Controlling read access

2008-07-31 Thread John Almberg
I operate a server on which I am typically the only ssh user, but I do provide a small number of users ftp access. Each user has their own home directory. Currently all home directories have read permission set for 'other'. This means if I log in as one user, I can read and even download th

Re: Controlling read access

2008-08-05 Thread John Almberg
On Jul 31, 2008, at 5:40 PM, Catalin Miclaus wrote: Hello John, If you are providing only FTP services for those users, perhaps you want to go for an FTP server that handles virtual users. I'm using pure-ftpd and it works great. Google will help you find some nice howto's for same. Hi Ca

RE: Controlling read access

2008-08-06 Thread Catalin Miclaus
Original Message- From: John Almberg [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 05, 2008 10:55 PM To: Catalin Miclaus Cc: freebsd-questions@freebsd.org Subject: Re: Controlling read access On Jul 31, 2008, at 5:40 PM, Catalin Miclaus wrote: > Hello John, > > If you are

Re: Controlling read access

2008-08-06 Thread John Almberg
Hello John, There are some things that you can try. What if you connect from localhost and transfer files, is it still very slow? Try to disable TLS/SSL and see if this improve performance. Increase debug level and check the log for any errors. Well, I am learning lots about FTP :-) I didn

Re: Controlling read access

2008-08-06 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Almberg wrote: |> Hello John, |> |> There are some things that you can try. |> |> What if you connect from localhost and transfer files, is it still very |> slow? |> Try to disable TLS/SSL and see if this improve performance. |> Increase debug le

Re: Controlling read access

2008-08-06 Thread John Almberg
| Now I have just one major league problem: when I logged in as one of the | users, to test the connections, I discovered that I had SUPER POWERS. I | was able to delete any file that I could see, including ones that were | owned by root. Digging uncovered the fact that pure-ftpd runs with

Re: Controlling read access

2008-08-06 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Almberg wrote: |> | Now I have just one major league problem: when I logged in as one of |> the |> | users, to test the connections, I discovered that I had SUPER POWERS. I |> | was able to delete any file that I could see, including ones that we

Re: Controlling read access

2008-08-06 Thread John Almberg
| Hi Greg, | | I tried your sequence, but it didn't seem to work. Or, perhaps it worked | and the PRIVSEP option doesn't do what I expect it to. Logging in as a | normal user gives that user root privileges. | | This seems pretty scary to me. Not so bad, since the user is locked into | his

Re: Controlling read access

2008-07-31 Thread Manolis Kiagias
John Almberg wrote: I operate a server on which I am typically the only ssh user, but I do provide a small number of users ftp access. Each user has their own home directory. Currently all home directories have read permission set for 'other'. This means if I log in as one user, I can read an

Re: Controlling read access

2008-07-31 Thread Valeriu Mutu
On Thu, Jul 31, 2008 at 05:16:48PM -0400, John Almberg wrote: > I operate a server on which I am typically the only ssh user, but I > do provide a small number of users ftp access. > > Each user has their own home directory. Currently all home > directories have read permission set for 'other'

Re: Controlling read access

2008-07-31 Thread Derek Ragona
At 04:16 PM 7/31/2008, John Almberg wrote: I operate a server on which I am typically the only ssh user, but I do provide a small number of users ftp access. Each user has their own home directory. Currently all home directories have read permission set for 'other'. This means if I log in as one

Re: Controlling read access

2008-07-31 Thread John Almberg
What ftp server software are you using? For example, in proftpd, you simply add this line to /usr/local/etc/ proftpd.conf: DefaultRoot ~ and everyone is "jailed" into his own directory. It also seems the ftp daemon in the base system supports this through /etc/ftpchroot. If you are using

RE: Controlling read access

2008-07-31 Thread Catalin Miclaus
y ISP-Data Starcomms Ltd. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Almberg Sent: Thursday, July 31, 2008 10:17 PM To: freebsd-questions@freebsd.org Subject: Controlling read access I operate a server on which I am typically the only ssh user,