vsftpd access

[nanoux]

using RHEL 3.0 vsftpd server :
question:
how to set permissions so that a user can upload/download and read files, but they can't DELETE files or edit them

[Steven E. Protter]

Shalom,

Pretty much can't do that.

If they have write access to the directory to create (upload) files then they can delete files as well.

SEP

[Ivan Ferreira]

Probably, you could use:

cmds_allowed
local_umask
anon_umask

If you disallow the DELETE command, the user will be able to updload but not delete the file. But if the user can upload and overwrite the file, you won't be able to control the file "edition". So, you must prevent read access to the file after uploaded, use the *_umask parameters.

Don't forget to assing points.

[Steven Schweda]

> Pretty much can't do that.

It depends. The UNIX file system may not
distinguish between (over)write and delete
access, but an FTP server may do more. I
know nothing about vsftpd, but the standard
HP-UX FTP server allows some finer control,
at least for anonymous FTP. See, for
example, the last part of:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1290628