Which ftp server software "chroots" users by default.
Hi
I'm looking to install an ftp server on a machine, one which combines the best security practices along with ease and speed of configuration. Ideally I am looking for software which locks users ( anonymous or users with accounts ) into their home accounts like a "chroot jail" by default and hence does not let them traverse across the file system. However, I do not want to have to compile the software from source with special "chroot" options / parameters as that is not one of my strong points ! Any advice on which software would be best suited for my purposes ? Thanks for the help. Regards, UC |
If I remember well, Proftpd jails users in chroot environment by default. But it should not be so painful in Vsftpd. I think you have not to compile from source, just edit the configuration file. There must be some examples in the documentation.
|
vsftp has chrooting as a config option. Not sure if it's default behavior, but doesn't really matter if it's in there
|
Great stuff ! Thanks a lot for the help gents. Will give Vsftpd a go.
Thanks again ! uc. |
uc, yes vsftp works great as that is what I am using. You can actually jail (chroot) everyone or a list, see this section in etc/vsftp/vsftp.conf
chroot_local_user=NO # users to NOT chroot(). chroot_list_enable=YES # (default follows) chroot_list_file=/etc/vsftpd.chroot_list so you can stick the users you want to root in that file and only chroot them. Lr |
Thanks sir-L ! So could I add user "anonymous" to the /etc/vsftpd.chroot_list file as well or should I alter the specific line in the vsftp.conf file which will allow for chrooted "anonymous" login ? Basically I would like anonymous and user logins but both in the "chrooted" environment.
Thanks uc |
"proftp" works and so does "fakeroot"
proftp installed with the xampp package and provides a Fake Root for FTP and the Apache Webserver. Since the Proftp install does the job, I have never had to use the "fakeroot" command. I just happened to notice it when I did apropos * Good Luck with your project |
Quote:
|
All times are GMT -5. The time now is 02:28 AM. |