topic Re: FTP security in Operating System - HP-UX

FTP security

Dieter Degrendele — Wed, 06 Dec 2000 11:03:03 GMT

Hi,

I have a little security problem for FTP sessions. I have a directory called /X/Y/Z and created an account ftpuser whose homedir is /X/Y/Z. Everything ok so far. But I would like that this user can only see /X/Y/Z and not other files/directories. How do I set it up?

Thanks,
Dieter

Re: FTP security

Carol Garrett — Wed, 06 Dec 2000 11:35:43 GMT

you want to changed the ftpd entry in inetd.conf to add in the -a option (see man ftpd) which allows use of the ftpaccess file (see man ftpaccess) which allows you to restrict incoming ftp sessions to particular directories only (no changing dirs once logged in).

Re: FTP security

James R. Ferguson — Wed, 06 Dec 2000 14:06:35 GMT

Dieter:

I think you will find document #A5651654 helpful. It's relative to 11.0 and describes how to prevent a FTP-only user from moving outside of his/her HOME directory.

...JRF...

Re: FTP security

Dieter Degrendele — Wed, 06 Dec 2000 16:37:45 GMT

Hi James,

Where do I find this document?

Re: FTP security

James R. Ferguson — Wed, 06 Dec 2000 16:54:52 GMT

Dieter:

Click "Maintenance and Support" -> "Search Technical Knowledge Base" -> [Choose] "Search by Doc. Id" and provide the document ID.

Anyway, here it is as an attachment for your convenience! Hope this helps, regards, Jim.

...JRF...

Re: FTP security

James R. Ferguson — Wed, 06 Dec 2000 16:56:41 GMT