LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Secure FTP (https://www.linuxquestions.org/questions/linux-security-4/secure-ftp-261655/)

sachinh 12-02-2004 04:46 AM

Secure FTP
 
Hi All ,

We are using RedHat Linux , and wu-ftpd Version 2.6.1 . I want to chroot some of
the users . How do I do it ? Please help .

hari_seldon99 12-02-2004 05:25 AM

Firstly, use proftpd instead, it's more secure than wu-ftpd.

Secondly, all settings for proftpd (& I imagine wu-ftpd also) is there in the config file (for proftpd, it's /etc/proftpd.conf). These config files are well commented and it should be no problem to just read them.

As an example, the "chroot jail" option (which is what u want I guess) in proftpd is located in line 35 of /etc/proftpd.conf, in the DefaultRoot variable:

Default root can be used to put users in a chroot environment.
As an example if you have a user foo and you want to put foo in /home/foo
chroot environment you would do this:
DefaultRoot /home/foo foo

Also, if u don't want to do it the hard way, there are webmin modules for both proftpd and wuftpd that allow you to config the servers using a nice interface thru any standard web browser. Install the webmin webserver package (firewall it for security), and log into it using your browser pointing to your localhost (google and check their website for detailedI know that you can easily chroot jail users in the proftpd module. I'm sure it is possible in wu-ftpd as well. I believe there are GUI's that do this also, but I haven't used them.

Krugger 12-02-2004 05:34 AM

Don't know if wu-ftp gives you that feature. So you might need to chroot everything, so I guess it would be all users.

Anyway take a look at http://www.securityfocus.com/infocus/1404

It might have something for you.


All times are GMT -5. The time now is 11:51 AM.