create limited user freebsd

jack111 · 02-04-2009, 03:18 AM

I would like to create a very limited user in freebsd and chown a folder for this particular user.
The user will need to have ftp access to this folder.
This user is going to be used by the public so the access needs to be very limited.
what is the best way to go about setting this up.

indienick · 02-05-2009, 12:24 PM

Try looking into "chroot environments". If that doesn't satisfy your needs, try creating the user by specifying their home directory when you issue the "useradd" command, that way, when someone logs in with that account, via FTP, they go straight to that folder (it does not necessarily have to be in "/home" or "/usr".

jack111 · 02-06-2009, 04:24 AM

thanks for the replies.
I run apache and php mysql on the server. Can an user upload an php file and cause problems ie hack into the server.

indienick · 02-06-2009, 07:36 AM

Okay - you definitely need to look into "chroot" environments.

When someone transfers a file, via FTP, to the server, chances are you are going to want them to upload it to their home directory. chroot environments "change root" so, instead of the user existing at /home/user on the actual filesystem, they will exist at /home/user, but it will look as though they are at the root directory (/).

This way, you can control the tools/commands they have access to and they can do no harm to the system - only the chroot environment.

anomie · 02-06-2009, 02:32 PM

Quote:

Originally Posted by jack111

I would like to create a very limited user in freebsd and chown a folder for this particular user.
The user will need to have ftp access to this folder.
This user is going to be used by the public so the access needs to be very limited.
what is the best way to go about setting this up.

Start by reading here: http://www.freebsd.org/doc/en_US.ISO...twork-ftp.html

I recommend using the base system ftpd. Read the manpages for ftpd(8) and ftpusers(5). Post back if you have questions.

[ Personally, I would put this entire service in a FreeBSD Jail, but that has a learning curve associated with it. ]

jack111 · 02-07-2009, 03:23 AM

thanks for the replies.
will this do what I am looking for
http://www.pureftpd.org/project/pure-ftpd

da1 · 02-07-2009, 03:32 AM

yup, pure-ftpd will do the job for you (as long as you set "YES" to "ChrootEveryone" in the pure-ftpd.conf file).

a jail would be the way to go, but it would be a waste of time, as pure-ftpd does this as well. (someone corect me if I'm wrong)