Click to See Complete Forum and Search --> : ftp server permissions
PranksterO
03-10-2003, 07:58 PM
Ok Ive managed to get my ftp server up and running. I only have a few more questions about it. Ive followed the instructions found here to get the ftp up and running but its not really what I would like it to be. When I log into the server it sends me to a folder named after the user login name. I (the user) have full access to this folder. I can upload and delete files. I can also change my directory one level up. What I want the users to be able to do is just upload and download files. I dont want them to be able to delete files. This goes for anything they upload. Ive messed with file permissions but I cant seem to do much with that. Anyone know how? Thanks!
bandwidth_pig
03-10-2003, 08:18 PM
Sounds like what you want is a jail for users so they can't change out of the directory (chroot). I don't know which distro you are running, but you might want to take a look at :
http://en.tldp.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap29sec296.html
It might give you a good starting point on chrooting your ftp. As far as the permissions go, that is easy. Just chmod the file and remove the write access if you don't want them to be able to modify or delete.
PranksterO
03-11-2003, 02:04 AM
Im running RedHat 8.0 / wu-ftpd
That link you posted is the exact same tutorial I used to set this up.
The problem with taking away write permissions is that the user still cant upload. What I want the users to be able to do is upload files, but not be able to delete or modify the files in the same folder. I want this because I plan on having multiple of users logging on and uploading files, but I dont want a user to decide that they are going to delete the files. How would I set my server up for this?
PranksterO
03-12-2003, 12:26 AM
Someone has to know this. You guys are smart!
chrism01
03-12-2003, 01:19 PM
Dug around my books and found this:
You should have a file /etc/ftpaccess. In there, there can be an option "delete"; tells server whether clients can delete files: syntax:
delete <switch> <typelist>
switch =yes/no
typelist=anonymous,guest,real (any of)
Try a few tests with that. You'll need to restart the daemon I think between tests.
PranksterO
03-12-2003, 04:30 PM
Thank you! It worked without a problem.