[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

RE: Off Topic - Setting up of FTP Server



So, is it possible to have the /ftp/software directory on another disk by
default ?? I don't mind having the whole of the /ftp structure on another
disk it just can't stay where it is on the main system as the disk isnt
large enough and I don't fancy reinstalling just for this :-)
Is there a config change I can make in proftpd.conf or something??

Regards
biscut

> -----Original Message-----
> From: redhat-install-list-admin redhat com
> [mailto:redhat-install-list-admin redhat com]On Behalf Of Kalum /
> Grendel
> Sent: 23 February 2001 00:12
> To: Redhat-Install-List Redhat  Com
> Subject: Re: Off Topic - Setting up of FTP Server
>
>
> On  Thu, 22 Feb 2001, biscut commented thusly,
>
> Hi Biscuit ,
>
> > > I have an FTP server set up (proftpd) and it works fairly
> well, but under
> > > the /ftp/pub directory I would like to be able to have a
> directory called
> > > "software" that is on another much larger hard disk...my
> question is how
> > > do I do this link so that it works from FTP, I have tried creating the
> > > symbolic link in the /ftp/pub directory (ln -s /dev/hdc1/software
> > > software) and this works when I cd from a terminal session
> however when I
> > > ftp to the server and then try to cd to the directory via the symbolic
> > > link then I get no such file or directory errors.
>
> Unfortuantely this is not possible because in anonymous logins , the user
> is chrooted to the /ftp/pub directory, ie the user cannot move below /ftp,
> ie he cant acess /. This is for obvious security reasons, ie if such
> symlinks were allowed to work, then a user can escape from that chrooted
> environment. ie if  he is allowed in to /dev/hdc1/software, then he can
> descend down and do all sorts of mischief etc.
>
> Heres the relevant section from the
> <http://www.proftpd.net/docs/proftpdfaq-full.html>
>
> Symlinks
>
> Symlinks will not work from within a chrooted area. The reason should be
> clear from a casual inspection of the nature of the chroot command. It is
> not possible to have a symbolic link to a directory which can't be reached
> beacuse it's outside of the current chroot. Work arounds to allow access
> to other parts of the file system include exporting the part of the
> filesystem to be accessed from inside the chroot and mounting via NFS,
> using hard file links or (on Solaris) using lofs to mount the directory
> via the loopback.
>
>        mount -Flofs /home/data1 /ftp/data1
>        mount -Flofs /home/data2 /ftp/data2
>
>
> Do the other people on this list know of anyother methods?
>
> Best Wishes,
> Grendel
>
>
> --
> .---------------------.---------------------.----{)--.
> | /"__ ._ _  _  _| _ |`- grendel lintux cx -'(]__/|| |
> | \__/ | (-'| |(_|(-'l_ `-===============-' [_]  .-: |
> `--------------------------------------------/|\/| |-'
>
> Confucious say:
> 	fool man climb tree to get cherries;  wise man spread limbs.
>
>
>
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]