LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   ftpchroot isn't making a difference (https://www.linuxquestions.org/questions/linux-networking-3/ftpchroot-isnt-making-a-difference-31737/)

CozyMel 10-02-2002 04:21 PM

ftpchroot isn't making a difference
 
Hey all, I've got to figure this out!

I have this server that I'm told get up and running as a Web/FTP server- no, I know nothing of Linux and I have patches of hair missing from my head. I've worked for 4 days straight on this, and I'm about to throw the darned thing out onto the pavement!

What I've got -

Linux RedHat 7.1
wu-FTP (came with build)
Apache (came with build)

I've got Web up and running sufficiently wonderful :)

I've got users who can FTP into their HOME directory which I've successfuly changed to the /var/www/~website directory and they can upload and download just fine. Only problem is they can CD upwards - not too secure.

~I've tried to change the permissions using chmod (this ends up denying http access)
~I've tried to activate the ftpaccess file and adding the line "restricted-uid mailmonkey"(no matter how many times try retyping and minimizing the file, it denies FTP access completely...hmph!)
~I've created the ftpchroot file and added usernames, resarted FTP, resarted the entire server even, but it doesn't seem to make a difference whether that file is there or not. I DON'T GET IT!!!!

If you can help, and clue me in on what I'm missing here, I'd be so happy that my hair might start growing back, and this headache might go away! I'd even kiss a duck! Every helpful thing I find (believe me, I've searched high and wide) can say two completely different things, and I don't know what to do!!!!

bsdjunkie 10-02-2002 04:47 PM

you know, one search on google with "linux ftp chroot jail" produced the following in like 2 seconds...

http://www.tldp.org/LDP/solrhe/Secur...p29sec296.html

CozyMel 10-02-2002 05:58 PM

looking at that page you gave me, it looks like this restricts everyone from that directory, I NEED to be able to access the same files from the WEB, so that the WEB site admins can update their pages...

Though, I haven't actually tried this suggestion yet....do you suppose it'll do what I want? (I know, I'm just looking for an easy answer and have decided to put this down for the moment and not look at another linux box until friday....)


All times are GMT -5. The time now is 04:01 PM.