topic Re: vsftpd access in Operating System - Linux

vsftpd access

nanoux — Wed, 26 Nov 2008 10:38:10 GMT

using RHEL 3.0 vsftpd server :
question:
how to set permissions so that a user can upload/download and read files, but they can't DELETE files or edit them

Re: vsftpd access

Steven E. Protter — Wed, 26 Nov 2008 13:21:56 GMT

Shalom,

Pretty much can't do that.

If they have write access to the directory to create (upload) files then they can delete files as well.

SEP

Re: vsftpd access

Ivan Ferreira — Wed, 26 Nov 2008 14:11:00 GMT

Probably, you could use:

cmds_allowed
local_umask
anon_umask

If you disallow the DELETE command, the user will be able to updload but not delete the file. But if the user can upload and overwrite the file, you won't be able to control the file "edition". So, you must prevent read access to the file after uploaded, use the *_umask parameters.

Don't forget to assing points.

Re: vsftpd access

Steven Schweda — Wed, 26 Nov 2008 14:41:21 GMT

> Pretty much can't do that.

It depends. The UNIX file system may not
distinguish between (over)write and delete
access, but an FTP server may do more. I
know nothing about vsftpd, but the standard
HP-UX FTP server allows some finer control,
at least for anonymous FTP. See, for
example, the last part of:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1290628