wmptl.com> types:
> man chmod, man chown
> 
> You can change the permissions structure so as not to allow a user to
> exit a directory. For example: user is logged into /home/users/someuser,
> they can cd to /home/users, but not down to /home; and therefore not to
> anything below /home (eg: /etc).

Have you actually done this, and made it work? If so, I'd be
interested to know what permissions you used - and on which
directories - as my experience is that this can't be done. A process
has to be able to read / and /home in order to get to /home/users,
which means they can get to anything in / and /home.

	<mike
--
Mike Meyer <mwm@mired.org>			http://www.mired.org/home/mwm/
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15095.9137.554752.798356>