FTP - False Shell - Chroot????

[Thomas Yake]

I have been searching through several of these FTP security issues including the one on

http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0x90f6a12d6d27d5118fef0090279cd0f9,00.html

I have the shell properly restricted to ftp. However, I would like to restrict the path that the user can navagate.

I have tried adding the /./ to the end of the users home directory and that does not seem to do anything:

#ftp:JA9D0LHFC8PJ2:500:500:anonymous ftp:/home/ftp:/usr/bin/false
booger:z2jOibe4mGdh2:501:500:Guest Account:/home/ftp/./:/usr/bin/false

ftp was a previously established anonymous account per `man ftpd`.

/usr/bin/false is in /etc/shells. the 500 guest group is listed as ftponly in /etc/ftpd/ftpaccess. What am i missing here?

[Joseph C. Denman]

If you are using hpux 11.0, You can set up an ftpaccess file.

man ftpaccess

...jcd...

[Chris Calabrese]

The user probably isn't in 'guestgroup' in the ftpaccess file.

[Thomas Yake]

I think have reached a turning point. It was a matter of modifying /etc/inetd.conf to start the ftpd with a -a to read the /etc/ftpd/ftpaccess file. Then issueing an inetd -c to reread the /etc/inetd.conf file.

Now it should be just a matter of restricting the access file to my liking.

BTY: http://www.wu-ftpd.org/HOWTO/guest.HOWTO is linix based but a pretty good resource.

Thanks for the help!!!!!