Mailinglist Archive: opensuse (2553 mails)

< Previous Next >
Re: [opensuse] Restricting a user to one directory for FTP access
  • From: Anders Johansson <ajh@xxxxxxxxxx>
  • Date: Mon, 12 May 2008 03:34:49 +0200
  • Message-id: <200805120334.49915.ajh@xxxxxxxxxx>
On Sunday 11 May 2008 13:53:14 James Knott wrote:
<snip>
# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~
<snip>

Of course, if that's done, the user won't be able to do much, as he
won't be able to access any executables that aren't in that jail.

Accessing executables? Breaking out of chroot?

What exactly do you and John do with your ftp servers?

Breaking out of a chroot jail is fairly easy, yes, if you're root and have a
shell prompt. It's not that easy (or indeed possible) through an ftp client.

And I have never seen any need to access executables through an ftp client,
unless I was trying to download them, in which case they should simply be
copied to the ftp directory

Anders
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >