topic Re: Remove chmod command from ftp in Operating System - HP-UX

Remove chmod command from ftp

DLH — Tue, 30 Apr 2002 20:01:02 GMT

I want to remove the chmod command from ftp per audit requirements. We are using hpux 11.0 which has a version of ftp that appears to be similar to WU-FTP. I copied the ftpaccess file from the /usr/newconfig/etc/ftpd directory to /etc. I then modified /etc/inetd.conf to add the -a option to ftpd and then ran the command inetd -c to read in the new inetd.conf configuration. I now can't ftp to the server. Obviously I need to make some modifications to the ftpaccess file to 1) allow ftp into the server and 2) to disable chmod. Chmod is the only ftp command that I want disabled for ftp. What am I missing here

Re: Remove chmod command from ftp

Uday_S_Ankolekar — Tue, 30 Apr 2002 20:09:36 GMT

Hi,

You can configure chmod yes/no capability in ftpacesss.

I never tried it though but I think that's the way

Man ftpaccess for more info

-USA..

Re: Remove chmod command from ftp

Craig Rants — Tue, 30 Apr 2002 20:09:56 GMT

Look at using the ftpaccess file, specifically
Permission Capabilities of chmod yes|no typelist.

This info should be in the ftpaccess manpage.

GL,
C

Re: Remove chmod command from ftp

DLH — Tue, 30 Apr 2002 21:57:24 GMT

I still don't have an answer why adding the ftpaccess file to /etc and then forcing ftp to read this file by adding the -a switch to ftp in the inetd.conf file causes ftp to break!

Re: Remove chmod command from ftp

Chris Chasteen — Tue, 30 Apr 2002 22:16:33 GMT

ftpaccess should be in /etc/ftpd

Re: Remove chmod command from ftp

DLH — Wed, 01 May 2002 13:31:36 GMT

Good catch Chris. The reason that ftp broke was that it was looking for the ftpaccess file but it wasn't finding it in the correct directory. Stupid mistake by me and 10 points for you.
I have a new problem. The ftpaccess file has chmod set to no but the file says that this command defaults to yes (which I have confirmed). How do I say no to chmod and have it really mean no? Here is the portion of the ftpaccess file that I'm looking at....

# all the following default to "yes" for everybody
delete no guest,anonymous # delete permission?
overwrite no guest,anonymous # overwrite permission?
rename no guest,anonymous # rename permission?
chmod no guest,anonymous # chmod permission?
umask no anonymous # umask permission?

Re: Remove chmod command from ftp

DLH — Wed, 01 May 2002 14:33:06 GMT

I found answers to all of my questions. I just needed to add 'real' to the chmod line in ftpaccess. Thanks for all the help.