How Can I stop ftp users climbing to the root directory from the guest home directory ?

How Can I stop ftp users climbing to the root directory from the guest home directory ?

Post by tzahi un » Tue, 07 Jul 1998 04:00:00



How Can I stop ftp users climbing to the root directory from the guest
home directory ?
Is it realted to the ftp server? or to the unix system?

Thank you very much,
Tzahi

 
 
 

How Can I stop ftp users climbing to the root directory from the guest home directory ?

Post by Rob Kreame » Wed, 08 Jul 1998 04:00:00


Most decent FTP servers will execute a chroot()
system call, effectively making the anonymous
FTP directory the "root" directory for the
daemon itself when someone logs in anonymously.

If yours doesn't do it try searching the 'net
for WU-FTP.



Quote:> How Can I stop ftp users climbing to the root directory from the guest
> home directory ?
> Is it realted to the ftp server? or to the unix system?

> Thank you very much,
> Tzahi


 
 
 

1. Guest ftp users are not located in their wu-ftp home directory

Hello to all.
I have a wu-ftp server installed on my Redhat Linux 7.2 system and I
set its configuration to be used by both anonymous and guest users.I
have defined all
my guest users in the "group1" group and then i have defined this
group (group1) as a guestgroup in my "ftpaccess" file.
My "ftpaccess" file is look like the below :

class class1 guest,anonymous  *
noretrieve
loginfails 5
private no
hostname ftp.mycompany.com

show-everytime message yes
message /.login.msg  LOGIN
readme  README* LOGIN
readme  README* CWD=*
passwd-check    none    warn
log commands anonymous,guest,real
log security anonymous,guest,real
log transfers anonymous,guest,real inbound
log transfers anonymous,guest,real outbound
anonymous-root /home/ftp/users/general
guest-root /home/ftp/users
guestgroup group1
passwd /home/ftp/users/etc/passwd
shadow /home/ftp/users/etc/shadow

Each line in my guest password file (/home/ftp/users/etc/passwd) is
look like the below :
emami:x:500:500::/home/ftp/users/./emami/:/bin/bash

I have set a different home directory for each guest user in the
/home/ftp/users directory that is the root directory for guest users.
But when I login by one of my guest account to ftp server,all of the
users and other directories in the /home/ftp/users directory is shown
and the user dosn't located to him or her directory. Of course the
guest user can only go to his own directory and can not go to other
users directories.

Who can tell me how to locate my guest users in their home directory
at the login time ?

Thanks a lot.

2. SLIP or CSLIP or PPP?

3. Can FTP be set up so registered users see their home directory as root?

4. display /etc/issue on telnets in [A]

5. home directory=root directory

6. sccs source code

7. home directory to root directory

8. shutdown without waking up the monitor

9. Script for creating a directory under user's home directory

10. Ftp directory access restriction for guest user

11. how to prevent ftp users (virtual hosts) from going up one directory/escaping their own directory)

12. Stopping users from changing out of their home directories