Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Feb 2001 14:29:07 -0500 (EST)
From:      Matt Piechota <piechota@argolis.org>
To:        Rob Simmons <rsimmons@wlcg.com>
Cc:        <George.Giles@mcmail.vanderbilt.edu>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: ftp access
Message-ID:  <Pine.BSF.4.31.0102281426470.457-100000@cithaeron.argolis.org>
In-Reply-To: <Pine.BSF.4.33.0102271738250.82118-100000@mail.wlcg.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 27 Feb 2001, Rob Simmons wrote:

> /sbin/nologin as the user's shell.  You also have to add this shell to
> /etc/shells

I though the idea of nologin was to deny access.  Wouldn't you want to
copy nologin to /sbin/ftponly (or something) and put that in /etc/shells?
That way you have 3 step: telnet+ftp (tcsh, bash, etc), ftp only
(/sbin/ftponly), and no access (/sbin/nologin).

-- 
Matt Piechota
Finger piechota@emailempire.com for PGP key
AOL IM: cithaeron


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.31.0102281426470.457-100000>