Dotaz: Proftpd - omezeni uzivatele

[toxin]

Ahoj. Pouzivam proftpd na Debian Linux 2.6.11. Mam vytvoreneho systemoveho uzivatele browser1 s domovskym adresarem /tmp/ftp. Kdyz se prihlasim na ftp pod uzivatelem browser1 tak mi to spravne vleze do adresare /tmp/ftp. Problem je v tom, ze muzu ve stromove strukture vlezt vys do rootu. Potrebuji, aby adresar /tmp/ftp byl pro uzivatele browser1 nejvyssi ve stromove strukture. Nevite jak to udelat? Dekuji.

Odpovědi

[hele]

nejsem si 100% jisty, ale mel by to byt: DefaultRoot ~/

nevidim tu totiz nic jineho, tak snad je to ono.

[toxin]

Jsem zacatecnik :). Kam to mam napsat? Do /etc/passwd?

[hele]

aha, je to soubor proftpd.conf /etc/proftpd.conf nebo jine podobne umisteni.

[kozzi]

nee do /etc/proftpd.conf u me to vypada nejak takto:

# This is a basic ProFTPD configuration file (rename it to 
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName			"Nazev severu"
MasqueradeAddress		213.29.1.223 # pokud ses za NATem musis mit zaplou maskaradu
ServerType			standalone # typ serveru
DefaultServer			on
RequireValidShell		off # jestli potrebuje aby mel uzivatel platny typ shellu
# Port 21 is the standard FTP port.
Port				21 # na jakym to bezi portu
AllowForeignAddress 		on
DefaultAddress 213.29.1.223 10.134.173.189 127.0.0.1 # na jakych adresach to ma naslouchat
DefaultRoot /home/ftp/UK uk4c,!dave # zde je to kde prave nastavis nejvyssi uroven odkud neni uniku
# to uk4c znamena ze to plati pro uzivatele uk4c to !dave znamena ze pro uzivatele dave to neplati
# misto toho /home/ftp/UK si tam zadej tu tvoji cestu

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask				022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances			30

# Set the user and group under which the server will run.
User				nobody
Group				nobody

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.

# Normally, we want files to be overwriteable.
AllowOverwrite		on

# Bar use of SITE CHMOD by default
<Limit SITE_CHMOD>
  DenyAll
</Limit>

<Limit STOR CWD XCWD CDUP MKD>
	AllowAll
</Limit>
<Limit READ DELE WRITE DIRS>
	AllowUser	uk4c
</Limit>


# A basic anonymous configuration, no upload directories.  If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous /home/ftp/UK>
  User				ftp
  Group				ftp
#  DefaultRoot			/home/ftp

  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias			anonymous ftp

  # Limit the maximum number of anonymous logins
  MaxClients			10

  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin			welcome.msg
  DisplayChdir			.message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
</Anonymous>

[hele]

ano, vy to mate fixne, ale kdyz misto fixne defaultroot uzijete ~/ coz je domovsky adresar daneho uzivatele tak pro kazdeho uzivatele jej drzite v jeho prostoru a mimo nej se nedostane. pokud mate jen jednoho dva uzivatele tak to lze i fixne nastavenim plne cesty, ale kdyz je uzivatelu vice tak to dost dobre nejde.

[toxin]

Moc dekuji. Funguje to jak ma. Nastavil jsem DefaultRoot na ~/. Diky!