[sanity assassin]

Hey all,

How come my g/f can ftp into my computer and be able to browse the entire system? She's using transmit, and has an account on my machine, but when she ftps in, she can then go to the root, and then other accounts.

Any pointers on how to restrict access?

Thanks

[Gul Banana]

chroot ftpd, or restrict d+x in /Users to the appropriate UIDs.

[sanity assassin]

Thanks Gul. There's still a few things I'm not understanding though. I've set the permissions for my Home Folder so that only I can access it, and all others can't read, or write to it. How do I set this for the rest of the system? Is there any way for her when she ftps in to be only able to browse her own directory, and not the root?

[Arkham_c]

Originally posted by sanity assassin:
Thanks Gul. There's still a few things I'm not understanding though. I've set the permissions for my Home Folder so that only I can access it, and all others can't read, or write to it. How do I set this for the rest of the system? Is there any way for her when she ftps in to be only able to browse her own directory, and not the root?

That's what chroot is for. It's a directive in the ftpd configuration. Do a "man ftpd.conf" for more info.

Here are my ftpd.conf and ftpchroot files, restricting a user "npp" to a specific directory:

ftpd.conf:

Code:
homedir npp /Users/npp/uploads

ftpchroot:

Code:
npp chroot /Users/npp/

I seem to recall having to patch ftpd to make the chroot command work, but it's been a while so I don't remember the details. I think it was discussed on MacNN previously.

[sanity assassin]

Originally posted by Arkham_c:
That's what chroot is for. It's a directive in the ftpd configuration. Do a "man ftpd.conf" for more info.

Here are my ftpd.conf and ftpchroot files, restricting a user "npp" to a specific directory:

ftpd.conf:

Code:
homedir npp /Users/npp/uploads

ftpchroot:

Code:
npp chroot /Users/npp/

I seem to recall having to patch ftpd to make the chroot command work, but it's been a while so I don't remember the details. I think it was discussed on MacNN previously.

Aaah, got ye. I've been following a tutorial from o'reilly too.

Thanks for the explanation.