vsftpd config

[Paul Howarth]

On Thu, 2005-07-28 at 21:42 +0200, Alexander Dalloz wrote:
> Am Do, den 28.07.2005 schrieb Will Yardley um 21:26:
> > On Thu, Jul 28, 2005 at 07:27:13PM +0200, Alexander Dalloz wrote:
> > > Am Do, den 28.07.2005 schrieb Marcel Janssen um 19:13:
>  
> > > > I'd like to open vsftp for anonymous users to write. I just need
> > > > that for a short moment so that someone can upload something.
> >  
> > > Can't you just create a specific user for that purpose? Not to ship
> > > around your configuration problem, but for safety. FTP servers open
> > > for anonymous write are quickly misused.
> > 
> > Proftpd, at least, has some great options to make this less likely.
> > Preventing MKDIR and LIST (and maybe RETR), for example, in the incoming
> > directory makes it a lot more safe.
> > 
> > w
> 
> Yes, I use such kind of a setup with both Proftpd and Pure-FTPd which
> makes uploads invisible in the incoming area as soon as the upload
> finished. The public area is just download enabled.

Me too (proftpd). I occasionally get files dumped in /incoming but the
poor kiddies can't download it from anywhere :-)

What the OP probably needs to do is:

# chcon -R -t ftpd_anon_rw_t /path/to/upload/directory

(see "man ftpd_selinux").

Paul.
-- 
Paul Howarth <paul at city-fan.org>