Remove chmod command from ftp

[DLH]

I want to remove the chmod command from ftp per audit requirements. We are using hpux 11.0 which has a version of ftp that appears to be similar to WU-FTP. I copied the ftpaccess file from the /usr/newconfig/etc/ftpd directory to /etc. I then modified /etc/inetd.conf to add the -a option to ftpd and then ran the command inetd -c to read in the new inetd.conf configuration. I now can't ftp to the server. Obviously I need to make some modifications to the ftpaccess file to 1) allow ftp into the server and 2) to disable chmod. Chmod is the only ftp command that I want disabled for ftp. What am I missing here

[Uday_S_Ankolekar]

Hi,

You can configure chmod yes/no capability in ftpacesss.

I never tried it though but I think that's the way

Man ftpaccess for more info

-USA..

[Craig Rants]

Look at using the ftpaccess file, specifically
Permission Capabilities of chmod yes|no typelist.

This info should be in the ftpaccess manpage.

GL,
C

[DLH]

I still don't have an answer why adding the ftpaccess file to /etc and then forcing ftp to read this file by adding the -a switch to ftp in the inetd.conf file causes ftp to break!

[Chris Chasteen · Accepted solution]

ftpaccess should be in /etc/ftpd

[DLH]

Good catch Chris. The reason that ftp broke was that it was looking for the ftpaccess file but it wasn't finding it in the correct directory. Stupid mistake by me and 10 points for you.
I have a new problem. The ftpaccess file has chmod set to no but the file says that this command defaults to yes (which I have confirmed). How do I say no to chmod and have it really mean no? Here is the portion of the ftpaccess file that I'm looking at....


# all the following default to "yes" for everybody
delete no guest,anonymous # delete permission?
overwrite no guest,anonymous # overwrite permission?
rename no guest,anonymous # rename permission?
chmod no guest,anonymous # chmod permission?
umask no anonymous # umask permission?

[DLH]

I found answers to all of my questions. I just needed to add 'real' to the chmod line in ftpaccess. Thanks for all the help.