ftp issue

[常有慈悲心]

How i can disable ftp access of root ,and others account can ftp libertily ?

[twang]

On a secure system, these users should be inserted into the /etc/ftpd/ftpusers file. Remove 'root' entry to disable root to use ftp:

# cat /etc/ftpd/ftpusers
operator
root (remove it)
daemon
bin
sys
adm
uucp
lp
nuucp
hpdb
www
#

If your /etc/ftpd/ftpusers is blank, insert the other users into it.

[Con O'Kelly]

Hi


Put root entry in
/etc/ftpd/ftpusers file.

Any login name listed in ftpusers is DISABLED from using ftp.

Cheers
Con

[Keith Bevan_1]

You may find additional useful ftp information on the man pages.

Just type :-

man ftpusers

man ftpaccess


Keith

[Tim Adamson_1]

Add root to the /etc/ftpd/ftpusers file.

If root is in that file, root can not ftp to that server.


Tim

[RolandH]

If you want prevent root user to ftp to your system than create a file /etc/shells.

put in all shells which are used from users.

ie.

# cat /etc/shells
/usr/bin/ksh
/usr/bin/sh
/usr/bin/csh
/usr/bin/tcsh
/usr/local/bin/bash

All these users, who are using these shells are able to do ftp to your system. the root user has always /sbin/sh shell. This shell is missing in /etc/shells in my example so root can not ftp to your system.

If you have more than one root accounts (in some admin areas configured) like this:

root:XXXXXXXXXXX:0:3::/:/sbin/sh
RolandH:XXXXXXXXXXX:0:3::/:/sbin/sh

Then the account RolandH is not able to do ftp to your system, too. You must not add these user to /etc/ftpd/ftpusers.
/etc/shells must have only read rights and shoul belong to root:sys . All others are free to use ftp to this system.


HTH
Roland