Mailinglist Archive: opensuse (2553 mails)

< Previous Next >
Re: [opensuse] Restricting a user to one directory for FTP access
  • From: Anders Johansson <ajh@xxxxxxxxxx>
  • Date: Mon, 12 May 2008 03:55:56 +0200
  • Message-id: <200805120355.56461.ajh@xxxxxxxxxx>
On Monday 12 May 2008 03:44:40 James Knott wrote:
Anders Johansson wrote:
On Sunday 11 May 2008 13:53:14 James Knott wrote:
<snip>
# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~
<snip>

Of course, if that's done, the user won't be able to do much, as he
won't be able to access any executables that aren't in that jail.

Accessing executables? Breaking out of chroot?

What exactly do you and John do with your ftp servers?

Breaking out of a chroot jail is fairly easy, yes, if you're root and
have a shell prompt. It's not that easy (or indeed possible) through an
ftp client.

And I have never seen any need to access executables through an ftp
client, unless I was trying to download them, in which case they should
simply be copied to the ftp directory

Anders

Was ftp mentioned by the OP? I don't recall seeing it, but I don't have
that message any more. This is why I was trying to clarify what,
precisely he wanted to do.

The subject of the mail is a bit of a giveaway :)

Anders
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups