Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Michiel on June 07, 2001, 03:54:50 PM

Title: Possible Bug FTP
Post by: Michiel on June 07, 2001, 03:54:50 PM

Or I'm doing something wrong ofcourse,

But I can't seem to CHMOD from my FTP client.
It is possible to change permisions from the command prompt, but I would like to change the permissions from my FTP client. This is much more convenient.

Thanks in advance for any ideas.

Michiel

Title: Re: Possible Bug FTP
Post by: Benny Andersen on June 11, 2001, 04:12:01 AM

Hi
For security reasons E-Smith does not allow you to chmod via FTP, I am not sure the reason for this but I do remember reading some where on the forum this is the case.

Benny

Title: Re: Possible Bug FTP
Post by: Michiel Boterenbrood on June 11, 2001, 03:23:16 PM

Benny,

thanks for the reply.

Does anybody now how to overcome this limitation, or if it will be changed in future versions???

Thanks in advance,

Michiel

Title: Re: Possible Bug FTP
Post by: Ross Laver on June 12, 2001, 06:45:51 AM

>Does anybody now how to overcome this limitation

It seems odd (unfair, in fact) to decribe as a limitation something that was done for security reasons. Please see the security whitepaper:

http://www.e-smith.org/docs/papers/e-smith-security.html

> or if it will be changed in future versions???

Unlikely, I would think. Of course, you're free to modify the software as you see fit. Please keep in mind that any changes you make may render your server vulnerable to compromise.

Ross

Title: Re: Possible Bug FTP
Post by: Michiel on June 12, 2001, 11:20:35 AM

Can someone then please explain to me why almost all ftp servers (that are used to update web content) support chmod'ing???
If it's such a huge security risk, then all those www serving companies should have disabled it as well!!

Michiel

Title: Re: Possible Bug FTP
Post by: Bobby on June 13, 2001, 06:55:23 PM

Off the top of my head, I'd hope that www serving companies would have someone monitoring security regularly. Since e-smith is targeted at smaller companies who want more of a set it and forget it product, extra security measures seem to be in order. e-smith customers are not likely to be checking for suspicious activity all the time.