🚀 go-pugleaf

On Sat, 11 Apr 1998 02:07:40 +0200, dan <danielga@easynet.fr> wrote:

>Daryl Lim wrote:
>
>> Hi,
>>
>> Could someone tell me or point me to some place where it documents how
>> to secure a FTP Server.
>>
>> I'm running RedHat 4.1 with 2.0.29 Kernel ..
>>
>> What I would like to know is how can I stop webpage owners from
>> browsing outside there home directory eg. /web/html/~page/ . Currently
>> if they were to FTP in they could browse outside there home directory
>> to other directories eg. /usr/??? . This may seem very paranoid but I
>> just want them to be able to FTP to their home directory to change
>> their pages *only* . And not really snoop around
>>
>> I have found a site ages ago . That if I remembered correctly didn't
>> allow them to browse outside the base directory eg. /web .. They
>> couldn't go below that eg / . But now I can not remember where it was
>>
>> Any help would be extremely grateful
>>
>> Daryl,
>
>  Normally as in the "anonymous" type FTP, the user gets a line in
>/etc/passwd as :
>babe:ecrypted_passwd:uid:gid:comment:/web/html/./user:/bin/false
>
>^^^
>the dot means a chroot()ed path so /web/html becomes "/", this is the
>theory,
>you can achieve this with Wu-ftpd or  proftpd.
>Hope this helps a little
>Daniel

Thanks ...

I found out another way using wu-ftpd . Although it took a while to
find any descent information about wu-ftpd .. In the ftpaccess file
/etc/ftpaccess. You can add a line 

guestgroup lowest

Which you can then create users who belong to `lowest` group and they
will only be able to ftp in to the set directory and will not be able
to go lower as it is mapped as / . Like you said above .

Daryl,