upload file

[eric_204]

In my HP unix 11.0 system , user can use ftp to upload any format of file to the system , how can I restrict the user can only upload a specific format of file ( eg. .txt) to the system ? thx.

[KapilRaj]

Wrap "ftp" in a shell script and give it to the user

I can not think of anything else now !

Kaps

[G. Vrijhoeven]

Hi erik,

I am not sure if you can restrict on file format. It looks easy to bypass this just renaming the file to txt.

You can start with restricting the server so only specific users can access the system. ( man ftpusers) besides that you can configure ftpaccess with the ftpaccess command. This takes an extra option in the /etc/inetd.conf file in the ftp line. (-a) and you can make accounts changerooted. For a detailed description do a search on the forum. There are several threats in this subject.

Hope this helps.

Gideon

[Bill Hassell]

There are no filetypes in Unix. A file (other than special files like directories, devicefiles or FIFOs, etc) is simply a string of characters which have meaning only to the program which created it and programs that know how to read it. There is nothing in Unix that makes .txt )or any other ending to a filename) special. That is a PC concept, and even there, you can rename any file to have a different ending (type extension) and mess up the automatic scheduling of an appropriate tool to read/write the file.

If you have users that are not familiar with the differences between Unix and PC's (or Mac's or mainframes, etc) it would be better that they are not allowed direct access to these machines. Instead, you can write special wrapper programs to perform the required checks and then schedule ftp from within the program after verufying the format of a file.

[Mic V.]

In addition to everything else that's been said: UNIX doesn't have a concept of file types, but it's not based on extension/suffix like it is in the Microsoft world. You can use the "file" command (which reads file "type" definitions found in the /etc/magic file) to determine some things about what's in a given file.

You could possibly embed the "file" command into a wrapper to perform one check on the type of data.

I also want to point out that it's possible to write a script/program for the HP server that "catches" Email and writes it to a file. This eliminates the need for FTP. I use this frequently for file transfer. Check out the use of "|" in your mail aliases file (typically /etc/mail/aliases).

Mic