Linux FTP/ Normal User Settings

AsadMoeen · 06-30-2010, 09:42 AM

Ah Hello.

I run a Game Server through Swift Panel on my Cent OS 5.3
I have installed proftpd for my User who accesses the game files. I run a mod on the game server and I don't want to let the FTP user download it or copy it with him. Means, I want to keep it safe.

Suppose "srv200" is the username. I assigned permissions on this user normally like xxx so that it cannot read/write but execute it. The Game Servers runs on this same user. But now what happens is this, FTP works fine and the user is not allowed to read/write but my mod isn't executed when I run the game server. Maybe because execution permissions are not there.

So what I want is, I just want to apply these permissions on FTP so that my server can run but not on the normal user permissions.

kbp · 07-01-2010, 03:03 AM

I think the only way would be to remove read and execute from the directory containing the file so s/he can't traverse - as long as they're not the owner of the directory

eg:

Code:

[me@xxxxxx tmp]$ ls -ld /tmp/test
drwx------. 2 root me 4096 2010-06-26 14:07 /tmp/test
[me@xxxxxx tmp]$ cd /tmp/test
bash: cd: /tmp/test: Permission denied

AsadMoeen · 07-02-2010, 01:57 AM

Well.

I had tried that already . Since the game server has to run under the same user so removing the read/exec permissions causes the mod not to run.

There must be some other way like it should apply different permissions on the FTP user rather than normal user

kbp · 07-02-2010, 02:45 AM

The only other way I can think of is to disable all downloads .. with vsftpd you can use 'download_enable=NO' ... this may be a bit restrictive though

AsadMoeen · 07-02-2010, 11:20 AM

Quote:

Originally Posted by kbp

The only other way I can think of is to disable all downloads .. with vsftpd you can use 'download_enable=NO' ... this may be a bit restrictive though

Yes that's quite restrictive, not a bit. Like people should be able to download some files at-least. Like the configs.

So some other way