LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices


Reply
  Search this Thread
Old 02-18-2004, 06:54 PM   #1
pioniere
Member
 
Registered: Dec 2002
Location: Vancouver Island, Canada
Distribution: Slackware
Posts: 46
Blog Entries: 1

Rep: Reputation: 15
permissions/ownership on /var/ftp for vsftpd


I have set up vsftpd on my RH 9.0 server. We are allowing anonymous read-only access to our network users. I am able to successfully get connected to the ftp server via anonymous.

The problem is with placing files in the default /var/ftp directory tree. Currently /var/ftp is owned by root:root, permissions drwxr-xr-x. The only way to move files into that directory at the moment is as root.

Obviously, we would like to be able to have regular users (i.e., with local accounts on this box) to be able to move files into this location, but we don't want to have to give them root access to do it.

I have been able to find scant little documentation on this aspect. What is the best way to set this up? Should I chown and chgrp /var/ftp to another user/group? What user/group should I use? What should the default permissions on /var/ftp be? What should the default permissions be on subdirectories within /var/ftp?

Thanks in advance for advice on this.
 
Old 02-19-2004, 01:40 PM   #2
ferreter
Member
 
Registered: Oct 2002
Location: USA, IL
Distribution: Debian/Gentoo/Slack
Posts: 215

Rep: Reputation: 30
chmod 666 /var/ftp
should give read/write (not excecute) perms. on the drive for regular users.
 
Old 02-19-2004, 03:00 PM   #3
pioniere
Member
 
Registered: Dec 2002
Location: Vancouver Island, Canada
Distribution: Slackware
Posts: 46

Original Poster
Blog Entries: 1

Rep: Reputation: 15
Ah, thats the tricky part! If the directory is writable, vsftpd kicks back an error when you try to connect as a client:

Code:
Response:	500 OOPS: vsftpd: refusing to run with writable anonymous root
Error:	Unable to connect!
 
Old 02-19-2004, 03:38 PM   #4
ferreter
Member
 
Registered: Oct 2002
Location: USA, IL
Distribution: Debian/Gentoo/Slack
Posts: 215

Rep: Reputation: 30
hmm, then perhaps you will need to add an anyonymous group to the system, change the settings for vsftpd to allow that group write access, assign people which need write access to that group and chown the directory for that group. But let me ask you this, why can you not create an upload directory /var/ftp/upload (or something like that) and instead of working with the entire ftp directory just work with the isolated directory to reduce the chance of jazzing up the permissions or making things insecure?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Permissions & Ownership Really screwed slacard Other *NIX 1 04-03-2005 12:36 AM
VSFTPD Umask options and ownership dkrysak Linux - Software 0 09-10-2004 07:30 AM
Question about ownership/permissions infornography Linux - Newbie 7 07-28-2004 05:57 AM
ownership of /var/www/html haobaba1 Linux - Security 1 08-04-2003 02:58 PM
write permissions / ownership bynaar Slackware 15 08-08-2002 04:25 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat

All times are GMT -5. The time now is 04:44 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration