Portál AbcLinuxu, 26. dubna 2024 20:24
# This file controls the behavior of the wu-ftpd # ftp server. # # If you're looking for a graphical frontend to # editing it, try kwuftpd from the kdeadmin # package. # Don't allow system accounts to log in over ftp deny-uid %-99 %65534- deny-gid %-99 %65534- allow-uid ftp allow-gid ftp # Chroot all users to their home directory by default # (comment this out if you don't want to chroot most of your users) guestuser * # If you wish to allow user1 and user2 to access other # directories, use the line below: # realuser user1,user2 # The ftpchroot group doesn't exist by default, this # entry is just supplied as an example. # To chroot a user, modify the line below or create # the ftpchroot group and add the user to it. # # You will need to setup the required applications # and libraries in the root directory (set using # guest-root). # # Look at the anonftp package for the files you'll need. guestgroup ftpchroot # User classes... class all real,guest,anonymous * # Set this to your email address email root@localhost # Allow 5 mistyped passwords loginfails 5 # Notify the users of README files at login and when # changing to a different directory readme README* login readme README* cwd=* # Messages displayed to the user message /welcome.msg login message .message cwd=* # Allow on-the-fly compression and tarring compress yes all tar yes all # Prevent anonymous users (and partially guest users) # from executing dangerous commands chmod no guest,anonymous delete no anonymous overwrite no anonymous rename no anonymous # Turn on logging to /var/log/xferlog log transfers anonymous,guest,real inbound,outbound # If /etc/shutmsg exists, don't allow logins # see ftpshut man page shutdown /etc/shutmsg # Ask users to use their email address as anonymous # password passwd-check rfc822 warn
, je tam spousta informaci, staci si je jen precist.
-- i blikajici zarivka. 
Ale pokud clovek updatuje na posledni stable verzi a trosku si pohraje s nastavenim konfigu, tak IMHO je riziko prijatelne. Samozrejme -- je treba vzdy pocitat s tim, ze ftp zpristupnuje cast diskoveho prostoru po siti a ze to tedy je vzdy potencionalni bezpecnostni problem. Muzu rict, ze z duvodu potreby docela krute slozite konfigurace nekolika ftp sajtu jsem si pftpd docela oblibil, da se v nem opravdu realizovat temer cokoliv :)
P.S.: a pokud jde o tzv. very secure daemons -- zle jazyky tvrdi, ze v nich ty chyby jen jeste nikdo neobjevil 
Tiskni
Sdílej:
ISSN 1214-1267, (c) 1999-2007 Stickfish s.r.o.