🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ch.comp.os.linux
Article #22229

Re: FTP Zugriff beschränken

#22229
From: Marc SCHAEFER
Date: Sun, 23 May 1999 00:00
16 lines
1330 bytes
Punisher <s.buechi@zutt.ch> wrote:
> ich w�rde gerne den FTP Zugriff f�r einige User einschr�nken, so dass
> sie nicht durch die ganze Ordnerstruktur wandern k�nnen. Das Wegnehmen
> von Attributen hats nicht gebracht. Die User sollten sich nur in ihrem
> homeverzeichnis bewegen d�rfen. Wie und wo stelle ich das ein?

This is the chroot option. Read the ftpd manual for more details.
In short it means:
   - create a chroot group (groupadd)
   - declare that group as guestgroup in /etc/ftpaccess
   - ensure that the user's hierarchy is owned by root (at least the
     toplevel) and that bin/ls exists (statically linked, e.g. do
     a hardlink to ~ftp/bin/ls)

It also means, presumably, make sure that the user's shell is not
allowing logins (e.g. use /bin/false).
Technical Details
Message-ID: <7i9cd3$dkm$1@vulcan.alphanet.ch>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <3747E69D.58E4F90A@zutt.ch>

Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII
X-Google-Thread: f4b73,769578e91a0cc64a
X-Google-Attributes: gidf4b73,public
From: Marc SCHAEFER <schaefer@alphanet.ch>
Subject: Re: FTP Zugriff beschränken
Date: 1999/05/23
Message-ID: <7i9cd3$dkm$1@vulcan.alphanet.ch>
X-Deja-AN: 481224771
Content-Transfer-Encoding: 8bit
References: <3747E69D.58E4F90A@zutt.ch>
Organization: ALPHANET NF -- Not for profit telecom research
Content-Type: text/plain; charset=ISO-8859-1
Mime-Version: 1.0
Newsgroups: ch.comp.os.linux