FTP question

[Scott Guy_2]

Ok,
I've set up a new user who needs FTP access to send some daily billing files. I assigned them a restricted shell (/bin/rksh) and made their "home" directory the directory where they should drop the files.
In my testing, if I simply telnet and login as that user, I can't change directory to any other directory, which is the way I want it. BUT, via FTP, I can traverse all the way down to root and anywhere else. I need to prevent that.
Any tips?

[Sanjay_6]

Hi Scott,

Use ftpaccess to control the id behavior,

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000073094324

The itrc doc id is KBRC00008355.

Hope this helps.

Regds

[Steven E. Protter]

ftp can be set up with chroot as well.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=81322

http://www6.itrc.hp.com/service/james/dispDoc.do?docURL=http%3A%2F%2Fsearch.hp.com%2Fredirect.html%3Furl%3Dhttp%253A%2F%2Fforums1.itrc.hp.com%2Fservice%2Fforums%2Fquestionanswer.do%253FthreadId%253D4656%26qt%3D%252Bftp%2B%252Bftpaccess%2B%252Bchroot%26hit%3D2&aid=SEARCH_FORUMS&pil=2&serStr=ftp+ftpaccess+chroot&pir=2

http://www6.itrc.hp.com/service/james/dispDoc.do?docURL=http%3A%2F%2Fsearch.hp.com%2Fredirect.html%3Furl%3Dhttp%253A%2F%2Fforums1.itrc.hp.com%2Fservice%2Fforums%2Fquestionanswer.do%253FthreadId%253D580292%26qt%3D%252Bftp%2B%252Bftpaccess%2B%252Bchroot%26hit%3D3&aid=SEARCH_FORUMS&pil=3&serStr=ftp+ftpaccess+chroot&pir=3

One of those should do it.

Bastille will provide instructions for ftp chroot access as well if you run it against your server.

SEP