Article View: ch.comp.os.linux
Article #22229Re: FTP Zugriff beschränken
From: Marc SCHAEFER
Date: Sun, 23 May 1999 00:00
Date: Sun, 23 May 1999 00:00
16 lines
1330 bytes
1330 bytes
Punisher <s.buechi@zutt.ch> wrote:
> ich w�rde gerne den FTP Zugriff f�r einige User einschr�nken, so dass
> sie nicht durch die ganze Ordnerstruktur wandern k�nnen. Das Wegnehmen
> von Attributen hats nicht gebracht. Die User sollten sich nur in ihrem
> homeverzeichnis bewegen d�rfen. Wie und wo stelle ich das ein?
This is the chroot option. Read the ftpd manual for more details.
In short it means:
- create a chroot group (groupadd)
- declare that group as guestgroup in /etc/ftpaccess
- ensure that the user's hierarchy is owned by root (at least the
toplevel) and that bin/ls exists (statically linked, e.g. do
a hardlink to ~ftp/bin/ls)
It also means, presumably, make sure that the user's shell is not
allowing logins (e.g. use /bin/false).
Technical Details
Message-ID:
<7i9cd3$dkm$1@vulcan.alphanet.ch>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<3747E69D.58E4F90A@zutt.ch>Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII X-Google-Thread: f4b73,769578e91a0cc64a X-Google-Attributes: gidf4b73,public From: Marc SCHAEFER <schaefer@alphanet.ch> Subject: Re: FTP Zugriff beschränken Date: 1999/05/23 Message-ID: <7i9cd3$dkm$1@vulcan.alphanet.ch> X-Deja-AN: 481224771 Content-Transfer-Encoding: 8bit References: <3747E69D.58E4F90A@zutt.ch> Organization: ALPHANET NF -- Not for profit telecom research Content-Type: text/plain; charset=ISO-8859-1 Mime-Version: 1.0 Newsgroups: ch.comp.os.linux