.
- Original Message -
From: "robert slater" <[EMAIL PROTECTED]>
To: "Charlie Brady" <[EMAIL PROTECTED]>; "Darrell May"
<[EMAIL PROTECTED]>
Cc: "e-smith-devinfo" <[EMAIL PROTECTED]>
Sent: Friday, December 21, 2001 9:55 AM
Subject
Hmmm. For whatever reason some devinfo members did not get Greg's reply.
Here it is again:
Greg Zartman <[EMAIL PROTECTED]> said:
> Yes, I did just this with the ftp service using a custom proftp.d
> fragement as follows:
>
> Fragement name: /etc/e-smith/etc/proftpd.conf/05CustomRoot
>
>
[snip]
> Users logged in using ftp should be locked inside /home/e-smith/files, and
> can't wander the hard drive.
That is the case with
ftp:[EMAIL PROTECTED]. they are locked in.They can not wander about.
They should only have access to files in
> i-bays if the i-bay has public access, or they
On Thu, 20 Dec 2001, Darrell May wrote:
> Yes, there seems a big weakness anytime you provide user access via
> SSH/FTP as the user may almost freely wander the hard drive. If you are
> hosting website for others, you must grant them the ability to upload
> their website documents. I would
Greg Zartman <[EMAIL PROTECTED]> said:
> Yes, I did just this with the ftp service using a custom proftp.d
> fragement as follows:
Thanks Greg, I'll give this a try.
Regards,
--
Darrell May
DMC Netsourced.com
http://netsourced.com
http://myEZserver.com
--
Please report bugs to [EMAIL PROT
robert slater <[EMAIL PROTECTED]> said:
> hi
> Using FTP [yes I know]
> I think you can access the home directory with.
> ftp:[EMAIL PROTECTED]
>
> In fact they can get everywhere they are allowed with FTP. I will look
> in the manual. I think its there. Your thinking too hard Darrell!
Yes, th
hi
Using FTP [yes I know]
I think you can access the home directory with.
ftp:[EMAIL PROTECTED]
In fact they can get everywhere they are allowed with FTP. I will look in
the manual. I think its there. Your thinking too hard Darrell!
>
> Currently if you grant a user shell access they can walk th
mith-devinfo
> Subject: [e-smith-devinfo] user shell access directory restrictions
>
>
>
> Currently if you grant a user shell access they can walk
> the directory
> tree (cd /) and do more things then I actually thought possible!!!
>
> Ok, good reason NOT to grant shell
On Wed, Dec 19, 2001 at 01:43:40AM -, Darrell May <[EMAIL PROTECTED]> wrote:
>
> Currently if you grant a user shell access they can walk the directory
> tree (cd /) and do more things then I actually thought possible!!!
If you don't trust users, they should not have shell access - end of s
Currently if you grant a user shell access they can walk the directory
tree (cd /) and do more things then I actually thought possible!!!
Ok, good reason NOT to grant shell access.
Having said this, if it is possible, I would like to grant shell access,
if I could restrict a users movements
10 matches
Mail list logo
