?
Solved

Making ftp more "secure"

Posted on 1997-07-01
7
Medium Priority
?
284 Views
Last Modified: 2010-04-21

  Hi...I'm running wu-ftpd and I'm trying to figure out how to configure it so that when user joe ftps in, his root is his home directory and he can't cd out of it to the dir that houses all the user directories....thanks....Adam
0
Comment
Question by:adamolson
  • 3
  • 3
7 Comments
 
LVL 51

Expert Comment

by:ahoffmann
ID: 2006489
This is only possible for user  ftp  and  anonymous.
I think you must patch wu-ftpd 's sources to satisfy your goals.

Ciao
Achim
0
 
LVL 1

Author Comment

by:adamolson
ID: 2006490
I've been reading that you can write a wrapper, but I'm looking for an easier way that might be in wu-ftpd already...thanks...Adam
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 2006491
may be following works, (add to /etc/ftpaccess):

      cd no joe

but this will disable cd at all for user joe :-(

Ciao Achim
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Accepted Solution

by:
hilla earned 100 total points
ID: 2006492
Create a .profile that would remove access to cd

Force ftp to work within an rsh

Good-luck, FTP is a security problem.
0
 
LVL 1

Author Comment

by:adamolson
ID: 2006493
So if I created a .profile that eliminated this, would it also be effective in a normal shell? Would this restrict them from cding to their dirs in their home dir?  can you send me your email address?  Adam
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 2006494
Yes, .profile would kill the cd functionallity for normal login.
And, $HOME/.profile is designed to be under users control!

BTW, ftp does not use the shell defined in /etc/passwd, so I
think (I've not checked the source) hilla's answer is not a
solution.
0
 
LVL 1

Author Comment

by:adamolson
ID: 2006495
Hi...I figured out how to do it....if you ever need to know how, go to ftp://ftp.fni.com/pub/wu-ftpd/guest-howto

this explains how to set it up so users have their home directories as root dir....thanks...Adam
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Attention: This article will no longer be maintained. If you have any questions, please feel free to mail me. jgh@FreeBSD.org Please see http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-update-server/ for the updated article. It is avail…
When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
Suggested Courses
Course of the Month8 days, 21 hours left to enroll

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question