[linux-elitists] pop/ftp and shell

Derek Vadala derek@cynicism.com
Thu Mar 30 11:43:41 PST 2000

On Wed, 29 Mar 2000, Don Marti wrote:

> On Wed, Mar 29, 2000 at 06:15:43PM -0800, Rick Moen wrote:
> > So, we make the ftpd chroot users to ~/ftptemp ?  ~/public_html ?
> Depends on how resistant to nuisance vandalism you want the account 
> to be. 

Well, I think I'm going to fool with keep a single userid with two
usernames. The /bin/false account will chroot to ~/public_html or some
other part of the web tree. Thanks Don for pointing out the issue with
ssh; this is really the kind of oversight I was looking for. I suppose one
could also set PermitRSAAuthenication to no, but that'd be no fun. 

As for the issue of the account with a shell being able to exercise full
control over the pop/ftp account: it seems moot to me. The idea is that
you're safeguarding against the compromise of system resources and not
the web site or e-mail of a specific user. Sure that would be nice too but
if those users insist on using insecure protocols like pop and ftp then
that's that. Besides when was the last time you heard of a non-targetted
attack aimed at data compromise and not resources?

Derek Vadala, derek@cynicism.com, http://www.cynicism.com/~derek

More information about the linux-elitists mailing list