Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Uros on February 14, 2003, 05:02:22 PM

Title: hidding the contents of FTP directory
Post by: Uros on February 14, 2003, 05:02:22 PM

Is it possible to hide the contents of directory from users.
I would like to use one FTP account for uploads and for security reasons, I don't wont the users to see what's in these directory (even the file they have just uploaded).

Title: Re: hidding the contents of FTP directory
Post by: Terry Brummell on February 14, 2003, 05:07:52 PM

Do a search on FTP Chroot, it's available from dungog.net.  It will allow you to lock a user into a directory, they cannot see the rest of the contents within the FTP.

Title: Re: hidding the contents of FTP directory
Post by: Uros on February 14, 2003, 05:33:28 PM

I'm already using Chroot and I'm very satisfied with it.
What I need is, when certain user logs in, he should not see the contents of his home directory. And when he uploads a file, he shouldn't see it either.

Title: Re: hidding the contents of FTP directory
Post by: Jáder Marasca on February 14, 2003, 07:45:44 PM

Try to change rights
I suggest to you remove R from owner ( carefull ) or from group  ( more easy to do/maintain )  and put  user XXX on group YYY. So none of users of group YYY can read files on that directory!

I´m guessing here! I NEVER TRIED THIS! Take note of previous rights!
I´m no responsabile for ... (bla bla bla!)

Title: Re: hidding the contents of FTP directory
Post by: Uros on February 14, 2003, 08:13:10 PM

That's it. Thx alot.
Is there any chance to prevent users fom executing anything in their home directory? If I take away X from the owner, then he can't log on.

Title: Re: hidding the contents of FTP directory
Post by: Nathan Fowler on February 15, 2003, 01:22:20 AM

You could set octal permissions on the chmod command to allow only root to execute this command, therefore, users would not be able to chmod the files as executable in their home directory, this would prevent execution of most scripts, however, you may want to lock down perl as well because a crafty user could create a perl script to chmod.  Same goes with any other language on the system, such as Python, etc.

Nathan