News Group Posts

ftp chroot

From: mschalit@pacbell.net (Matt Schalit)
Subject: Re: FTP restrictions
References: <0bg68.41107$xb.4135828702@newssvr21.news.prodigy.com> 
Date: Thu, 31 Jan 2002 21:48:11 GMT

On Thu, 31 Jan 2002 18:38:52 GMT, "George" <redoak76515yahoo@.com> wrote:

>I'm a newbie as well, with very basic Unix skills. We are running Open
>Server 5.05.
>I would like to know if there is a way to restrict a specific users access
>to directories during a ftp session.
>
>We would like to provide some users with the ability to upload and download
>files, but they should not be able to get, send, or view files in any other
>directories.
>
>Any Help is appreciated.
>George

It's called non-anonymous chrooted access.
Better still is making all those people guest
users also.  When a user logs in with a real
unix username and password, a chroot is done
which jails them in their directory.  All data
and libraries needed for them to work need to
be within the jail.  So it's awkward.  Making
them guest users provides a further level of
restriction.  If you make them guest users
only and don't chroot them, they are still
jailed, less securely, but then they don't
any special files w/in the jail.

Do these via your ftpaccess file.  It takes a 
bit of determination.  I recommend wu-ftpd 2.6.2
which is current.  Visit wu-ftp.org and read up
on the extensive guest howto's and whatnot.
Be prepared to exercise patience :)

Complex, but very doable.
Matt 
 

Comments?

Jump to Comments

Many of the products and books I review are things I purchased for my own use. Some were given to me specifically for the purpose of reviewing them. I resell or can earn commissions from the sale of some of these items. Links within these pages may be affiliate links that pay me for referring you to them. That's mostly insignificant amounts of money; whenever it is not I have made my relationship plain. I also may own stock in companies mentioned here. If you have any question, please do feel free to contact me.

Specific links that take you to pages that allow you to purchase the item I reviewed are very likely to pay me a commission. Many of the books I review were given to me by the publishers specifically for the purpose of writing a review. These gifts and referral fees do not affect my opinions; I often give bad reviews anyway.

We use Google third-party advertising companies to serve ads when you visit our website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you. If you would like more information about this practice and to know your choices about not having this information used by these companies, click here.