[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference turris::digital_unix

Title:DIGITAL UNIX(FORMERLY KNOWN AS DEC OSF/1)
Notice:Welcome to the Digital UNIX Conference
Moderator:SMURF::DENHAM
Created:Thu Mar 16 1995
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:10068
Total number of notes:35879

9130.0. "Urgent: secure ftp access" by GRIFUN::BENVI () Wed Mar 12 1997 05:06

HI all,
	I'm in touch with a customer who's delivering electronic mail, edi and
remote printing services and he's designing an extension to the above, supplying
internet and ftp services to his ultimate customers.

Customer accessing the ftp services can leave files in their directoryes in a secure way.
For this reason customer asked me the pssibility for a generic fto user to have
the same bahaviour as anonymous user (i.e. chroot to home).
In this way no other ftp-users can access my directory and see my files.

I had a look at the documentation and to this conference (notes 1619.*) and it seems that
"cloning" anonymous use is not possible ulness hacking ftpd code.
Is it still true?

If yes, how can I prevent other ftp-users to see and access files of a given ftp-user?
Any drawback to settting world access to no access?
What about ACL?

The above questions are quite urgent since customer is selecting the sw platform on
which to implement the new services. It seems the other Unix (HP-UX?) allow the chroot
mechanism for non-anonymous ftp users....
We need to answer in some way.

HELP!
Thanks in advance
Angelo
T.RTitleUserPersonal
Name
DateLines
9130.1BIGUN::nessus.cao.dec.com::MayneChurchill's black dogWed Mar 12 1997 17:063
You might want to take something like wu-ftpd and modify it appropriately.

PJDM
9130.2wu-ftpd already has thisSMURF::DUSTINThu Mar 13 1997 09:356
    Or you might want to take wu-ftpd itself and not modify it, since
    it supports the sub-user command (multiple anonymous users, each with
    their own area).
    
    John