HPUX 11i ftp jailing

[Jayson Hurd_2]

I am trying to create an ftp account that is 'jailed' to a specific directory. Basically I want the user to log in via ftp and see /home/ftpuser as "/". They do not need to log in via ssh or telnet. I see there is this 'chroot' command, but it does not make sense for what I am trying to do. How do I accomplish this?

[Steven E. Protter]

choot jail makes a great deal of sense for this type of situation.

It keep the user from stepping up to root and obtaining configuration informaion on the server.

Always a good idea.

A discussion:
http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/5187-2216/5187-2216_top.html&con=/hpux/onlinedocs/5187-2216/00/01/113-con.html&toc=/hpux/onlinedocs/5187-2216/00/01/113-toc.html&searchterms=chroot%7cjail%7cftp&queryid=20031103-082116

You set the user shell to /sbin/false and you add chroot() to the ftpacess file for that user.

SEP

[Dave La Mar]

Jayson -
Attached is the documentation we use to set up a restricted ftp user.
I think you'll find what you need here.

Regards,
dl

[James A. Donovan]

http://www.wu-ftpd.org/HOWTO

check out the guestgroup/guest-root/restricted-uid directives for the ftpaccess file.